Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0
Analysis ID:	1558829
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5668 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: _.zq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.zq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.zq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.zq(_.Iq(c))+"&hl="+_.zq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.zq(m)+"/chromebook/termsofservice.html?languageCode="+_.zq(d)+"&regionCode="+_.zq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: beacon.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: fp.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: use1-turn.fpjs.io
Source: global traffic	DNS traffic detected: DNS query: c.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: unknown

HTTP traffic detected: POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 486sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: Iframe src: https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?text=continue_with&width=350&logo_alignment=left&click_listener=()%3D%3E%7Bvar%20e%2Ct%3Bthis.hasPendingAuthFlow%26%26(null%3D%3D%3D(e%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3De%7C%7Ce.logLoginCancel(!1))%2Cthis.hasPendingAuthFlow%3D!0%2Cnull%3D%3D%3D(t%3Dthis.logger)%7C%7Cvoid%200%3D%3D%3Dt%7C%7Ct.logLoginStart(!1)%7D&client_id=801668726815.apps.googleusercontent.com&iframe_id=gsi_293497_424909&as=1Izhc9%2Fe6bBjwHRKsKac0g&hl=en
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=624692963&timestamp=1732046313174
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=624692963&timestamp=1732046313174
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=624692963&timestamp=1732046313174
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: Iframe src: /_/bscframe

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No favicon

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs	HTTP Parser: No <meta name="author".. found

Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?opparams=%253Fgis_params%253DChdodHRwczovL3d3dy5kcm9wYm94LmNvbRIXaHR0cHM6Ly93d3cuZHJvcGJveC5jb20YByoWMUl6aGM5L2U2YkJqd0hSS3NLYWMwZzInODAxNjY4NzI2ODE1LmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tOAFCQGMyMjhlOTIyMjVhNjcwODIyNDEzNTFhNjI4MDZhM2E4NzY1ZWI2YWI3NDJkYWU2NDU3ODVkZjk3MTZkNDg4NTQ%2526origin%253Dhttps%25253A%25252F%25252Fwww.dropbox.com%2526response_mode%253Dform_post&dsh=S892608406%3A1732046308623500&client_id=801668726815.apps.googleusercontent.com&ddm=1&display=popup&gsiwebsdk=gis_attributes&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com&response_type=id_token&scope=openid+email+profile&service=lso&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAPlpHALTyYLAxwH0J9z5lhvBznmmvu1lNBQpvtnONoBzOOLrqcAk3cA37JKgIkg1bV5y4lsyg-UA9RITZIQW06C0GleehkqgHX-XKtm91MUHnxA_6p3nPvptqFH27IcypCdurcg3BNisYQ6eFSW2BDtl5X2eEO2kPZ2JwhEl7LP2p_GdWoCcvfLp0dR0rGx7QRozSVYsH1kxqsfbgVNn7ovs...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50316 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.25
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:57:54 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 19765533b1ca44beac6f842f5c613891Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:57:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: aa008cb17e8941488a3119ecc0c593b3Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:57:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Trace-Id: e03709827f774480a0f997a56956054bCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e03709827f774480a0f997a56956054bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:57:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 2781ad482ecc41f990fa6a4faff15aaeConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:03 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 79067af49d364e4ca22a1e1e6fec5627Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:08 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: e362f62b0314492ba435b171cc769841Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:09 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 2378ebc4057440ed936d120c8eb2f641Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c86d28329db141459f4ea5526a1c3236Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: cd7b48a8bd344ed1ba9649c8d3fd3081Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b69001b84d7247c896256bbc25e3029aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f852f053910a4b64b3e35113d0becf71Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:19 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 95f2dab5589d4f8abf6a4a6f325b614bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:20 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: da9a6f460a114b1eb1a0a9f43326f188Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:21 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 35fcdeb9b3fd47c0bf919d80ba495054Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:22 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4426da8375de483c8552af31c1577a35Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Tue, 19 Nov 2024 19:58:22 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 706e533b8ca246fb8a5de576ab600243Connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5668 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5668 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 --field-trial-handle=1996,i,15813780669810554402,13504268372199382653,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: global traffic	HTTP traffic detected: GET /scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=e7d8aaa035d2419b9b144441434b6041&time=1732046266 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=e7d8aaa035d2419b9b144441434b6041&time=1732046266 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /2/stickers/get_stickers HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAJHGCoEXycLZAFfWchY90DEMLb87kGGi5BTGpzR3BDMm5haWx3YnlrM19wOElCdC15cFIxZHkySWdtTHpUdGFTSy1BcExB
