Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0
Analysis ID:	1501536
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish10

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1956,i,10511705917690303132,1472574361607435565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
129.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
129.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://jbiel.juniferkel.com/7dPYZLDD/?T	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/nz25xfCo76X19BHcn8js09FlPhyOdwSl8ECFoBSfaAVYxfwFEMM1v	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/rscncc1A2tRzKj5JFW7347JKEj0iwx40	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/efkswwaJvriBijPq7883bvnL92mkl100	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/455JAyHeJDhpnRG4qabOwqMtvw70	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/wxdCVlWMz1p0GmfBJYtzeLHnaYzQ7p4ovorsWMUlBmzcnZQhtdmWtMckI6zML81ab179	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/uvkQ2xWpJLBY4ebFyM96u8h0WToopM2NsaJRzoGjyft34124	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/qrsZ9ZHSzbrTjDXiS5gh6ucpNF264ucTgnf45140	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/opW67qXyrj6Vx0Tfu5cRa39uRp3UsvPq5fgh2uk0KSw6D3TMfkrP5uXt2IKef200	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/ef5BupA1T4rztVnyr0ruNDqth2l6ukl5crw4IG5ndRNVf78150	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/veI4Kcc6h76NYT7ohakGvgfGguuil	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/uvMEMIIDjC3KZhEOpsbyo6wIjPC8k4jqwn5T2F45lbtdSoa9U8ibIIUHrLKQ0GVOmEyuKT8exxefBQ7Ggh252	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/klv0sTI94w7vkqs63FdM1UYiCcpmwhfyGQJVMnu89hIoJJLgRLkP7MIXlmjgSGyz230	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/90j74ZsXkIQXMhSlf8aNJSOecdYj7fZv666ab75	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/ij4tOCwB8A3NcJeyVqokDoQUc9hGtUyzKtwoLStBK7J0jo78170	Avira URL Cloud: Label: phishing
Source: https://jbiel.juniferkel.com/56MF5q6GR6pPS23dW9tT189uv57	Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 129.7.pages.csv, type: HTML
Source: Yara match	File source: 129.8.pages.csv, type: HTML

HTML page contains suspicious base64 encoded javascript

Source: https://jbiel.juniferkel.com/7dPYZLDD/

HTTP Parser: Base64 decoded: <script>

Phishing site detected (based on image similarity)

Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg	Matcher: Template: microsoft matched
Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg	Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 28.1	OCR Text: Document (1) oacx & Share to... Log in Sign up File Edit View Help @ 175% O Page 1 ofl I @ Comment Rebecca Chester shared this file. Want todo more with it? Log In SISn up Rebecca Chester shared a document with you CLICK HERE TO VIEW DOCUMENT
Source: Chrome DOM: 28.3	OCR Text: Document (1) oacx & Share to... Log in Sign up File Edit View Help @ 175% O Page 1 ofl I @ Comment O Rebecca Chester shared this file. Want todo more with it? Log In Slgn up Rebecca Chester shared a document with you CLICK HERE TO VIEW DOCUMENT
Source: Chrome DOM: 28.2	OCR Text: Document (1) oacx & Share to... Log in Sign up File Edit View Help Share tom @ 175% O Page 1 ofl I @ Comment O Rebecca Chester shared this file. Want todo more with it? Log In SISn up Rebecca Chester shared a document with you CLICK HERE TO VIEW DOCUMENT

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

HTTP Parser: var websitenames = ["godaddy", "okta"];var capnum = 1;var appnum = 1;var view = "";var pagelinkval = "8uqr3";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "nz25xfco76x19bhcn8js09flphyodwsl8ecfobsfaavyxfwfemm1v";var gdf = "ijkozexdbr3qq2whhc43tohuauve6jb9cglc3a1v5atwqcd111";var odf = "ghse2tr7ekaa3uow9mgn4cycjujvuvhftnujehftab650";var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";let useragent = navigator.useragent;let browsername;let userip;let usercountry;var errorcodeexecuted = false;if(useragent.match(/chrome|chromium|crios/i)){ browsername = "chrome";} else if(useragent.match(/firefox|fxios/i)){ browsername = "firefox";} else if(useragent.match(/safari/i)){ browsername = "safari";} else if(useragent.match(/opr\//i)){ browsername = "opera";} else if(useragent.match(/edg/i)){ browsername = "edge";} else{ browsername="no browser detection";}function encryptdata(data) { const key = cryptojs.enc.utf...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0

HTTP Parser: Base64 decoded: " btb_folder_creation_experiment_1

HTTP Parser: Title: jnA1A26xbV0J06bF does not match URL

Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg	HTTP Parser: Invalid link: Terms of use
Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg	HTTP Parser: Invalid link: Privacy & cookies

HTTP Parser: <input type="password" .../> found

Source: https://jbiel.juniferkel.com/7dPYZLDD/	HTTP Parser: No favicon
Source: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg	HTTP Parser: No favicon

HTTP Parser: No <meta name="author".. found

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.16:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.16:49974 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.16:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.16:50046 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.231.128.59:443 -> 192.168.2.16:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:50089 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.226.254:443 -> 192.168.2.16:50090 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.113.200.164:443 -> 192.168.2.16:50092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:50093 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.136.2