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAJHGCoEXycLZAFfWchY90DEMLb87kGGi5BTGpzR3BDMm5haWx3YnlrM19wOElCdC15cFIxZHkySWdtTHpUdGFTSy1BcExB
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=7cbcf027f2f840c69798f0f532a655ac&time=1732046275 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WwoWOd7gPPNnhod&MD=tgkTFAay HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /share_tib_log_unauth HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /2/comments2/logged_out/list_comments HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=7cbcf027f2f840c69798f0f532a655ac&time=1732046275 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR
Source: global traffic	HTTP traffic detected: GET /CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18 HTTP/1.1Host: fp.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
Source: global traffic	HTTP traffic detected: GET /1/update HTTP/1.1Host: beacon.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/seen_state/logged_out/log_file_view HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /log/blocked HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pithos_api_helper_validation HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip%3Frlkey%3D7okspommyssur9a8u9bc5p2q4%26e%3D1%26st%3Dac94myew%26dl%3D0&dr=&dw=1280&dh=907&ww=1280&wh=907&sw=1280&sh=1024&uu=d8cc3cca-fdc5-aead-965b-26e1c2c2e761&sn=1&hd=1732046290&v=15.16.5&pid=5416&pn=1&r=946170 HTTP/1.1Host: c.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/auth_logger/log_auth_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=d8cc3cca-fdc5-aead-965b-26e1c2c2e761.1732046290.1.1732046290.1732046290.1724166274.1766210290308.1; _cs_s=1.0.0.1732048090334
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=d8cc3cca-fdc5-aead-965b-26e1c2c2e761.1732046290.1.1732046290.1732046290.1724166274.1766210290308.1; _cs_s=1.0.0.1732048090334
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=d8cc3cca-fdc5-aead-965b-26e1c2c2e761.1732046290.1.1732046290.1732046290.1724166274.1766210290308.1; _cs_s=1.0.0.1732048090334
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=d8cc3cca-fdc5-aead-965b-26e1c2c2e761.1732046290.1.1732046290.1732046290.1724166274.1766210290308.1; _cs_s=1.0.0.1732048090334
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en; __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-11-19T19:58:01.349Z","expireDate":"2025-05-19T18:58:01.349Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; _cs_c=0; _cs_id=d8cc3cca-fdc5-aead-965b-26e1c2c2e761.1732046290.1.1732046290.1732046290.1724166274.1766210290308.1; _cs_s=1.0.0.1732048090334

Source	Detection	Scanner	Label
https://replay.dropbox.com/settings	0%	Avira URL Cloud	safe
http://capture.dropbox.com/open	0%	Avira URL Cloud	safe
https://replay.dropbox.com/?login=true&referrer=july_2024_release	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
edge-block-previews-env.dropbox-dns.com	162.125.66.16	true	false	high
use1-turn.fpjs.io	35.157.212.223	true	false	high
c.ba.contentsquare.net	54.247.108.216	true	false	high
csp.withgoogle.com	216.58.206.81	true	false	high
play.google.com	142.250.185.110	true	false	high
www3.l.google.com	142.250.186.174	true	false	high
bolt.v.dropbox.com	162.125.21.3	true	false	high
www-env.dropbox-dns.com	162.125.66.18	true	false	high
d-edge.v.dropbox.com	162.125.6.20	true	false	high
www.google.com	142.250.186.132	true	false	high
googlehosted.l.googleusercontent.com	172.217.16.193	true	false	high
fp.dropbox.com	13.32.121.8	true	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
beacon.dropbox.com	unknown	unknown	false	high
accounts.youtube.com	unknown	unknown	false	high
d.dropbox.com	unknown	unknown	false	high
uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com	unknown	unknown	false	unknown
www.dropbox.com	unknown	unknown	false	high
c.contentsquare.net	unknown	unknown	false	high

Name	Malicious	Reputation
https://www.dropbox.com/en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280	false	high
https://fp.dropbox.com/CrbU/a8tlQRW/kdnryYu/iOjwI?q=hSrgVEjs3amxLolocQ18	false	high
https://www.dropbox.com/2/stickers/get_stickers	false	high
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&e=1&st=ac94myew&dl=0	false	high
https://www.dropbox.com/log/ux_analytics	false	high
https://www.dropbox.com/2/comments2/logged_out/list_comments	false	high
https://c.contentsquare.net/pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip%3Frlkey%3D7okspommyssur9a8u9bc5p2q4%26e%3D1%26st%3Dac94myew%26dl%3D0&dr=&dw=1280&dh=907&ww=1280&wh=907&sw=1280&sh=1024&uu=d8cc3cca-fdc5-aead-965b-26e1c2c2e761&sn=1&hd=1732046290&v=15.16.5&pid=5416&pn=1&r=946170	false	high
https://www.dropbox.com/2/seen_state/logged_out/log_file_view	false	high
https://www.dropbox.com/2/files/get_file_content_metadata	false	high
https://www.dropbox.com/2/pap_event_logging/log_events?t=HZcld7EU150xfcw1ZeAXYfyOOigfYMxeOOA0P_5hbAA	false	high
https://www.dropbox.com/2/pap_event_logging/log_events	false	high
https://www.dropbox.com/page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=e7d8aaa035d2419b9b144441434b6041&time=1732046266	false	high
https://www.dropbox.com/log_js_sw_data	false	high
https://www.dropbox.com/log/file_preview	false	high