Source: global traffic	HTTP traffic detected: GET /scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fop070xas0eh2p222upauu%2FDocument-1.docx&request_id=b6fdeea561174a0283f57db9afff9af2&time=1724980056 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fop070xas0eh2p222upauu%2FDocument-1.docx&request_id=b6fdeea561174a0283f57db9afff9af2&time=1724980056 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACaxr32MCDZLliMnRucPyvyVVFaYxSxWS2VtqqwZ119YXwJEqQchQ0lcQPU8REpCeyOcn6gZ7XHz1kztbctwLX56qmNTsPCtTHFqneSClewDrtgf6SCCW18K4FIqeeW0zU8ZJmZ3EPScyeLfYPebfv4q9VQP84V5bT5TcLL7WIfaWlTnbuDNNY55iT6f2SYwShr5bR7XaEoZayeKST4f6Rca8_qa-DDlWLdqCYtRH04GsplNy2Vt2OU3-YuWVvXEUOkLsGU-cGY0d5DPd5qNn4HQDvoqTolvN69pW56WM6AyvXAKkWIZmQJjmXp__d4ReLaZr2qC1aGKEvSLmAr10TnB_NdN_O_W7L_ehiy0PkotsgNuUNpg5Uabund4TCNPBZU/p.png?is_prewarmed=true&page=0 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /p/pdf_txt/ACaqfGiJxtuEL2L1y3PJWp9By3eRxQ-h6SJziSDPw8j4hw20KR6cyr016uvJVTBya9Xq5QUbzM69tOppnapiOuXhpCKMvKEeyg8cb2yMVQ45LpKgjyn0dS8NAo27jpaHJkXoF3xDl-zkrOQqENz4Oijhzix64BC4jSMacQRS_4NUDtqUQBlyRr0G_uUWirjdmQFyPoaY1L2A44-9g5wgUvTb8C6R6Le1675iuehMyLWuDwzW2pgSvtBQ7rJfLdaY2kvd1ZPWZAV6gGVhr32KsEYNHMBuSjMdqpK2_m1NBw6AWyyUQXDYQhmc1-fi6NXL8aOeY-URP2kd_7h2q-6MBNXY6QmWpMANlgzuqc0atCHvQnmHp_BXhxsikbzoyjLB8bM/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://www.dropbox.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /2/stickers/get_stickers HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
Source: global traffic	HTTP traffic detected: GET /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACaxr32MCDZLliMnRucPyvyVVFaYxSxWS2VtqqwZ119YXwJEqQchQ0lcQPU8REpCeyOcn6gZ7XHz1kztbctwLX56qmNTsPCtTHFqneSClewDrtgf6SCCW18K4FIqeeW0zU8ZJmZ3EPScyeLfYPebfv4q9VQP84V5bT5TcLL7WIfaWlTnbuDNNY55iT6f2SYwShr5bR7XaEoZayeKST4f6Rca8_qa-DDlWLdqCYtRH04GsplNy2Vt2OU3-YuWVvXEUOkLsGU-cGY0d5DPd5qNn4HQDvoqTolvN69pW56WM6AyvXAKkWIZmQJjmXp__d4ReLaZr2qC1aGKEvSLmAr10TnB_NdN_O_W7L_ehiy0PkotsgNuUNpg5Uabund4TCNPBZU/p.png?is_prewarmed=true&page=0 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=t7U4gm7uuTGkXYN&MD=gkkeT6SZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACaxr32MCDZLliMnRucPyvyVVFaYxSxWS2VtqqwZ119YXwJEqQchQ0lcQPU8REpCeyOcn6gZ7XHz1kztbctwLX56qmNTsPCtTHFqneSClewDrtgf6SCCW18K4FIqeeW0zU8ZJmZ3EPScyeLfYPebfv4q9VQP84V5bT5TcLL7WIfaWlTnbuDNNY55iT6f2SYwShr5bR7XaEoZayeKST4f6Rca8_qa-DDlWLdqCYtRH04GsplNy2Vt2OU3-YuWVvXEUOkLsGU-cGY0d5DPd5qNn4HQDvoqTolvN69pW56WM6AyvXAKkWIZmQJjmXp__d4ReLaZr2qC1aGKEvSLmAr10TnB_NdN_O_W7L_ehiy0PkotsgNuUNpg5Uabund4TCNPBZU/p.png?is_prewarmed=true&page=0&width=480 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/pdf_txt/ACaqfGiJxtuEL2L1y3PJWp9By3eRxQ-h6SJziSDPw8j4hw20KR6cyr016uvJVTBya9Xq5QUbzM69tOppnapiOuXhpCKMvKEeyg8cb2yMVQ45LpKgjyn0dS8NAo27jpaHJkXoF3xDl-zkrOQqENz4Oijhzix64BC4jSMacQRS_4NUDtqUQBlyRr0G_uUWirjdmQFyPoaY1L2A44-9g5wgUvTb8C6R6Le1675iuehMyLWuDwzW2pgSvtBQ7rJfLdaY2kvd1ZPWZAV6gGVhr32KsEYNHMBuSjMdqpK2_m1NBw6AWyyUQXDYQhmc1-fi6NXL8aOeY-URP2kd_7h2q-6MBNXY6QmWpMANlgzuqc0atCHvQnmHp_BXhxsikbzoyjLB8bM/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /share_tib_log_unauth HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/files/get_file_content_metadata HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/seen_state/logged_out/log_file_view HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=-xwrrYXX3LnJClmGw6Yfd7h0; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/comments2/logged_out/list_comments HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /p/pdf_img/ACaxr32MCDZLliMnRucPyvyVVFaYxSxWS2VtqqwZ119YXwJEqQchQ0lcQPU8REpCeyOcn6gZ7XHz1kztbctwLX56qmNTsPCtTHFqneSClewDrtgf6SCCW18K4FIqeeW0zU8ZJmZ3EPScyeLfYPebfv4q9VQP84V5bT5TcLL7WIfaWlTnbuDNNY55iT6f2SYwShr5bR7XaEoZayeKST4f6Rca8_qa-DDlWLdqCYtRH04GsplNy2Vt2OU3-YuWVvXEUOkLsGU-cGY0d5DPd5qNn4HQDvoqTolvN69pW56WM6AyvXAKkWIZmQJjmXp__d4ReLaZr2qC1aGKEvSLmAr10TnB_NdN_O_W7L_ehiy0PkotsgNuUNpg5Uabund4TCNPBZU/p.png?is_prewarmed=true&page=0&width=480 HTTP/1.1Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log/blocked HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=-xwrrYXX3LnJClmGw6Yfd7h0; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a75363d0418258491551ead6717ca895 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: t-ring-fallback-s2.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?3d4619f8959a0bb944ce9eb8ccf482ff HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: t-ring-fallback-s2.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=t7U4gm7uuTGkXYN&MD=gkkeT6SZ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /7dPYZLDD/ HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/7dPYZLDD/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdEZVJhNmhabWcrVDRCa1Z3aExoWGc9PSIsInZhbHVlIjoieDM1S25aUE9vV2dFTG9NRUFtNzk3SDNEMzBpaU9JYjlzcTZXMkp3UjV2MkdES2tybzR4OGMwaHVFdjYzYmdjVCs0WmJ1V3E2UjlvUUhXMHhJbk1FemxUcjVzNzd2YTlKRWJSNEdiUFU0RE90ZGdmUGI2cEpLaU13QnZiK0VvNmkiLCJtYWMiOiI0MWYwYzgwNWYzZjI0OGNlZTA5MmU0MDIyMzkwOTNmZGM5NDBjMTRkMzZjZTBiMGFlYmY4MGEwNjZiNjRjNmMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWbXBBWGZGM1N0eSsvSExVMEhUK2c9PSIsInZhbHVlIjoiWjNIQndidnY4ZU54QmRTc1RITmdGZmZTVDV0ZWVUcktFMFR1SjdyRVhoYW04NEQxS2RMNG1hU1BZT3cvaGpuSHBMZlFmeXdvTTBudWhRaFhQdFRzY2k0Q0Mxa28xV1MzRiszOEh3aUo5ekpQdkJzUEpQdjJ3Q3J3RmQ3VVU0NFoiLCJtYWMiOiI1ZTQxNTZjY2ZjM2NjZmVmYjlmM2VhZDJhMGUwYzFiZGIzZGEzMjkzYjJiN2ZhNjI1OWUzNmVhNjBhNmNkOWE3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /zrpsdwefrspclsbccpyzliccsprpiVRyEAZXCMAPOZQCVJPVNQUVJJTQKSRMWPCLVGXVLJLOWBJVNCCJFTAIVE HTTP/1.1Host: 4kbr.marigaiv.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://jbiel.juniferkel.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zrpsdwefrspclsbccpyzliccsprpiVRyEAZXCMAPOZQCVJPVNQUVJJTQKSRMWPCLVGXVLJLOWBJVNCCJFTAIVE HTTP/1.1Host: 4kbr.marigaiv.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplkl/0x4AAAAAAAhe25IQrAzZu7cb/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8bb0e4342ac243e2&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplkl/0x4AAAAAAAhe25IQrAzZu7cb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplkl/0x4AAAAAAAhe25IQrAzZu7cb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8bb0e4342ac243e2&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1555034625:1724977967:UyiVxB2LayEvcSkHXRmQJkmCM051keUS5viZCwGHyus/8bb0e4342ac243e2/179c7570a58d8c3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=-xwrrYXX3LnJClmGw6Yfd7h0; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8bb0e4342ac243e2/1724980126490/fcc7ad84adbe7939c16c179e0aa4e07782a628bc4906dee5d4f8e0c81c0998c5/y7zO49Oud3qX1FY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplkl/0x4AAAAAAAhe25IQrAzZu7cb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8bb0e4342ac243e2/1724980126491/U1lAc1DUxg8XbxN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplkl/0x4AAAAAAAhe25IQrAzZu7cb/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8bb0e4342ac243e2/1724980126491/U1lAc1DUxg8XbxN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1555034625:1724977967:UyiVxB2LayEvcSkHXRmQJkmCM051keUS5viZCwGHyus/8bb0e4342ac243e2/179c7570a58d8c3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1555034625:1724977967:UyiVxB2LayEvcSkHXRmQJkmCM051keUS5viZCwGHyus/8bb0e4342ac243e2/179c7570a58d8c3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7dPYZLDD/ HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jbiel.juniferkel.com/7dPYZLDD/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFoK0RrWStyUkhLQnNwNVRNekt3M0E9PSIsInZhbHVlIjoiRU9SWjVFL0hzRDlzUXg3ZVFWMmlLM2NxcFFCeDA3bG9GNFBmcHRNZ08zVlBsR3FBQnU4anhFLzc5WmJhOUNsRXlWbVRseWxZNXdXeThtTEI0cTdjSTZyemlhVGtkb2RURGU2MFlhdG5EZXRXbGhNNmZrd20xWjFqZGtMdWkyd0IiLCJtYWMiOiJmNWMxYzVhNWRlZThmY2Y5NGQ5ZTIyMWIwZTAyMWFkMmE3NjUxNDdjZjhlNjNmMzU2Y2Q3NDMzMWYzM2NiNDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlZoRTlIT2dkYW81UG1VS2MwQ1dPbGc9PSIsInZhbHVlIjoiMEtLZEE5UDFJc21nVFhtNTUwNkllcVZlVzVnVDlqYTRMZ25McE92K05hREE2ZDZsNEZJSkRDQ0k0NHVMQ09kbjZxbk1iVnRZc3pzWTBzeEdINU11M2t3L2NnbHdUblByRkZLRnpCWlBSTy8wRXE0NVNnYnNIeVhiR0tMc3dXbGwiLCJtYWMiOiI5M2YzMzlhZDdkZWQzZDQzMjVhNTJlZjE4ZDQxYzEzZjNlMWEzZjg3MjVjY2RlNTA0OWZhYmY5MzljNDEzODU2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /veI4Kcc6h76NYT7ohakGvgfGguuil HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFoK0RrWStyUkhLQnNwNVRNekt3M0E9PSIsInZhbHVlIjoiRU9SWjVFL0hzRDlzUXg3ZVFWMmlLM2NxcFFCeDA3bG9GNFBmcHRNZ08zVlBsR3FBQnU4anhFLzc5WmJhOUNsRXlWbVRseWxZNXdXeThtTEI0cTdjSTZyemlhVGtkb2RURGU2MFlhdG5EZXRXbGhNNmZrd20xWjFqZGtMdWkyd0IiLCJtYWMiOiJmNWMxYzVhNWRlZThmY2Y5NGQ5ZTIyMWIwZTAyMWFkMmE3NjUxNDdjZjhlNjNmMzU2Y2Q3NDMzMWYzM2NiNDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlZoRTlIT2dkYW81UG1VS2MwQ1dPbGc9PSIsInZhbHVlIjoiMEtLZEE5UDFJc21nVFhtNTUwNkllcVZlVzVnVDlqYTRMZ25McE92K05hREE2ZDZsNEZJSkRDQ0k0NHVMQ09kbjZxbk1iVnRZc3pzWTBzeEdINU11M2t3L2NnbHdUblByRkZLRnpCWlBSTy8wRXE0NVNnYnNIeVhiR0tMc3dXbGwiLCJtYWMiOiI5M2YzMzlhZDdkZWQzZDQzMjVhNTJlZjE4ZDQxYzEzZjNlMWEzZjg3MjVjY2RlNTA0OWZhYmY5MzljNDEzODU2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /7dPYZLDD/?T HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jbiel.juniferkel.com/7dPYZLDD/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im56dnBLTTRRN2t6ZFoxdFNtdE13R1E9PSIsInZhbHVlIjoiSmdqQ2tRQlJoNjFZWnNscWo2dWdLRFI4NFdweWFVMUNsaDEwWEliSVVMbnFTT0pHNHBMUDYzTVRCTnBBaGZiNnpaT1VrZTNnNlRaUENxbHcrQjVoMVc4cmI1YTRWbVZ6NE1vVDdDUXZ2ejBDOC9WUGc1c3hFZzhPRU5yN2xLb0ciLCJtYWMiOiIwZWI1ZTk2ZDM0N2EyMTMwOGM4ZmY2NmMwZTdlMzk5MDFjYzU2NGFkMDEyZWJkOGUwMmUzMjYyYTNiZmUxMDFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9xNmV0TjlRMW84K0c4OTEyUVhiV3c9PSIsInZhbHVlIjoiRFVhWFpjSkRHZDhFY0Eza2ZqVnNYNUE5czV2akNnS2FzaytPa0RneWtDZGdyQ3VQN1V1em4wUHM5YnpZRlVpODBacmlXaUJoOFY2Slc3aWoxWnM5TkI1YTczcDExZzl5c3hDSlcvbHhlMEhkdVpMN21td2daVVFUdkZVcFJDUngiLCJtYWMiOiIxOGVhOTliYjM0MjFiMDNhMTE5ZDExODliYTU5NWYwY2EwZTY4ZTE2ZDNhOTQyNGM3M2I1YTkwMmNhNTdmYjdiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlg HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://jbiel.juniferkel.com/7dPYZLDD/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImN1NC9hTmx5RnNla211eG5QRmZUcWc9PSIsInZhbHVlIjoiOEFSdTBzRCs0MVlKZmVZOEJTcTZpMHNOdFY2TDI3WWdKRTRoVVhtSmJONGlCNDgvQTRrZlh1c0xocys4L0RHQVFWTldDZCtuSFlOa3Fyc3gwNU9vNEZhcnNQVVdKZjVoZ1JSSDNWcXJTSFk2dlB1c3puc09PZklKYjFLOCtyekgiLCJtYWMiOiI5Y2JkMjBkNjY4NWJjMWVmODQzYTQ2YzBjMmI4NWMxNTM3ZTcxMmQ4MDVmYjczZjA3NzE0ZmJkNjc4ODg1ZjZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNTa2FWODViUG1FOVB2QkhwU1FwaHc9PSIsInZhbHVlIjoidlV1ZVpJc0xLdXJvNFJibzg4Skd5VkErTDFac09JS29MVitSWkFuQm15ajZFMTR0Qkp5RW9sRzRUcGhsVUoyWjFHYXdoYnFOc3o2S0FDeldadmZhQVl2ZWMzc3hmMmpLT3NQU2U3cmg1aUlWM1cxU05oK0wxWVdTSGZValVGM2ciLCJtYWMiOiJhMTRmMWNiODc0MjFjNGUxNWFhZTUxM2UzMTg4Yjg1Y2QzNTM1NTgyMjRmNDhmOTc1YjM3NDlhYjM4Nzg3YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12Afk96M3PU0jtaKcdBp18915 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abVc9CpotCrs7Tcd29 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rscncc1A2tRzKj5JFW7347JKEj0iwx40 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz2LTxIdyr78hqhASqr43 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56MF5q6GR6pPS23dW9tT189uv57 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /455JAyHeJDhpnRG4qabOwqMtvw70 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en; __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-08-30T01:07:44.009Z","expireDate":"2025-03-02T02:07:44.009Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240830%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240830T010858Z&X-Amz-Expires=300&X-Amz-Signature=3f49cfdad0a06edadbee1961e121f4eb9d95064252928ef67ca0f01810f172a0&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /90j74ZsXkIQXMhSlf8aNJSOecdYj7fZv666ab75 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efkswwaJvriBijPq7883bvnL92mkl100 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jbiel.juniferkel.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56OnLaTWZs2qgYeEuINgghdKQRtMnXZgsfP67110 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240830%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240830T010858Z&X-Amz-Expires=300&X-Amz-Signature=3f49cfdad0a06edadbee1961e121f4eb9d95064252928ef67ca0f01810f172a0&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klv0sTI94w7vkqs63FdM1UYiCcpmwhfyGQJVMnu89hIoJJLgRLkP7MIXlmjgSGyz230 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijDAet5fBRf4MqRhPVZJvhlny9x7COAXHx0xjhg5KRhAj4MH9y59CD2z1k2DLkAKET43aF16nqC8DTnwqsxyVGfgNAznqFYa7ZTDd4Mf56YZGWfE9V9KUbUzqoDGT1iL3R6Piy6QK4rzEFCdEDwR8QOy4oMurTX9QY2Vmr1yz660 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demhTnZzljxio2Eh7LDTgHoXB7Rgd3dirBpzEaR00fIOm8FOrva3sT5gx2gLFlC456hoav5ftuiOBFxrGjSriru8T2UpGBmphhRogEacGCwh3e9X0ifCuxTuGop666 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvkQ2xWpJLBY4ebFyM96u8h0WToopM2NsaJRzoGjyft34124 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrsZ9ZHSzbrTjDXiS5gh6ucpNF264ucTgnf45140 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klv0sTI94w7vkqs63FdM1UYiCcpmwhfyGQJVMnu89hIoJJLgRLkP7MIXlmjgSGyz230 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImkwYW1acXRCOHRtMDhwdTFaTExwQ2c9PSIsInZhbHVlIjoiWkJ5YUtkaWFxRU5EN2dIMlR1QkRrY3Z6N0tmR2t5WnM3TjVlSllRN3lPZkxUTmVuQ2xjUmIzaG11UkdyTlRla0FRWmtWT2w3eE5FTldoTDlsdk1EN3h6Umo5dnlEZzc0VUNtRGlteHJUektOcWU2Z2tWREtPMGtBNFM4UndmRDAiLCJtYWMiOiIyNzBkYjFhNjBiMDhlZWM1NmZlMTYwMWVhNmZkZjE0MzlhMTFkOWQ5OWZhZDNlYWI2NGE4YmVhYWJlMzk5MWNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik1kbDZPekhNalNpUjdWU3NxbFluclE9PSIsInZhbHVlIjoiOWw1TXJMUzdBMkZ6dHVNN0dyRnNjOE9TNVQ0RTNqY2VFUjZGSzlxemJCTnBGbWpEY2pUMUxMWjZ4NzBaOXVMYW00Qk9pT2R4dUlQOURvcHpPVlZQMGZtOFhrbGdXNDlaOEFVcW81dzNXUjI2dVNjWVhOVTZYdzlaandndGJTazciLCJtYWMiOiI3NzEzODc3NmFlYWI1OGFlNjY2MWI3N2ZhYmI3MmFlYWY5YzM4MjZiMjFlYjMyNGE5OTFiMDk0YTcwY2JmYTMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5BupA1T4rztVnyr0ruNDqth2l6ukl5crw4IG5ndRNVf78150 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nz25xfCo76X19BHcn8js09FlPhyOdwSl8ECFoBSfaAVYxfwFEMM1v HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij4tOCwB8A3NcJeyVqokDoQUc9hGtUyzKtwoLStBK7J0jo78170 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijDAet5fBRf4MqRhPVZJvhlny9x7COAXHx0xjhg5KRhAj4MH9y59CD2z1k2DLkAKET43aF16nqC8DTnwqsxyVGfgNAznqFYa7ZTDd4Mf56YZGWfE9V9KUbUzqoDGT1iL3R6Piy6QK4rzEFCdEDwR8QOy4oMurTX9QY2Vmr1yz660 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56OnLaTWZs2qgYeEuINgghdKQRtMnXZgsfP67110 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxdCVlWMz1p0GmfBJYtzeLHnaYzQ7p4ovorsWMUlBmzcnZQhtdmWtMckI6zML81ab179 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /demhTnZzljxio2Eh7LDTgHoXB7Rgd3dirBpzEaR00fIOm8FOrva3sT5gx2gLFlC456hoav5ftuiOBFxrGjSriru8T2UpGBmphhRogEacGCwh3e9X0ifCuxTuGop666 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opW67qXyrj6Vx0Tfu5cRa39uRp3UsvPq5fgh2uk0KSw6D3TMfkrP5uXt2IKef200 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij1NclFMfrimwYi3rAcRtrVKig2mnXcxmcVkGZoFsNIPeqMYFJef210 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvkQ2xWpJLBY4ebFyM96u8h0WToopM2NsaJRzoGjyft34124 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrsZ9ZHSzbrTjDXiS5gh6ucpNF264ucTgnf45140 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ophB5G3V4q5ezu1Y0LjBgRJ4sFtjOfASvvkcCxAjKMmuvM1ky4HCeLiVLIKVI3q8FQNLcd240 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMEMIIDjC3KZhEOpsbyo6wIjPC8k4jqwn5T2F45lbtdSoa9U8ibIIUHrLKQ0GVOmEyuKT8exxefBQ7Ggh252 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jbiel.juniferkel.com/ARTKNYTJJINQCTTTVXQYWURATZNSZRYKWUP117447947979199870551444967584290KJDRW997UXKLPOY6HBTIYMDUSYLOLU8?jrwnwlfvhwylddmtxsnopbvxrxhpvpug655623418286135143708891645378506421howarfyr06rbxk57bzmdhwyj7mxlgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5BupA1T4rztVnyr0ruNDqth2l6ukl5crw4IG5ndRNVf78150 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij4tOCwB8A3NcJeyVqokDoQUc9hGtUyzKtwoLStBK7J0jo78170 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxdCVlWMz1p0GmfBJYtzeLHnaYzQ7p4ovorsWMUlBmzcnZQhtdmWtMckI6zML81ab179 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opW67qXyrj6Vx0Tfu5cRa39uRp3UsvPq5fgh2uk0KSw6D3TMfkrP5uXt2IKef200 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMEMIIDjC3KZhEOpsbyo6wIjPC8k4jqwn5T2F45lbtdSoa9U8ibIIUHrLKQ0GVOmEyuKT8exxefBQ7Ggh252 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ophB5G3V4q5ezu1Y0LjBgRJ4sFtjOfASvvkcCxAjKMmuvM1ky4HCeLiVLIKVI3q8FQNLcd240 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij1NclFMfrimwYi3rAcRtrVKig2mnXcxmcVkGZoFsNIPeqMYFJef210 HTTP/1.1Host: jbiel.juniferkel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im9YY0U4M3BNdnphSTA3aFk3anppTUE9PSIsInZhbHVlIjoiZ2dMdFFkaTB1UFhQZUdISGFPSjRFWFFwY2R2a1ZBd3c5anJOODYvN1FsLytZRXJPdFM0L0ZJbk95YjBEcmxHOFdSNUZHSHU3Ry9YVytaSW9SNTFIZFhMenVEOEZFMDFBV0tqaFpIWG1FMmpEL1VSeGx0amR5azNKVUJoNkI0NWYiLCJtYWMiOiI2ZDAxY2QyZDdhMTFjYjM2ZjZkNzVhYWVjNWIxYmIxYzE3MzZlN2I2Yzk1MGY4MDE5ZGExZDZjZDdiYTJjNmI3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtwcUFoNnpPU1ZmdkhmTFozTEF3b1E9PSIsInZhbHVlIjoiR00rZndONlVXVUFSb3pBeUYwK1dNMGlodXRqc3Y0WVJBc1ZvSndqSGdmV2ltZzQ1eW4zUDdMU1FVUUR4TGlIYUkveW4xNVNZYnBCUEhVSWJRNUFoSGxSUVVUdURVd2RlNGJOK2ZwbXZKcllqNldxUzhvWGtPZFRxRXMrbUlua3ciLCJtYWMiOiIzOTRkYzgzOWM4ZDdiMmIxODIzNWFmMGMwN2ZlNmE3YWMyNjVlN2QxZThkNDZjNzBjOGNhNDc1NmEwOTQ1ZDg3IiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: beacon.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: jbiel.juniferkel.com
Source: global traffic	DNS traffic detected: DNS query: 4kbr.marigaiv.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveContent-Length: 381sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CSRF-Token: -xwrrYXX3LnJClmGw6Yfd7h0X-Dropbox-Uid: -1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prodsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:45 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 9e11c460b4f0478a9c6a7dc3be1ee32bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:45 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: a47abbea57aa459b99a191f55c2f4ed6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Security-Policy: sandbox allow-forms allow-scriptsDate: Fri, 30 Aug 2024 01:07:45 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 925Strict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: dea4dd25e0234670bf97cc3673763643Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 02f0b704de10441b8f87d58a0e073559Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f6223d267ee54a28ac967996c784ae36Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 17c28288668f4cea916808010de4cccdConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:47 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d8feedb6eea8470eab47e2117b00afe8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:48 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 52a89208865841ab972b06224b2b967eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:48 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 122a832e195945a680d264322ff92f5eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 082f7fd0f1dd4239aba6706ada254e65Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:59 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6dd40f6e838544549c9dac8dec44e0acConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:59 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 917cc1d074ba454e92f18394000e0824Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:07:59 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c8ed0669fbde4c1b838e83f47d8e62a4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:08:00 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8cbd6d42c0bc466b95d0805e8080081fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:08:02 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 75e6442a6f2c4c1fbd0282e4ad6cc58bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:08:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5eX%2FPY5GdgokvvrbUe0QB3gmdqC6vB0lUc0FuyLk%2B%2F8Acn8h3Ihyaun5o4yU4LH%2FMNpsXMywJNoQYiDJxTa4qc%2BruncJ79v%2BlkdTgdMqb7clQlvq%2FgA%2BVkLJ75IVOQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITAge: 2414Server: cloudflareCF-RAY: 8bb0e4231c6d42d0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:08:47 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: QJzufvxuFFOTqPecqIA6NC2WdqmvfjTQsRY=$40vDzCHgFO6VBdNbServer: cloudflareCF-RAY: 8bb0e4444aa503d5-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:08:50 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ReSlBH7DkmS7nYdLWaHMuVFtUhsf/1YC9wk=$bWL8S7mh57dhgoaAServer: cloudflareCF-RAY: 8bb0e455fa9b727d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:08:54 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ab2R3EhfK8+nEBBB0WEvNERz4VOK/nBztqM=$0SAhQ2znVu8PBPDaServer: cloudflareCF-RAY: 8bb0e4717cbd4210-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:08:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B21KTGe79Tke%2FXyozPNLy3jXw6o40uCi1WJx3n0Al6O52QCq0MvxgxM17rGpDrfcyktuzfSHOvBolm0%2FehbeakqW9bVt57T1CjZm%2Fmn%2FI9a%2FimLVWtnzfIcK%2FddVzg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8bb0e4796bedc461-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Fri, 30 Aug 2024 01:08:59 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6fe094be1e164cc4aa14b66938e62673Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 30 Aug 2024 01:09:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cjeVvBa6ffiuCoYRM4mi475teeeS9QKGCWS9bIn2trI9%2F4oB75Sj7MjfHjV0oYjQZbQ683EOMvf2PXPT1p4DytPnwmZuD1xBWdaSOpTTG%2FMWQ9vvQhvGeIx26yIoDA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8bb0e49a581e4314-EWR

Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: http://capture.dropbox.com/open
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: http://dropbox.com/search#ai_onboarding
Source: chromecache_393.1.dr, chromecache_372.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_366.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-acc
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-man
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/docsend_advanced_data/D
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/new_image_shortcuts/fss
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization
Source: chromecache_326.1.dr, chromecache_520.1.dr	String found in binary or memory: https://assets.dropbox.com
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://assets.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-entry-point-
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://dropbox.com/overview
Source: chromecache_430.1.dr, chromecache_335.1.dr	String found in binary or memory: https://dropbox.com/ux_analytics
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://experience.dropbox.com/form/studio
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://faq.hellosign.com/hc/en-us/articles/15815316468877-Dropbox-Sign-SMS-tools-add-on
Source: chromecache_393.1.dr, chromecache_372.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_574.1.dr, chromecache_371.1.dr	String found in binary or memory: https://help.dropbox.com
Source: chromecache_408.1.dr, chromecache_578.1.dr, chromecache_303.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/account-access/locked-state
Source: chromecache_386.1.dr, chromecache_275.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate
Source: chromecache_278.1.dr, chromecache_359.1.dr	String found in binary or memory: https://help.dropbox.com/integrations/move-google-docs
Source: chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/organize/dropbox-automations
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/organize/dropbox-backup-beta
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/share
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/storage-space/team-storage-report
Source: chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/sync/make-files-online-only
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://help.dropbox.com/teams-admins/team-member/alpha-beta-product
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/edit-media-files
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/edit-pdf
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/image-search
Source: chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/search
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://help.dropbox.com/view-edit/video-length
Source: chromecache_472.1.dr, chromecache_348.1.dr	String found in binary or memory: https://jbiel.juniferkel.com/7dPYZLDD/
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_388.1.dr, chromecache_366.1.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://play.google.com/apps/testing/com.dropbox.android
Source: chromecache_524.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_575.1.dr, chromecache_432.1.dr, chromecache_339.1.dr, chromecache_506.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_506.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_524.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_398.1.dr	String found in binary or memory: https://replay.dropbox.com
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://replay.dropbox.com/
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://replay.dropbox.com/?login=true&referrer=july_2024_release
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://replay.dropbox.com/settings
Source: chromecache_524.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://testflight.apple.com/join/LBZaRq4I
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://www.docsend.com/features/analytics/
Source: chromecache_438.1.dr, chromecache_262.1.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/capture
Source: chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/dash
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://www.dropbox.com/dash/get-started
Source: chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/dash/setup/install-app
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/getpasswords
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/hellosign
Source: chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/home
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://www.dropbox.com/overview
Source: chromecache_574.1.dr, chromecache_371.1.dr	String found in binary or memory: https://www.dropbox.com/privacy
Source: chromecache_408.1.dr, chromecache_303.1.dr	String found in binary or memory: https://www.dropbox.com/replay
Source: chromecache_408.1.dr, chromecache_578.1.dr, chromecache_303.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.dropbox.com/requests
Source: chromecache_418.1.dr, chromecache_541.1.dr, chromecache_427.1.dr, chromecache_524.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_541.1.dr, chromecache_524.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/WV-mUKO4xoWKy9M4ZzRyNrP_/recaptcha__.
Source: chromecache_418.1.dr, chromecache_427.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/WV-mUKO4xoWKy9M4ZzRyNrP_/recaptcha__en.js
Source: chromecache_578.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.hellosign.com/features/mobile
Source: chromecache_408.1.dr, chromecache_578.1.dr, chromecache_303.1.dr, chromecache_398.1.dr	String found in binary or memory: https://www.hellosign.com/features/qualified-electronic-signatures