https://www.dropbox.com/pithos_api_helper_validation	false	high
https://www.google.com/favicon.ico	false	high
https://www.dropbox.com/sso_state	false	high
https://www.dropbox.com/pithos/api_helper_validation	false	high
https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation	false	high
https://c.contentsquare.net/v2/events?uu=d8cc3cca-fdc5-aead-965b-26e1c2c2e761&sn=1&hd=1732046290&v=15.16.5&pid=5416&pn=1&sr=100&mdh=907&str=463&di=3554&dc=32115&fl=32123&ct=0	false	high
https://lh3.googleusercontent.com/Of9rnPCEVYaQ1lNG-IdCWTPDes_jWXhIJzu9Z5deWtKLrDfmQlW9CychHVNU0HcA1PY	false	high
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0	false	high
https://www.dropbox.com/2/auth_logger/log_auth_event	false	high
https://csp.withgoogle.com/csp/report-to/gse_qebhlk	false	high
https://www.dropbox.com/2/client_metrics/record	false	high
https://www.dropbox.com/log/blocked	false	high
https://www.dropbox.com/share_tib_log_unauth	false	high
https://www.dropbox.com/log/telemetry	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/sign-eid-ui/sign-eid	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_303.2.dr, chromecache_713.2.dr	false		high
https://help.dropbox.com/storage-space/team-storage-report	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://www.dropbox.com/dash	chromecache_718.2.dr	false		high
https://play.google.com/work/enroll?identifier=	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://policies.google.com/terms/service-specific	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-mul	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://g.co/recover	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_652.2.dr	false		high
https://www.dropbox.com/overview	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/jan2024/work-desk/work_desk.png	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://replay.dropbox.com/settings	chromecache_561.2.dr, chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/capture-permissions-	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://www.dropbox.com/capture	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://policies.google.com/technologies/cookies	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_460.2.dr, chromecache_491.2.dr	false		high
https://help.dropbox.com/share	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://policies.google.com/terms	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://www.google.com	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-timeline-editing	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://help.dropbox.com/view-edit/edit-media-files	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://www.dropbox.com/privacy	chromecache_496.2.dr, chromecache_431.2.dr	false		high
https://policies.google.com/terms/location	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://assets.dropbox.com/	chromecache_653.2.dr, chromecache_433.2.dr	false		high
https://www.dropbox.com/dash/get-started	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://help.dropbox.com/organize/dropbox-automations	chromecache_718.2.dr	false		high
https://www.dropbox.com/replay	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://help.dropbox.com/sync/make-files-online-only	chromecache_718.2.dr	false		high
https://www.dropbox.com	chromecache_434.2.dr, chromecache_406.2.dr	false		high
https://play.google.com/apps/testing/com.dropbox.android	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://youtube.com/t/terms?gl=	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://www.google.com/intl/	chromecache_652.2.dr	false		high
https://www.hellosign.com/features/qualified-electronic-signatures	chromecache_561.2.dr, chromecache_362.2.dr, chromecache_538.2.dr, chromecache_718.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_463.2.dr, chromecache_512.2.dr	false		high
https://help.dropbox.com	chromecache_496.2.dr, chromecache_431.2.dr	false		high
https://help.dropbox.com/view-edit/image-search	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://replay.dropbox.com/?login=true&referrer=july_2024_release	chromecache_561.2.dr, chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/mobile_app_beta/mobile-	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/replay-transcript-ui	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://www.docsend.com/features/analytics/	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/1a-dash-answer/1a-da	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://help.dropbox.com/view-edit/search	chromecache_718.2.dr	false		high
https://www.dropbox.com/getpasswords	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_652.2.dr	false		high
https://help.dropbox.com/integrations/move-google-docs	chromecache_380.2.dr, chromecache_609.2.dr	false		high
https://www.hellosign.com/features/mobile	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://help.dropbox.com/view-edit/add-dropboxsign-signature-PDF	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://help.dropbox.com/view-edit/video-length	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://policies.google.com/privacy	chromecache_652.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/coupon/coupon-2048x1	chromecache_561.2.dr, chromecache_538.2.dr	false		high
http://capture.dropbox.com/open	chromecache_561.2.dr, chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/replay-	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/dbx-ai-for-search/db	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://play.google/intl/	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/july2024/search_in_replay/replay	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://families.google.com/intl/	chromecache_652.2.dr	false		high