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1956,i,10511705917690303132,1472574361607435565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1956,i,10511705917690303132,1472574361607435565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	0%	URL Reputation	safe
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	0%	URL Reputation	safe
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	0%	Avira URL Cloud	safe
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/7dPYZLDD/?T	100%	Avira URL Cloud	phishing
https://help.dropbox.com/storage-space/team-storage-report	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/nz25xfCo76X19BHcn8js09FlPhyOdwSl8ECFoBSfaAVYxfwFEMM1v	100%	Avira URL Cloud	phishing
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://cdn.socket.io/4.6.0/socket.io.min.js	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	0%	URL Reputation	safe
https://www.dropbox.com/dash	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=5eX%2FPY5GdgokvvrbUe0QB3gmdqC6vB0lUc0FuyLk%2B%2F8Acn8h3Ihyaun5o4yU4LH%2FMNpsXMywJNoQYiDJxTa4qc%2BruncJ79v%2BlkdTgdMqb7clQlvq%2FgA%2BVkLJ75IVOQ%3D%3D	0%	Avira URL Cloud	safe
https://www.dropbox.com/2/stickers/get_stickers	0%	Avira URL Cloud	safe
https://help.dropbox.com/storage-space/team-storage-report	0%	Virustotal		Browse
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	0%	Virustotal		Browse
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8bb0e4342ac243e2/1724980126490/fcc7ad84adbe7939c16c179e0aa4e07782a628bc4906dee5d4f8e0c81c0998c5/y7zO49Oud3qX1FY	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/rscncc1A2tRzKj5JFW7347JKEj0iwx40	100%	Avira URL Cloud	phishing
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul	0%	Avira URL Cloud	safe
https://www.dropbox.com/overview	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/favicon.ico	100%	Avira URL Cloud	phishing
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8bb0e4342ac243e2/1724980126491/U1lAc1DUxg8XbxN	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/efkswwaJvriBijPq7883bvnL92mkl100	100%	Avira URL Cloud	phishing
https://www.dropbox.com/2/stickers/get_stickers	0%	Virustotal		Browse
https://www.dropbox.com/overview	0%	Virustotal		Browse
https://replay.dropbox.com/settings	0%	Avira URL Cloud	safe
https://www.dropbox.com/dash	0%	Virustotal		Browse
https://www.dropbox.com/log/ux_analytics	0%	Avira URL Cloud	safe
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-	0%	Avira URL Cloud	safe
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	0%	Virustotal		Browse
https://www.dropbox.com/capture	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/455JAyHeJDhpnRG4qabOwqMtvw70	100%	Avira URL Cloud	phishing
https://replay.dropbox.com/settings	0%	Virustotal		Browse
https://help.dropbox.com/share	0%	Avira URL Cloud	safe
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	0%	Avira URL Cloud	safe
https://github.com/fent)	0%	Avira URL Cloud	safe
https://www.dropbox.com/log/ux_analytics	0%	Virustotal		Browse
https://jbiel.juniferkel.com/wxdCVlWMz1p0GmfBJYtzeLHnaYzQ7p4ovorsWMUlBmzcnZQhtdmWtMckI6zML81ab179	100%	Avira URL Cloud	phishing
https://help.dropbox.com/share	0%	Virustotal		Browse
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing	0%	Avira URL Cloud	safe
https://www.dropbox.com/capture	0%	Virustotal		Browse
https://help.dropbox.com/view-edit/edit-media-files	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://www.dropbox.com/privacy	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8bb0e4342ac243e2&lang=auto	0%	Avira URL Cloud	safe
https://www.dropbox.com/dash/get-started	0%	Avira URL Cloud	safe
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	0%	Virustotal		Browse
https://help.dropbox.com/view-edit/edit-media-files	0%	Virustotal		Browse
https://www.dropbox.com/2/comments2/logged_out/list_comments	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/uvkQ2xWpJLBY4ebFyM96u8h0WToopM2NsaJRzoGjyft34124	100%	Avira URL Cloud	phishing
https://jbiel.juniferkel.com/qrsZ9ZHSzbrTjDXiS5gh6ucpNF264ucTgnf45140	100%	Avira URL Cloud	phishing
https://www.dropbox.com/dash/get-started	0%	Virustotal		Browse
https://help.dropbox.com/organize/dropbox-automations	0%	Avira URL Cloud	safe
https://www.dropbox.com/replay	0%	Avira URL Cloud	safe
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	0%	Avira URL Cloud	safe
https://www.dropbox.com/2/files/get_file_content_metadata	0%	Avira URL Cloud	safe
https://www.dropbox.com/privacy	1%	Virustotal		Browse
https://www.dropbox.com/2/comments2/logged_out/list_comments	0%	Virustotal		Browse
https://help.dropbox.com/sync/make-files-online-only	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/WV-mUKO4xoWKy9M4ZzRyNrP_/recaptcha__.	0%	Avira URL Cloud	safe
https://www.dropbox.com	0%	Avira URL Cloud	safe
https://help.dropbox.com/organize/dropbox-automations	0%	Virustotal		Browse
https://www.dropbox.com/2/pap_event_logging/log_events	0%	Avira URL Cloud	safe
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	0%	Virustotal		Browse
https://www.dropbox.com/replay	0%	Virustotal		Browse
https://play.google.com/apps/testing/com.dropbox.android	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	Avira URL Cloud	safe
https://www.hellosign.com/features/qualified-electronic-signatures	0%	Avira URL Cloud	safe
https://help.dropbox.com/sync/make-files-online-only	0%	Virustotal		Browse
https://help.dropbox.com	0%	Avira URL Cloud	safe
https://help.dropbox.com/view-edit/image-search	0%	Avira URL Cloud	safe
https://replay.dropbox.com/?login=true&referrer=july_2024_release	0%	Avira URL Cloud	safe
https://www.dropbox.com/2/files/get_file_content_metadata	0%	Virustotal		Browse
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-	0%	Avira URL Cloud	safe
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui	0%	Avira URL Cloud	safe
https://www.docsend.com/features/analytics/	0%	Avira URL Cloud	safe
https://www.dropbox.com/log_js_sw_data	0%	Avira URL Cloud	safe
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da	0%	Avira URL Cloud	safe
https://www.dropbox.com/log/file_preview	0%	Avira URL Cloud	safe
https://www.dropbox.com/pithos_api_helper_validation	0%	Avira URL Cloud	safe
https://help.dropbox.com/view-edit/search	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/opW67qXyrj6Vx0Tfu5cRa39uRp3UsvPq5fgh2uk0KSw6D3TMfkrP5uXt2IKef200	100%	Avira URL Cloud	phishing
https://www.dropbox.com/getpasswords	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://help.dropbox.com/integrations/move-google-docs	0%	Avira URL Cloud	safe
https://www.hellosign.com/features/mobile	0%	Avira URL Cloud	safe
https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/ef5BupA1T4rztVnyr0ruNDqth2l6ukl5crw4IG5ndRNVf78150	100%	Avira URL Cloud	phishing
https://help.dropbox.com/view-edit/video-length	0%	Avira URL Cloud	safe
https://jbiel.juniferkel.com/veI4Kcc6h76NYT7ohakGvgfGguuil	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
use1-turn.fpjs.io	3.66.243.164	true	false	unknown
jbiel.juniferkel.com	188.114.97.3	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
bolt.v.dropbox.com	162.125.21.3	true	false	unknown
github.com	140.82.121.3	true	false	unknown
4kbr.marigaiv.ru	188.114.97.3	true	false	unknown
edge-block-previews-env.dropbox-dns.com	162.125.66.16	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
d2vgu95hoyrpkh.cloudfront.net	18.245.31.33	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
www-env.dropbox-dns.com	162.125.66.18	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
d19d360lklgih4.cloudfront.net	13.33.187.120	true	false	unknown
objects.githubusercontent.com	185.199.110.133	true	false	unknown
fp.dropbox.com	3.160.150.110	true	false	unknown
cfl.dropboxstatic.com	unknown	unknown	false	unknown
cdn.socket.io	unknown	unknown	false	unknown
uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.com	unknown	unknown	false	unknown
beacon.dropbox.com	unknown	unknown	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false	URL Reputation: safe URL Reputation: safe	unknown
https://jbiel.juniferkel.com/7dPYZLDD/?T	true	Avira URL Cloud: phishing	unknown
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://jbiel.juniferkel.com/nz25xfCo76X19BHcn8js09FlPhyOdwSl8ECFoBSfaAVYxfwFEMM1v	true	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=5eX%2FPY5GdgokvvrbUe0QB3gmdqC6vB0lUc0FuyLk%2B%2F8Acn8h3Ihyaun5o4yU4LH%2FMNpsXMywJNoQYiDJxTa4qc%2BruncJ79v%2BlkdTgdMqb7clQlvq%2FgA%2BVkLJ75IVOQ%3D%3D	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/2/stickers/get_stickers	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8bb0e4342ac243e2/1724980126490/fcc7ad84adbe7939c16c179e0aa4e07782a628bc4906dee5d4f8e0c81c0998c5/y7zO49Oud3qX1FY	false	Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/rscncc1A2tRzKj5JFW7347JKEj0iwx40	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8bb0e4342ac243e2/1724980126491/U1lAc1DUxg8XbxN	false	Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/efkswwaJvriBijPq7883bvnL92mkl100	false	Avira URL Cloud: phishing	unknown
https://www.dropbox.com/log/ux_analytics	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/455JAyHeJDhpnRG4qabOwqMtvw70	false	Avira URL Cloud: phishing	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/wxdCVlWMz1p0GmfBJYtzeLHnaYzQ7p4ovorsWMUlBmzcnZQhtdmWtMckI6zML81ab179	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8bb0e4342ac243e2&lang=auto	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/2/comments2/logged_out/list_comments	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/qrsZ9ZHSzbrTjDXiS5gh6ucpNF264ucTgnf45140	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/uvkQ2xWpJLBY4ebFyM96u8h0WToopM2NsaJRzoGjyft34124	false	Avira URL Cloud: phishing	unknown
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.dropbox.com/2/files/get_file_content_metadata	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0	false		unknown
https://www.dropbox.com/2/pap_event_logging/log_events	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&e=1&st=c1fl3n2k&dl=0	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/log_js_sw_data	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/log/file_preview	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/pithos_api_helper_validation	false	Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/opW67qXyrj6Vx0Tfu5cRa39uRp3UsvPq5fgh2uk0KSw6D3TMfkrP5uXt2IKef200	false	Avira URL Cloud: phishing	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false	URL Reputation: safe	unknown
https://jbiel.juniferkel.com/ef5BupA1T4rztVnyr0ruNDqth2l6ukl5crw4IG5ndRNVf78150	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/veI4Kcc6h76NYT7ohakGvgfGguuil	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/uvMEMIIDjC3KZhEOpsbyo6wIjPC8k4jqwn5T2F45lbtdSoa9U8ibIIUHrLKQ0GVOmEyuKT8exxefBQ7Ggh252	false	Avira URL Cloud: phishing	unknown
https://www.dropbox.com/pithos/api_helper_validation	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false	Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/klv0sTI94w7vkqs63FdM1UYiCcpmwhfyGQJVMnu89hIoJJLgRLkP7MIXlmjgSGyz230	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/90j74ZsXkIQXMhSlf8aNJSOecdYj7fZv666ab75	false	Avira URL Cloud: phishing	unknown
https://www.dropbox.com/page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fop070xas0eh2p222upauu%2FDocument-1.docx&request_id=b6fdeea561174a0283f57db9afff9af2&time=1724980056	false	Avira URL Cloud: safe	unknown
https://jbiel.juniferkel.com/ij4tOCwB8A3NcJeyVqokDoQUc9hGtUyzKtwoLStBK7J0jo78170	false	Avira URL Cloud: phishing	unknown
https://jbiel.juniferkel.com/56MF5q6GR6pPS23dW9tT189uv57	false	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_386.1.dr, chromecache_275.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://help.dropbox.com/storage-space/team-storage-report	chromecache_578.1.dr, chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://www.dropbox.com/dash	chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/overview	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://replay.dropbox.com/settings	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://www.dropbox.com/capture	chromecache_578.1.dr, chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_388.1.dr, chromecache_366.1.dr	false	URL Reputation: safe	unknown
https://help.dropbox.com/share	chromecache_578.1.dr, chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/fent)	chromecache_393.1.dr, chromecache_372.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/edit-media-files	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://www.dropbox.com/privacy	chromecache_574.1.dr, chromecache_371.1.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.dropbox.com/dash/get-started	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://help.dropbox.com/organize/dropbox-automations	chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.dropbox.com/replay	chromecache_408.1.dr, chromecache_303.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://help.dropbox.com/sync/make-files-online-only	chromecache_398.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/WV-mUKO4xoWKy9M4ZzRyNrP_/recaptcha__.	chromecache_541.1.dr, chromecache_524.1.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com	chromecache_438.1.dr, chromecache_262.1.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/apps/testing/com.dropbox.android	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://www.hellosign.com/features/qualified-electronic-signatures	chromecache_408.1.dr, chromecache_578.1.dr, chromecache_303.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com	chromecache_574.1.dr, chromecache_371.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/image-search	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://replay.dropbox.com/?login=true&referrer=july_2024_release	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://www.docsend.com/features/analytics/	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/search	chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://www.dropbox.com/getpasswords	chromecache_578.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_524.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/integrations/move-google-docs	chromecache_278.1.dr, chromecache_359.1.dr	false	Avira URL Cloud: safe	unknown
https://www.hellosign.com/features/mobile	chromecache_578.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF	chromecache_578.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://help.dropbox.com/view-edit/video-length	chromecache_578.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
http://capture.dropbox.com/open	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.dropbox.com	chromecache_326.1.dr, chromecache_520.1.dr	false	Avira URL Cloud: safe	unknown
https://dropbox.com/overview	chromecache_578.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
https://replay.dropbox.com	chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown
http://dropbox.com/search#ai_onboarding	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization	chromecache_408.1.dr, chromecache_303.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_541.1.dr, chromecache_524.1.dr	false	URL Reputation: safe	unknown
https://reactjs.org/link/react-polyfills	chromecache_506.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_388.1.dr, chromecache_366.1.dr	false	URL Reputation: safe	unknown
https://www.dropbox.com/requests	chromecache_408.1.dr, chromecache_578.1.dr, chromecache_303.1.dr, chromecache_398.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
18.245.31.33	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
185.199.111.133	unknown	Netherlands	54113	FASTLYUS	false
18.245.31.5	unknown	United States	16509	AMAZON-02US	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
162.125.21.3	bolt.v.dropbox.com	United States	19679	DROPBOXUS	false
185.199.110.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
162.125.66.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
3.160.150.110	fp.dropbox.com	United States	16509	AMAZON-02US	false
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
13.33.187.120	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	jbiel.juniferkel.com	European Union	13335	CLOUDFLARENETUS	false
13.33.187.96	unknown	United States	16509	AMAZON-02US	false
35.157.212.223	unknown	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1501536
Start date and time:	2024-08-30 03:07:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@17/544@76/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 30 00:07:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9846350222897473
Encrypted:	false
SSDEEP:	48:8Md/T3bwaHSidAKZdA1FehwiZUklqehny+3:80HwbUy
MD5:	12AD165E5BE90CAFD2A3D2DEF52D2992
SHA1:	51F4584631C11FEDA7F04A046876E06527516604
SHA-256:	0B1BAD83560E9990C50FB89D5910ECA9BEC0A60A0D5C6F14DDF7D54101374CB2
SHA-512:	4922ECABAE75655EF0047888C7744A5E2015F8054CF3E4CE97F6FF7FB7212BF3AAED148D31E9F46E5EA3B8867AFDC32E071CA71CA70C6DA9CA87E720D171AD50
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Oj.y...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............3d.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 30, 2024 03:07:34.921327114 CEST	59657	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:34.921539068 CEST	49719	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:34.928636074 CEST	53	59657	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:34.928915024 CEST	53	49719	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:34.936117887 CEST	53	62827	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:34.937402010 CEST	53	56345	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:35.920109034 CEST	53	57433	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:36.083022118 CEST	53933	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:36.083204031 CEST	62991	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:39.130845070 CEST	54154	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:39.130999088 CEST	56350	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:39.679657936 CEST	59539	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:39.679889917 CEST	61677	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:39.686300993 CEST	53	59539	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:39.686321020 CEST	53	61677	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:40.128938913 CEST	63966	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:40.129194975 CEST	55882	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:40.140727043 CEST	53	63966	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:40.142235994 CEST	53	55882	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:43.113265038 CEST	52125	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:43.113405943 CEST	57301	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:43.131464958 CEST	53	52125	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:43.132286072 CEST	53	57301	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:44.624552965 CEST	55911	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:44.624735117 CEST	57909	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:44.640516043 CEST	53	57909	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:44.642565966 CEST	53	55911	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:44.659322977 CEST	53	63081	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:44.685225964 CEST	50118	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:44.685503006 CEST	55975	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:44.692539930 CEST	53	55975	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:44.703257084 CEST	53	50118	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:45.937819004 CEST	53	63836	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:46.316601038 CEST	55505	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:46.316745043 CEST	51468	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:46.323930979 CEST	53	51468	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:46.323982954 CEST	53	55505	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.114906073 CEST	61856	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.115159988 CEST	64613	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.131628036 CEST	53	64613	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.132622957 CEST	53	61856	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.425770044 CEST	63305	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.425961018 CEST	55807	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.435439110 CEST	53	55807	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.436496973 CEST	53	63305	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.437236071 CEST	64454	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.447282076 CEST	53	64454	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:47.559673071 CEST	65298	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:47.566858053 CEST	53	65298	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:48.404144049 CEST	60474	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:48.404309034 CEST	53436	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:07:48.411901951 CEST	53	53436	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:48.421808004 CEST	53	60474	1.1.1.1	192.168.2.16
Aug 30, 2024 03:07:52.890983105 CEST	53	49254	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:11.926481009 CEST	53	56433	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:34.849606991 CEST	53	49767	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:34.895046949 CEST	53	62912	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:40.927798033 CEST	58080	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:40.927918911 CEST	49208	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:40.942692041 CEST	53	49208	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:40.965322018 CEST	53	58080	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.038515091 CEST	53956	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.038674116 CEST	53440	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.091768980 CEST	53	53956	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.129941940 CEST	53	53440	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.131999016 CEST	138	138	192.168.2.16	192.168.2.255
Aug 30, 2024 03:08:42.165714025 CEST	54014	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.165877104 CEST	57784	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.172496080 CEST	53	54014	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.172842979 CEST	53	57784	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.923511982 CEST	49520	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.923666000 CEST	55162	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.923943996 CEST	57670	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.924288988 CEST	62319	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.925015926 CEST	57644	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.925173998 CEST	63927	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.925457954 CEST	61325	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.925591946 CEST	64820	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:42.930915117 CEST	53	57670	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.931751966 CEST	53	62319	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.932230949 CEST	53	63927	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.932302952 CEST	53	57644	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.932508945 CEST	53	61325	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.932733059 CEST	53	64820	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:42.933141947 CEST	53	55162	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.220328093 CEST	53	49520	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.399719954 CEST	59775	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.401370049 CEST	59530	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.407320023 CEST	53	59775	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.409329891 CEST	53	59530	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.713404894 CEST	62640	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.713541985 CEST	53800	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.716404915 CEST	61495	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.716547966 CEST	57238	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:43.720942974 CEST	53	53800	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.720956087 CEST	53	62640	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.723195076 CEST	53	57238	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:43.723929882 CEST	53	61495	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.259268045 CEST	60539	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.259435892 CEST	53097	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.265957117 CEST	53	53097	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.266459942 CEST	53	60539	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.276981115 CEST	59179	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.277287960 CEST	50211	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.283560038 CEST	53	59179	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.283869982 CEST	53	50211	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.466425896 CEST	56798	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.466640949 CEST	51690	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:44.473309994 CEST	53	56798	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:44.473558903 CEST	53	51690	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:46.393488884 CEST	63393	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:46.393649101 CEST	55152	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:46.400763035 CEST	53	55152	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:46.400846004 CEST	53	63393	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:47.063608885 CEST	64122	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:47.063796997 CEST	55610	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:47.070787907 CEST	53	64122	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:47.070804119 CEST	53	55610	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:55.158571005 CEST	64610	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:55.158735991 CEST	59513	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:55.341625929 CEST	53	59513	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:55.343142033 CEST	53	64610	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.780005932 CEST	65353	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.780172110 CEST	58232	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.780735970 CEST	60989	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.780900955 CEST	60905	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.781948090 CEST	55388	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.782092094 CEST	55979	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.785934925 CEST	53033	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.786200047 CEST	58970	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:57.787277937 CEST	53	60989	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.787331104 CEST	53	58232	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.787961006 CEST	53	60905	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.788001060 CEST	53	65353	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.788600922 CEST	53	55388	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.788722038 CEST	53	55979	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.792877913 CEST	53	53033	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:57.805737019 CEST	53	58970	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.725532055 CEST	57429	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.725687027 CEST	49288	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.732259035 CEST	53	49288	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.732450008 CEST	53	57429	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.905822039 CEST	59864	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.905955076 CEST	61616	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.912343979 CEST	53	59864	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.914041042 CEST	53	61616	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.944549084 CEST	61589	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.944684029 CEST	63226	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:58.951486111 CEST	53	63226	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:58.951536894 CEST	53	61589	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:59.550843000 CEST	51580	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:59.550980091 CEST	53497	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:08:59.557487011 CEST	53	51580	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:59.557609081 CEST	53	53497	1.1.1.1	192.168.2.16
Aug 30, 2024 03:08:59.567486048 CEST	53	56377	1.1.1.1	192.168.2.16
Aug 30, 2024 03:09:00.551424026 CEST	62861	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:09:00.551565886 CEST	61460	53	192.168.2.16	1.1.1.1
Aug 30, 2024 03:09:00.558605909 CEST	53	61460	1.1.1.1	192.168.2.16
Aug 30, 2024 03:09:00.579793930 CEST	53	62861	1.1.1.1	192.168.2.16
Aug 30, 2024 03:09:00.678966999 CEST	53	55689	1.1.1.1	192.168.2.16
Aug 30, 2024 03:09:01.104311943 CEST	53	52492	1.1.1.1	192.168.2.16
Aug 30, 2024 03:09:03.681621075 CEST	53	61235	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 30, 2024 03:07:39.149096966 CEST	192.168.2.16	1.1.1.1	c276	(Port unreachable)	Destination Unreachable
Aug 30, 2024 03:08:42.130044937 CEST	192.168.2.16	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:35 UTC	751	OUT	GET /scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 01:07:36 UTC	4042	IN	HTTP/1.1 200 OK Content-Security-Policy: style-src https://* 'unsafe-inline' 'unsafe-eval' ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; font-src https://* data: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; img-src https://* data: blob: ; base-uri 'self' ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox. [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-SQwVollxnzsHYhmGRZg3IKAQNso=' 'nonce-ZhI55XGWRKAOm7dtiea5c0u0s44=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; Path=/; Expires=Wed, 29 Aug 2029 01:07:35 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=-xwrrYXX3LnJClmGw6Yfd7h0; Path=/; Domain=dropbox.com; Expires=Sat, 30 Aug 2025 01:07:35 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; Path=/; Expires=Sat, 30 Aug 2025 01:07:35 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=6kr8yRBPWU; Path=/; Expires=Sat, 30 Aug 2025 01:07:35 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Wed, 29 Aug 2029 01:07:35 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Fri, 30 Aug 2024 01:07:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b6fdeea561174a0283f57db9afff9af2 Connection: close Transfer-Encoding: chunked
2024-08-30 01:07:36 UTC	1532	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-08-30 01:07:36 UTC	2550	IN	Data Raw: 62 35 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2d 76 66 6c 48 36 77 77 77 76 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 31 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d Data Ascii: b5<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/foundation-vflH6wwwv.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>b1<link rel="preload" href="https://cfl.dropboxstatic.com/static/m
2024-08-30 01:07:36 UTC	1647	IN	Data Raw: 62 63 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 61 62 75 73 65 2f 72 65 70 6f 72 74 5f 66 6c 61 67 2d 76 66 6c 44 33 51 37 49 57 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 61 64 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 Data Ascii: bc<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/abuse/report_flag-vflD3Q7IW.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>ad<link rel="preload" href="https://cfl.dropboxstatic.com/s
2024-08-30 01:07:36 UTC	4329	IN	Data Raw: 63 34 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 5a 68 49 35 35 58 47 57 52 4b 41 4f 6d 37 64 74 69 65 61 35 63 30 75 30 73 34 34 3d 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 2f 61 6c 61 6d 65 64 61 5f 62 75 6e 64 6c 65 5f 63 68 72 6f 6d 65 5f 65 6e 2d 76 66 6c 49 47 46 31 34 76 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 37 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 36 0d 0a 3c 62 6f 64 79 3e 0d 0a 31 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 51 77 56 6f 6c 6c 78 6e Data Ascii: c4<script nonce="ZhI55XGWRKAOm7dtiea5c0u0s44=" src="https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflIGF14v.js" crossorigin="anonymous"></script>7</head>6<body>1000<script nonce="SQwVollxn
2024-08-30 01:07:36 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 6d 64 2f 64 69 73 74 2f 63 5f 61 63 74 69 76 61 74 69 6f 6e 5f 64 61 74 61 5f 73 74 6f 72 65 2d 76 66 6c 67 6d 52 2d 39 4b 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 2d 76 66 6c 62 68 70 73 33 5a 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f Data Ascii: 4000md/dist/c_activation_data_store-vflgmR-9K", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client-vflbhps3Z", "atlas/file_
2024-08-30 01:07:36 UTC	8	IN	Data Raw: 65 72 2f 73 63 6c 0d 0a Data Ascii: er/scl
2024-08-30 01:07:36 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 68 69 70 5f 69 6e 64 65 78 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 68 69 70 5f 69 6e 64 65 78 2d 76 66 6c 6f 76 6b 68 39 67 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 68 69 70 73 5f 69 6e 64 65 78 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 Data Ascii: 4000_oboe_file_bundle_amd/dist/c_dig-components_chip_index": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_dig-components_chip_index-vflovkh9g", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_dig-components_chips_index": "static/atlas/fi
2024-08-30 01:07:36 UTC	8	IN	Data Raw: 73 2f 66 69 6c 65 0d 0a Data Ascii: s/file
2024-08-30 01:07:36 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 66 65 61 74 75 72 65 73 5f 73 68 61 72 65 64 2d 66 6f 6c 64 65 72 2d 70 72 65 76 69 65 77 2d 70 61 67 65 5f 69 6e 64 65 78 2d 76 66 6c 53 6f 59 4f 6e 58 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 66 69 6c 65 5f 61 63 74 69 6f 6e 73 5f 70 6f 72 74 61 62 6c 65 5f 66 69 6c 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 66 69 6c 65 5f 61 Data Ascii: 4000_viewer/scl_oboe_file_bundle_amd/dist/c_features_shared-folder-preview-page_index-vflSoYOnX", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_file_actions_portable_file_conversion": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_file_a
2024-08-30 01:07:36 UTC	8	IN	Data Raw: 6e 69 6e 67 5f 63 0d 0a Data Ascii: ning_c