https://policies.google.com/technologies/location-data	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://dropbox.com/overview	chromecache_362.2.dr, chromecache_718.2.dr	false		high
https://replay.dropbox.com	chromecache_718.2.dr	false		high
http://dropbox.com/search#ai_onboarding	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/www/en-us/whats-new/october2023/storage-organization	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_520.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_460.2.dr, chromecache_491.2.dr	false		high
https://www.dropbox.com/requests	chromecache_561.2.dr, chromecache_362.2.dr, chromecache_538.2.dr, chromecache_718.2.dr	false		high
https://meet.google.com	chromecache_460.2.dr, chromecache_491.2.dr	false		high
https://www.dropbox.com/dash/setup/install-app	chromecache_718.2.dr	false		high
https://help.dropbox.com/account-access/locked-state	chromecache_561.2.dr, chromecache_362.2.dr, chromecache_538.2.dr, chromecache_718.2.dr	false		high
https://help.dropbox.com/teams-admins/team-member/alpha-beta-product	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://support.google.com/accounts?p=new-si-ui	chromecache_546.2.dr, chromecache_652.2.dr	false		high
https://aem.dropbox.com/cms/content/dam/dropbox/warp/en-us/product-updates/dbx-december-2023/fss-man	chromecache_561.2.dr, chromecache_538.2.dr	false		high
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_546.2.dr, chromecache_652.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
54.247.108.216	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false
18.196.235.131	unknown	United States	16509	AMAZON-02US	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
162.125.6.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
162.125.21.3	bolt.v.dropbox.com	United States	19679	DROPBOXUS	false
216.58.206.81	csp.withgoogle.com	United States	15169	GOOGLEUS	false
162.125.66.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
13.32.121.8	fp.dropbox.com	United States	16509	AMAZON-02US	false
142.250.185.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.225	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
162.125.1.20	unknown	United States	19679	DROPBOXUS	false
172.217.16.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558829
Start date and time:	2024-11-19 20:56:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/680@54/18

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7449)
Category:	downloaded
Size (bytes):	7853
Entropy (8bit):	5.288973187444755
Encrypted:	false
SSDEEP:	192:Yg0eGZG03T1YgIfW6E3UjnYduhdgRENQKgN2uFj6:Yg0eGZd1PIe6E3UtN4N2v
MD5:	B777B8B1FC447EB6F8367B2E5471F701
SHA1:	AC756ABDC0E25F657568B44FB1E0068C8E7787B5
SHA-256:	26465B28C7C8A0C217D6EB8CCB66D1DCD4F94181B2733ED8AB59E5959993DC91
SHA-512:	DEAB5C51FC1309699F0E929EFD6D13470D37D598B6666073C1F067996FA5787967E02BC020C03ABEC356177434C3672E9680A416C4BE91ADD3408D97DDD180B3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_shareme24_browse_integration_index.after-display-vflt3e4sf.js
Preview:	!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="c6371c78-eec6-3ee8-9253-cc45fdd77a54")}catch(e){}}();.define(["exports","react","./c_file_transfers_async_browse_entry_point_onboarding_modal_async","./e_file_viewer_static_scl_page_file","./e_data_modules_stormcrow","./e_edison","./c_utils_dsx_dsx-react","./c_common_logging-contexts_session-id-logging-metadata","./c_ts_utils","./e_core_exception","./c_bufbuild_protobuf_service-type","./c_api_v2_routes_password_confirmation_provider","./c_src_sink_index","./c_shareme24_browse_integration_logger","./c_src_common_constants","./c_core_i18n","metaserver/static/js/langpack","./c_lodash","./c_downloads","./c_core_notify","react-dom","./c_upload_kit_lib_types","metaserver/static/js/modules/constants/viewer","./c_api_v2_routes_team_provider","./c_api_v2_routes_folders_info_provider","./

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 20:57:42.534389973 CET	53	56682	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:42.583826065 CET	53	59136	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:43.604013920 CET	53	55930	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:44.574748993 CET	53949	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:44.574955940 CET	50438	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:44.583287001 CET	53	50438	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:44.583303928 CET	53	53949	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:45.844618082 CET	54623	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:45.844724894 CET	52750	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:47.175393105 CET	64377	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:47.178333998 CET	58023	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:47.182357073 CET	53	64377	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:47.185441971 CET	53	58023	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:48.884100914 CET	58802	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:48.884459019 CET	62846	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:49.234600067 CET	55141	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:49.234710932 CET	52353	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:49.241758108 CET	53	55141	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:49.253999949 CET	53	52353	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:51.476063013 CET	54529	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:51.476114035 CET	60575	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:51.483527899 CET	53	54529	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:51.483606100 CET	53	60575	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:52.209561110 CET	64654	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:52.209664106 CET	62920	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:52.216850042 CET	53	64654	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:52.218782902 CET	53	62920	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:53.107880116 CET	51254	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:53.107880116 CET	59748	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:53.130645990 CET	53	51254	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:53.131056070 CET	53	59748	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:54.790548086 CET	53	63411	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:56.634381056 CET	53	50721	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:57.890677929 CET	55593	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:57.890712976 CET	64430	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:57.898968935 CET	53	55593	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:57.910398960 CET	53	64430	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:59.588241100 CET	53533	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:59.589447021 CET	49853	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:59.598622084 CET	53	49853	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:59.607465029 CET	53	53533	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:59.952069044 CET	57243	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:59.952217102 CET	63761	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:59.959080935 CET	53	63761	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:59.959566116 CET	64390	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:57:59.959712982 CET	53	57243	1.1.1.1	192.168.2.4
Nov 19, 2024 20:57:59.967154026 CET	53	64390	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:00.075522900 CET	58316	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:00.085587978 CET	53	58316	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:00.748302937 CET	49623	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:00.748505116 CET	64868	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:00.755732059 CET	53	64868	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:00.767508030 CET	53	49623	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:00.856017113 CET	138	138	192.168.2.4	192.168.2.255
Nov 19, 2024 20:58:00.875792027 CET	53	59741	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:02.855901003 CET	56744	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:02.856007099 CET	50491	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:02.863496065 CET	53	56744	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:02.863584042 CET	53	50491	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:11.106920004 CET	51176	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:11.107079983 CET	49345	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:11.114425898 CET	53	51176	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:11.114660978 CET	53	49345	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:14.259011030 CET	53	63033	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:14.309204102 CET	53	64500	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:19.953952074 CET	53	61486	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:25.480104923 CET	55853	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:25.480249882 CET	52351	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:26.034434080 CET	53	52351	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:26.034523964 CET	53	55853	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:28.125372887 CET	52977	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:28.125535965 CET	56306	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:28.132694960 CET	53	52977	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:28.132966995 CET	53	56306	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:28.820555925 CET	57981	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:28.820909977 CET	51385	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:28.828692913 CET	53	57981	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:28.829690933 CET	53	51385	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:30.238689899 CET	56737	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:30.239193916 CET	61384	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:30.245523930 CET	53	56737	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:30.246340990 CET	53	61384	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:31.248388052 CET	53	64508	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:31.403462887 CET	55133	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:31.403588057 CET	51579	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:31.410502911 CET	53	51579	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:31.411082029 CET	53	55133	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:33.926110983 CET	56818	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:33.926434040 CET	50862	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:33.933111906 CET	53	56818	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:33.934052944 CET	53	50862	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:35.434722900 CET	61906	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:35.434880972 CET	50187	