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:39 UTC	972	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fop070xas0eh2p222upauu%2FDocument-1.docx&request_id=b6fdeea561174a0283f57db9afff9af2&time=1724980056 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:40 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Date: Fri, 30 Aug 2024 01:07:39 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f14ba9a2bbe746bfb4fd809e08b846ff Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:40 UTC	673	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fop070xas0eh2p222upauu%2FDocument-1.docx&request_id=b6fdeea561174a0283f57db9afff9af2&time=1724980056 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:41 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Fri, 30 Aug 2024 01:07:40 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 78c9fe0e76d94c17adb9d5a05364d542 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1028	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: -xwrrYXX3LnJClmGw6Yfd7h0 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:43 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 36 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":26,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-08-30 01:07:44 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 67 X-Webkit-Csp: sandbox Content-Length: 137 Date: Fri, 30 Aug 2024 01:07:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 312e439a078c420486d7e07b12a418c4 Connection: close
2024-08-30 01:07:44 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1052	OUT	POST /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: -xwrrYXX3LnJClmGw6Yfd7h0 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:43 UTC	458	OUT	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 5f 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 67 65 22 3a 22 70 72 65 76 69 65 77 5f 70 61 67 65 22 2c 22 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 6f 70 30 37 30 78 61 73 30 65 68 32 70 32 32 32 75 70 61 75 75 2f 44 6f 63 75 6d 65 6e 74 2d 31 2e 64 6f 63 78 22 7d 2c 22 65 76 65 6e 74 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 66 69 6c 65 5f 65 78 74 65 6e 73 69 6f 6e 22 3a 22 64 6f 63 78 22 2c 22 66 69 6c 65 5f 6e 61 6d 65 22 3a 22 44 6f 63 75 6d 65 6e 74 20 28 31 29 2e 64 6f 63 78 22 2c 22 66 69 6c 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6f 70 30 37 30 78 61 73 30 65 68 32 70 32 32 32 75 70 61 75 75 2f 44 6f 63 75 6d 65 6e 74 2d 31 2e 64 6f 63 Data Ascii: {"campaign_properties":{"page":"preview_page","path":"/scl/fi/op070xas0eh2p222upauu/Document-1.docx"},"event_context":{"file_extension":"docx","file_name":"Document (1).docx","file_path":"https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.doc
2024-08-30 01:07:44 UTC	595	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 211 X-Webkit-Csp: sandbox Content-Length: 141 Date: Fri, 30 Aug 2024 01:07:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: efcadb31c23f428085fd48f25c88ef92 Connection: close
2024-08-30 01:07:44 UTC	141	IN	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 72 65 73 75 6c 74 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 65 66 63 61 64 62 33 31 63 32 33 66 34 32 38 30 38 35 66 64 34 38 66 32 35 63 38 38 65 66 39 32 22 2c 22 76 61 6c 69 64 5f 66 6f 72 22 3a 33 36 30 30 7d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 5f 73 6c 6f 74 73 22 3a 7b 7d 7d Data Ascii: {"campaigns":[],"campaigns_result":{"campaigns":[],"request_id":"efcadb31c23f428085fd48f25c88ef92","valid_for":3600},"campaigns_to_slots":{}}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Windows Analysis Report
https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1058	OUT	POST /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: -xwrrYXX3LnJClmGw6Yfd7h0 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:43 UTC	158	OUT	Data Raw: 7b 22 66 69 6c 65 5f 69 6e 66 6f 22 3a 7b 22 2e 74 61 67 22 3a 22 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 64 65 74 61 69 6c 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6f 70 30 37 30 78 61 73 30 65 68 32 70 32 32 32 75 70 61 75 75 2f 44 6f 63 75 6d 65 6e 74 2d 31 2e 64 6f 63 78 3f 72 6c 6b 65 79 3d 6c 72 6a 63 78 64 73 34 66 73 6f 33 64 35 64 6d 6d 6c 76 31 69 74 61 69 72 26 64 6c 3d 30 22 7d 7d Data Ascii: {"file_info":{".tag":"shared_link_details","url":"https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&dl=0"}}
2024-08-30 01:07:44 UTC	663	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 263 X-Webkit-Csp: sandbox Date: Fri, 30 Aug 2024 01:07:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 838 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fefb491ccf6e481580da5e6f33f999ca Connection: close
2024-08-30 01:07:44 UTC	838	IN	Data Raw: 7b 22 62 65 61 63 6f 6e 5f 70 72 65 73 65 6e 63 65 5f 69 6e 66 6f 22 3a 20 7b 22 61 75 74 68 5f 6b 65 79 22 3a 20 22 6b 65 79 5f 74 79 70 65 3a 20 5c 22 70 61 73 73 5c 22 5c 6e 73 65 73 73 69 6f 6e 5f 69 64 3a 20 5c 22 31 32 36 32 38 39 35 35 39 32 36 37 35 37 36 35 34 38 31 30 38 36 32 30 39 38 36 35 30 36 38 34 36 32 30 31 36 36 31 5c 22 5c 6e 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 75 72 6c 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 6f 70 30 37 30 78 61 73 30 65 68 32 70 32 32 32 75 70 61 75 75 2f 44 6f 63 75 6d 65 6e 74 2d 31 2e 64 6f 63 78 3f 72 6c 6b 65 79 3d 6c 72 6a 63 78 64 73 34 66 73 6f 33 64 35 64 6d 6d 6c 76 31 69 74 61 69 72 26 64 6c 3d 30 5c 22 5c 6e 22 2c 20 22 62 65 61 63 6f 6e 5f Data Ascii: {"beacon_presence_info": {"auth_key": "key_type: \"pass\"\nsession_id: \"126289559267576548108620986506846201661\"\nshared_link_url: \"https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&dl=0\"\n", "beacon_