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:35.441730976 CET	53	61906	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:35.441787958 CET	53	50187	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:38.543651104 CET	60012	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:38.543921947 CET	55466	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:38.550988913 CET	53	60012	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:38.551033974 CET	53	55466	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:42.425717115 CET	53	57076	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:43.173067093 CET	53	58004	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:45.247605085 CET	51328	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:45.247957945 CET	49530	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:45.254825115 CET	53	49530	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:45.257107973 CET	53	51328	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:45.484282970 CET	53	56232	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:50.304511070 CET	58568	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:50.304713964 CET	63254	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:58:50.312566042 CET	53	63254	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:50.312603951 CET	53	58568	1.1.1.1	192.168.2.4
Nov 19, 2024 20:58:58.322257996 CET	53	56780	1.1.1.1	192.168.2.4
Nov 19, 2024 20:59:03.346543074 CET	62126	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:59:03.346775055 CET	60915	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:59:03.355746031 CET	53	60915	1.1.1.1	192.168.2.4
Nov 19, 2024 20:59:03.371452093 CET	53	62126	1.1.1.1	192.168.2.4
Nov 19, 2024 20:59:04.031112909 CET	50683	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:59:04.031368017 CET	64692	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:59:04.039190054 CET	53	50683	1.1.1.1	192.168.2.4
Nov 19, 2024 20:59:04.039299965 CET	53	64692	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:45 UTC	752	OUT	GET /scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:57:45 UTC	4042	IN	HTTP/1.1 200 OK Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; base-uri 'self' ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; img-src https://* data: blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; media-src https:// blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-NOwF57z5BvEBMA/UfZWYGAto9Nc=' 'nonce-RBSPANAfJ5Znzu2mqNk4J9DFvxI=' Content-Type: text/html; charset=utf-8 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; Path=/; Expires=Sun, 18 Nov 2029 19:57:45 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; Path=/; Domain=dropbox.com; Expires=Wed, 19 Nov 2025 19:57:45 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; Path=/; Expires=Wed, 19 Nov 2025 19:57:45 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=fp4YjBe2SA; Path=/; Expires=Wed, 19 Nov 2025 19:57:45 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 18 Nov 2029 19:57:45 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Tue, 19 Nov 2024 19:57:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e7d8aaa035d2419b9b144441434b6041 Connection: close Transfer-Encoding: chunked
2024-11-19 19:57:45 UTC	756	IN	Data Raw: 36 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0d 0a 36 0d 0a 3c 68 65 61 64 3e 0d 0a 31 39 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 0d 0a 34 31 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 2c 20 6e 6f 69 6d 61 67 65 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 2f 3e 0a 0d 0a 34 37 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 64<!DOCTYPE html><html class="maestro global-header" xmlns="http://www.w3.org/1999/xhtml" lang="en">6<head>19<meta charset="utf-8" />41<meta content="noindex, nofollow, noimageindex" name="robots" />47<meta content="width=device-widt
2024-11-19 19:57:45 UTC	371	IN	Data Raw: 63 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 6f 6b 65 6e 73 2d 76 66 6c 75 75 44 4a 43 44 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 61 37 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 Data Ascii: c0<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/tokens-vfluuDJCD.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>a7<link rel="preload" href="https://cfl.dropboxstatic.c
2024-11-19 19:57:45 UTC	764	IN	Data Raw: 62 35 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2d 76 66 6c 48 36 77 77 77 76 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 34 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d Data Ascii: b5<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/foundation-vflH6wwwv.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>b4<link rel="preload" href="https://cfl.dropboxstatic.com/static/m
2024-11-19 19:57:45 UTC	785	IN	Data Raw: 62 39 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 67 6f 6f 67 6c 65 5f 6f 6e 65 5f 74 61 70 2d 76 66 6c 70 39 58 44 4c 4a 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 62 64 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 Data Ascii: b9<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/google_one_tap-vflp9XDLJ.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>bd<link rel="preload" href="https://cfl.dropboxstatic.com/stat
2024-11-19 19:57:45 UTC	761	IN	Data Raw: 63 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 65 73 74 72 6f 5f 61 70 70 73 68 65 6c 6c 5f 73 74 79 6c 65 73 2d 76 66 6c 66 4e 4e 4c 56 35 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 63 32 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 Data Ascii: c2<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_appshell_styles-vflfNNLV5.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>c2<link rel="preload" href="https://cfl.dropboxstatic