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1026	OUT	POST /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: -xwrrYXX3LnJClmGw6Yfd7h0 X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:43 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-08-30 01:07:44 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 15 X-Webkit-Csp: sandbox Date: Fri, 30 Aug 2024 01:07:43 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 15638 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2c15a05152244a5ca9c661e51968426e Connection: close
2024-08-30 01:07:44 UTC	15638	IN	Data Raw: 7b 22 73 74 69 63 6b 65 72 5f 73 65 74 73 22 3a 20 5b 7b 22 73 65 74 5f 69 64 22 3a 20 38 2c 20 22 6e 61 6d 65 22 3a 20 22 77 69 7a 61 72 64 73 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 22 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 74 69 63 6b 65 72 73 2f 73 65 74 2f 38 22 2c 20 22 73 74 69 63 6b 65 72 73 22 3a 20 5b 7b 22 69 64 22 3a 20 35 35 2c 20 22 6e 61 6d 65 22 3a 20 22 61 70 70 72 65 63 69 61 74 69 6f 6e 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 20 6d 61 6b 69 6e 67 20 61 20 72 61 69 6e 62 6f 77 22 2c 20 22 69 73 5f 6c 69 76 65 5f 73 74 69 63 6b 65 72 22 3a 20 74 72 75 65 2c 20 22 62 61 73 65 5f 75 72 6c 22 3a 20 22 68 74 Data Ascii: {"sticker_sets": [{"set_id": 8, "name": "wizards", "description": "Wizard", "url": "https://www.dropbox.com/stickers/set/8", "stickers": [{"id": 55, "name": "appreciation", "description": "Wizard making a rainbow", "is_live_sticker": true, "base_url": "ht