2024-11-19 19:57:45 UTC	609	IN	Data Raw: 63 33 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 6e 64 65 78 2e 77 65 62 2d 76 66 6c 52 46 76 6e 79 31 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 64 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 Data Ascii: c3<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vflRFvny1.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>d0<link rel="preload" href="https://cfl.dropboxstati
2024-11-19 19:57:45 UTC	5420	IN	Data Raw: 63 36 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 64 69 67 2d 69 6c 6c 75 73 74 72 61 74 69 6f 6e 73 2f 69 6e 64 65 78 2e 77 65 62 2d 76 66 6c 5f 75 66 42 6f 75 2e 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 61 73 3d 22 73 74 79 6c 65 22 20 64 61 74 61 2d 6c 6f 61 64 65 72 3d 22 64 62 78 5f 65 64 69 73 6f 6e 5f 70 61 67 65 5b 72 65 71 75 65 73 74 65 64 5f 63 73 73 5d 22 2f 3e 0a 0d 0a 36 65 0d 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 4f 77 46 35 37 7a 35 42 76 45 42 4d 41 2f 55 66 5a 57 59 47 41 74 6f 39 4e 63 3d 22 3e 77 69 Data Ascii: c6<link rel="preload" href="https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-illustrations/index.web-vfl_ufBou.css" crossorigin as="style" data-loader="dbx_edison_page[requested_css]"/>6e<script nonce="NOwF57z5BvEBMA/UfZWYGAto9Nc=">wi
2024-11-19 19:57:45 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 6d 64 2f 64 69 73 74 2f 63 5f 61 63 74 69 76 61 74 69 6f 6e 5f 64 61 74 61 5f 73 74 6f 72 65 2d 76 66 6c 35 55 6e 72 36 78 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 61 64 6d 69 6e 5f 61 70 69 5f 61 64 6d 69 6e 5f 63 6f 6e 73 6f 6c 65 5f 61 70 69 5f 63 6c 69 65 6e 74 2d 76 66 6c 67 56 78 53 63 57 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f Data Ascii: 4000md/dist/c_activation_data_store-vfl5Unr6x", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_admin_api_admin_console_api_client-vflgVxScW", "atlas/file_
2024-11-19 19:57:45 UTC	8	IN	Data Raw: 62 75 6e 64 6c 65 0d 0a Data Ascii: bundle
2024-11-19 19:57:45 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 5f 61 63 74 69 6f 6e 5f 63 72 65 61 74 6f 72 73 5f 69 6e 64 65 78 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 5f 61 63 74 69 6f 6e 5f 63 72 65 61 74 6f 72 73 5f 69 6e 64 65 78 2d 76 66 6c 68 76 41 74 4a 70 22 2c 20 22 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 65 72 2f 73 63 6c 5f 6f 62 6f 65 5f 66 69 6c 65 5f 62 75 6e 64 6c 65 5f 61 6d 64 2f 64 69 73 74 2f 63 5f 64 61 74 61 74 79 70 65 73 5f 73 68 61 72 69 6e 67 5f 61 63 63 6f 75 6e 74 2d 6d 65 74 61 64 61 74 61 22 3a 20 22 73 74 61 74 69 63 2f 61 74 6c 61 73 2f 66 69 6c 65 5f 76 69 65 77 Data Ascii: 4000_amd/dist/c_data_action_creators_index": "static/atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_data_action_creators_index-vflhvAtJp", "atlas/file_viewer/scl_oboe_file_bundle_amd/dist/c_datatypes_sharing_account-metadata": "static/atlas/file_view

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:57:48 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=74856 Date: Tue, 19 Nov 2024 19:57:48 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:48 UTC	974	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=e7d8aaa035d2419b9b144441434b6041&time=1732046266 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:48 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Tue, 19 Nov 2024 19:57:48 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 194c9467c2824366afa93ecc77a1a84a Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:57:49 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=74816 Date: Tue, 19 Nov 2024 19:57:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-19 19:57:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:49 UTC	674	OUT	GET /page_success/end?edison_page_name=scl_oboe_file&path=%2Fscl%2Ffi%2Fw04ljb1dj4z261ir138b1%2FStreet-Atlas.zip&request_id=e7d8aaa035d2419b9b144441434b6041&time=1732046266 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:50 UTC	522	IN	HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 2 Date: Tue, 19 Nov 2024 19:57:49 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 35c55e47d36946f8897e29055667f126 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Windows Analysis Report
https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:51 UTC	742	OUT	POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive Content-Length: 486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:57:51 UTC	486	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 37 3a 35 30 2e 37 33 31 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 32 37 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 34 37 35 31 30 31 36 61 65 31 62 66 34 61 35 62 39 38 61 66 32 34 37 30 65 35 66 32 62 63 65 31 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 37 3a 35 30 2e 37 33 31 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 39 54 31 39 3a 35 37 3a 35 30 2e 37 33 31 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-11-19T19:57:50.731Z","sdk":{"name":"sentry.javascript.browser","version":"8.27.0"}}{"type":"session"}{"sid":"4751016ae1bf4a5b98af2470e5f2bce1","init":true,"started":"2024-11-19T19:57:50.731Z","timestamp":"2024-11-19T19:57:50.731Z","stat
2024-11-19 19:57:52 UTC	467	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Content-Length: 2 Content-Type: application/json Cross-Origin-Resource-Policy: cross-origin Date: Tue, 19 Nov 2024 19:57:52 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 14a5353b201b48a8a7a12e125c77ad99 Connection: close