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1009	OUT	OPTIONS /p/pdf_txt/ACaqfGiJxtuEL2L1y3PJWp9By3eRxQ-h6SJziSDPw8j4hw20KR6cyr016uvJVTBya9Xq5QUbzM69tOppnapiOuXhpCKMvKEeyg8cb2yMVQ45LpKgjyn0dS8NAo27jpaHJkXoF3xDl-zkrOQqENz4Oijhzix64BC4jSMacQRS_4NUDtqUQBlyRr0G_uUWirjdmQFyPoaY1L2A44-9g5wgUvTb8C6R6Le1675iuehMyLWuDwzW2pgSvtBQ7rJfLdaY2kvd1ZPWZAV6gGVhr32KsEYNHMBuSjMdqpK2_m1NBw6AWyyUQXDYQhmc1-fi6NXL8aOeY-URP2kd_7h2q-6MBNXY6QmWpMANlgzuqc0atCHvQnmHp_BXhxsikbzoyjLB8bM/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1 Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 01:07:44 UTC	1220	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Cache-Control, Content-Type, If-Modified-Since, Range, Accept, Accept-Language, Content-Language, Origin, Referer, X-Dropbox-App-Name, X-Dropbox-Request-Id, X-Dropbox-Parent-Request-Id, X-Dropbox-Parent-Span-Id, X-Dropbox-Perform-As-Team-Member, X-Dropbox-Perform-As-User, X-File-Name, X-File-Size, X-File-Type, X-Prototype-Version, X-Requested-With, X-Dropbox-Teamid, X-Dropbox-Team-Authorization, X-Paper-Client-Capabilities, Pad-Sharding-Experiment, X-Dropbox-Client-SSCV-Auth Access-Control-Allow-Methods: HEAD, GET, POST, OPTIONS, PUT Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Max-Age: 600 Cache-Control: no-cache Vary: Origin, Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Fri, 30 Aug 2024 01:07:43 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f9e5ef6368e94d09aeb45f2f71430984 Connection: close Transfer-Encoding: chunked
2024-08-30 01:07:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	1047	OUT	GET /p/pdf_img/ACaxr32MCDZLliMnRucPyvyVVFaYxSxWS2VtqqwZ119YXwJEqQchQ0lcQPU8REpCeyOcn6gZ7XHz1kztbctwLX56qmNTsPCtTHFqneSClewDrtgf6SCCW18K4FIqeeW0zU8ZJmZ3EPScyeLfYPebfv4q9VQP84V5bT5TcLL7WIfaWlTnbuDNNY55iT6f2SYwShr5bR7XaEoZayeKST4f6Rca8_qa-DDlWLdqCYtRH04GsplNy2Vt2OU3-YuWVvXEUOkLsGU-cGY0d5DPd5qNn4HQDvoqTolvN69pW56WM6AyvXAKkWIZmQJjmXp__d4ReLaZr2qC1aGKEvSLmAr10TnB_NdN_O_W7L_ehiy0PkotsgNuUNpg5Uabund4TCNPBZU/p.png?is_prewarmed=true&page=0 HTTP/1.1 Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 01:07:44 UTC	712	IN	HTTP/1.1 200 OK Content-Type: image/png Accept-Ranges: bytes Cache-Control: public, max-age=31536000, no-transform Content-Disposition: inline; filename="4TCNPBZU.png"; filename=UTF-8''4TCNPBZU.png Referrer-Policy: no-referrer Timing-Allow-Origin: Vary: Origin X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 41839 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 146 Date: Fri, 30 Aug 2024 01:07:44 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ab8795bd9fe4474b9cf138f33acddc65 Connection: close Transfer-Encoding: chunked
2024-08-30 01:07:44 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 2f 00 00 08 00 08 03 00 00 00 69 59 50 59 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 22 50 4c 54 45 1e 4c a1 f9 fb fd b1 c1 df fb fb fd fd fd ff fd fd fd 2c 56 a7 ff ff ff 00 00 00 20 4e a3 f1 f3 f9 3a 62 ad d3 db ed df e5 f1 dd e5 f1 24 50 a3 ed f1 f7 e7 ed f5 fb fd fd 26 52 a5 50 74 b7 ef f1 f7 f7 f7 fb 74 91 c5 b9 c7 e1 e1 e7 f3 f7 f9 fd 22 50 a3 34 5e ab 32 5c a9 7e 99 c9 cb d7 e9 f5 f7 fb 28 54 a5 83 9d cb 30 5a a9 4e 72 b5 38 60 ad 42 68 b1 eb ef f7 d9 e1 ef bb c9 e3 f1 f5 f9 5e 7e bb c7 d3 e7 d7 df ef a5 b7 d9 e9 ed f5 9b af d5 81 9b cb 44 6a b1 2c 58 a7 8f a7 d1 46 6c b3 a7 b9 db ad bf dd 3e 64 af 52 74 b7 b7 c7 e1 91 a7 Data Ascii: 4000PNGIHDR/iYPYgAMAasRGB"PLTEL,V N:b$P&RPtt"P4^2\~(T0ZNr8`Bh^~Dj,XFl>dRt
2024-08-30 01:07:44 UTC	8	IN	Data Raw: bf e8 e7 c5 3a 9d 0d 0a Data Ascii: :
2024-08-30 01:07:44 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 1f 0c 9e 8a 5b 9b 17 e7 97 37 c7 76 4f bd 77 d6 23 7f bc f1 95 55 79 b1 6e 9b ab 9e 5b 79 c6 a8 bc c5 ec d9 aa bc 64 b2 46 74 e4 f9 c5 99 bc 58 75 7e b1 de 6a 28 2f 1e 1c 73 7e 51 5e a7 7e 70 e9 f8 8e 72 f2 f1 ee c2 8e e3 bb 2f ae 4e 3f 34 f2 fc 62 90 17 2b 2f 50 2d bb 96 17 ec ff b2 6f e7 df bb e7 fe ba 6c f7 60 77 f9 53 1c e5 c6 cb 7b 4f 40 ca 8b d5 e3 ef 0b fd 4d 5e 6c 14 11 ab 6e 93 17 43 23 75 28 2f 3a 57 1c ab 76 dc d1 bb ed 81 6e f7 91 a1 95 ca c3 ff be 6a cf af fa 4b ca 5f 9c d7 1e ef 94 67 4c d6 7c dd f8 bb 8b dd 67 86 b6 f9 ee 2b 55 79 97 cc e0 f2 df 27 aa 63 2f 5e dd fb fd 9f f5 fb a5 06 97 f2 ca f8 42 ff 8f e3 fe b2 f3 af a9 5f 7a 5e 77 7e 51 4e 58 fa 1f 10 18 6c d9 bb b6 fb ee b7 ca b4 ff bb 92 1f cb 79 b1 be b4 51 e7 17 fd Data Ascii: 4000[7vOw#Uyn[ydFtXu~j(/s~Q^~pr/N?4b+/P-ol`wS{O@M^lnC#u(/:WvnjK_gL\|g+Uy'c/^B_z^w~QNXlyQ
2024-08-30 01:07:44 UTC	9092	IN	Data Raw: 40 5e 44 b4 41 11 0d 0a 32 33 36 66 0d 0a 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 01 79 11 df 22 05 12 20 40 20 42 40 5e 44 b4 41 11 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 01 79 11 df 22 05 12 20 40 20 42 40 5e 44 b4 41 11 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 01 79 11 df 22 05 12 20 40 20 42 40 5e 44 b4 41 11 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 01 79 11 df 22 05 12 20 40 20 42 40 5e 44 b4 41 11 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 01 79 11 df 22 05 12 20 40 20 42 40 5e 44 b4 41 11 04 08 10 88 17 90 17 f1 2d 52 20 01 02 04 22 04 e4 45 44 1b 14 41 80 00 81 78 Data Ascii: @^DA236f-R "EDAxy" @ B@^DA-R "EDAxy" @ B@^DA-R "EDAxy" @ B@^DA-R "EDAxy" @ B@^DA-R "EDAxy" @ B@^DA-R "EDAx

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:43 UTC	804	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/op070xas0eh2p222upauu/Document-1.docx?rlkey=lrjcxds4fso3d5dmmlv1itair&st=c1fl3n2k&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:44 UTC	933	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChAtAaNJbqj7ouRSlh2QtHSrEOC2xLYGGi5BS3hJN3ZBWXd4SjFCa1dIRHpBUmctZVNpSzNwNWt3WkRMTXVyRVRrbjliYk5R; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Fri, 30 Aug 2024 01:07:43 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5e83233ad75048cf9afbdaa01f5b58df Connection: close
2024-08-30 01:07:44 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-30 01:07:44 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=116949 Date: Fri, 30 Aug 2024 01:07:44 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:44 UTC	1085	OUT	GET /p/pdf_txt/ACaqfGiJxtuEL2L1y3PJWp9By3eRxQ-h6SJziSDPw8j4hw20KR6cyr016uvJVTBya9Xq5QUbzM69tOppnapiOuXhpCKMvKEeyg8cb2yMVQ45LpKgjyn0dS8NAo27jpaHJkXoF3xDl-zkrOQqENz4Oijhzix64BC4jSMacQRS_4NUDtqUQBlyRr0G_uUWirjdmQFyPoaY1L2A44-9g5wgUvTb8C6R6Le1675iuehMyLWuDwzW2pgSvtBQ7rJfLdaY2kvd1ZPWZAV6gGVhr32KsEYNHMBuSjMdqpK2_m1NBw6AWyyUQXDYQhmc1-fi6NXL8aOeY-URP2kd_7h2q-6MBNXY6QmWpMANlgzuqc0atCHvQnmHp_BXhxsikbzoyjLB8bM/p.json?is_prewarmed=true&metadata=1&text=1&page_start=0&page_end=50 HTTP/1.1 Host: uc5aa5d570ab51076307040c4345.previews.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-30 01:07:45 UTC	1126	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Accept-Ranges: bytes Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Cache-Control: public, max-age=31536000, no-transform Content-Disposition: attachment; filename=oyjLB8bM.json Content-Security-Policy: sandbox Referrer-Policy: no-referrer Timing-Allow-Origin: * Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 606 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 113 X-Webkit-Csp: sandbox Date: Fri, 30 Aug 2024 01:07:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e782d074a1bf4027b509d79ee7a7b578 Connection: close Transfer-Encoding: chunked
2024-08-30 01:07:45 UTC	613	IN	Data Raw: 32 35 65 0d 0a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 5b 5b 36 31 32 2c 37 39 32 2c 31 5d 5d 2c 22 70 61 67 65 5f 63 6f 75 6e 74 22 3a 31 2c 22 73 63 68 65 6d 61 5f 76 65 72 73 69 6f 6e 22 3a 30 7d 2c 22 74 65 78 74 22 3a 7b 22 66 6f 6e 74 73 22 3a 5b 7b 22 66 22 3a 30 2c 22 6e 22 3a 22 48 65 6c 76 65 74 69 63 61 22 7d 2c 7b 22 66 22 3a 32 36 32 31 34 34 2c 22 6e 22 3a 22 48 65 6c 76 65 74 69 63 61 2c 42 6f 6c 64 22 7d 5d 2c 22 6c 69 6e 6b 73 22 3a 7b 22 30 22 3a 5b 7b 22 61 22 3a 7b 22 75 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 62 69 65 6c 2e 6a 75 6e 69 66 65 72 6b 65 6c 2e 63 6f 6d 2f 37 64 50 59 5a 4c 44 44 2f 22 7d 2c 22 72 22 3a 5b 31 31 32 2e 35 34 30 30 30 30 39 31 35 35 32 37 2c 34 38 39 2e 35 31 30 30 30 39 Data Ascii: 25e{"metadata":{"dimensions":[[612,792,1]],"page_count":1,"schema_version":0},"text":{"fonts":[{"f":0,"n":"Helvetica"},{"f":262144,"n":"Helvetica,Bold"}],"links":{"0":[{"a":{"ur":"https://jbiel.juniferkel.com/7dPYZLDD/"},"r":[112.540000915527,489.510009
2024-08-30 01:07:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:44 UTC	530	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:45 UTC	388	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Fri, 30 Aug 2024 01:07:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 88df49672e4c44e3916c59f18cc2555a Connection: close
2024-08-30 01:07:45 UTC	116	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:44 UTC	530	OUT	GET /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:45 UTC	425	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 1233 Content-Type: text/html Date: Fri, 30 Aug 2024 01:07:45 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9e11c460b4f0478a9c6a7dc3be1ee32b Connection: close
2024-08-30 01:07:45 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Timestamp	Bytes transferred	Direction	Data
2024-08-30 01:07:44 UTC	554	OUT	GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTI2Mjg5NTU5MjY3NTc2NTQ4MTA4NjIwOTg2NTA2ODQ2MjAxNjYx; t=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-js_csrf=-xwrrYXX3LnJClmGw6Yfd7h0; __Host-ss=6kr8yRBPWU; locale=en
2024-08-30 01:07:45 UTC	411	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 140 Date: Fri, 30 Aug 2024 01:07:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 15833d5e610246c5ac491b883fa53ac2 Connection: close
2024-08-30 01:07:45 UTC	140	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 6f 6c 6b 69 74 2f 67 65 74 5f 62 65 73 74 5f 63 61 6d 70 61 69 67 6e 73 5f 66 6f 72 5f 75 73 65 72 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "campaigns_toolkit/get_best_campaigns_for_user": Use HTTP POST requests instead of GET to access Dropbox API's