2024-11-19 19:57:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:52 UTC	524	OUT	GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=oZfAOfi_JWI9Fxz7wiLq0lJf; locale=en
2024-11-19 19:57:53 UTC	464	IN	HTTP/1.1 405 Method Not Allowed Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Allow: POST Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 19 Nov 2024 19:57:52 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: bf41c37bcbf941da81c9efaf540346d0 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	1150	OUT	GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc=false&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&uri_for_logging=dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&width=1280&locale_override=en&default_non_ccpa=true HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:54 UTC	5433	IN	HTTP/1.1 302 Found Content-Security-Policy: base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; script-src 'unsafe-eval' 'inline-speculation-rules' h [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-NOwF57z5BvEBMA/UfZWYGAto9Nc=' 'nonce-RBSPANAfJ5Znzu2mqNk4J9DFvxI=' Content-Type: text/html; charset=utf-8 Location: /en/ccpa_iframe?default_non_ccpa=true&gpc=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fwww.dropbox.com&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=dropbox.com&width=1280 Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChAetEKZOM6gYRphLX1oeg3lEMLb87kGGi5BTGl1U1pJNWVGREUyVjZWYnFIVWlYTWdkcExNLV9haVVvTnRFeDhYUmk2R3hR; Path=/; HttpOnly; Secure; SameSite=None X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 19 Nov 2024 19:57:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3a6bda07a95145eea2376e056f8e433d Connection: close
2024-11-19 19:57:54 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	1029	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: oZfAOfi_JWI9Fxz7wiLq0lJf X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:53 UTC	381	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 33 30 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":30,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2024-11-19 19:57:54 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 68 X-Webkit-Csp: sandbox Content-Length: 137 Date: Tue, 19 Nov 2024 19:57:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: af2799bd5eda4116a37a146c35603565 Connection: close
2024-11-19 19:57:54 UTC	137	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	1053	OUT	POST /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 459 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: oZfAOfi_JWI9Fxz7wiLq0lJf X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:53 UTC	459	OUT	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 5f 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 67 65 22 3a 22 70 72 65 76 69 65 77 5f 70 61 67 65 22 2c 22 70 61 74 68 22 3a 22 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 22 7d 2c 22 65 76 65 6e 74 5f 63 6f 6e 74 65 78 74 22 3a 7b 22 66 69 6c 65 5f 65 78 74 65 6e 73 69 6f 6e 22 3a 22 7a 69 70 22 2c 22 66 69 6c 65 5f 6e 61 6d 65 22 3a 22 53 74 72 65 65 74 20 41 74 6c 61 73 2e 7a 69 70 22 2c 22 66 69 6c 65 5f 70 61 74 68 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 Data Ascii: {"campaign_properties":{"page":"preview_page","path":"/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip"},"event_context":{"file_extension":"zip","file_name":"Street Atlas.zip","file_path":"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zi
2024-11-19 19:57:54 UTC	594	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 91 X-Webkit-Csp: sandbox Content-Length: 141 Date: Tue, 19 Nov 2024 19:57:54 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 84b3ea60e7c54e119fe428ba9fe50f75 Connection: close
2024-11-19 19:57:54 UTC	141	IN	Data Raw: 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 72 65 73 75 6c 74 22 3a 7b 22 63 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 38 34 62 33 65 61 36 30 65 37 63 35 34 65 31 31 39 66 65 34 32 38 62 61 39 66 65 35 30 66 37 35 22 2c 22 76 61 6c 69 64 5f 66 6f 72 22 3a 33 36 30 30 7d 2c 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 5f 73 6c 6f 74 73 22 3a 7b 7d 7d Data Ascii: {"campaigns":[],"campaigns_result":{"campaigns":[],"request_id":"84b3ea60e7c54e119fe428ba9fe50f75","valid_for":3600},"campaigns_to_slots":{}}

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	1059	OUT	POST /2/file_presence/logged_out/get_pass_transmitter_token HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: oZfAOfi_JWI9Fxz7wiLq0lJf X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:53 UTC	159	OUT	Data Raw: 7b 22 66 69 6c 65 5f 69 6e 66 6f 22 3a 7b 22 2e 74 61 67 22 3a 22 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 64 65 74 61 69 6c 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 3f 72 6c 6b 65 79 3d 37 6f 6b 73 70 6f 6d 6d 79 73 73 75 72 39 61 38 75 39 62 63 35 70 32 71 34 26 64 6c 3d 30 22 7d 7d Data Ascii: {"file_info":{".tag":"shared_link_details","url":"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&dl=0"}}
2024-11-19 19:57:57 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 3614 X-Webkit-Csp: sandbox Date: Tue, 19 Nov 2024 19:57:57 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 839 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Trace-Id: c4421eebcaa94cdc91cc9e0085c3cae4 Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c4421eebcaa94cdc91cc9e0085c3cae4 Connection: close
2024-11-19 19:57:57 UTC	839	IN	Data Raw: 7b 22 62 65 61 63 6f 6e 5f 70 72 65 73 65 6e 63 65 5f 69 6e 66 6f 22 3a 20 7b 22 61 75 74 68 5f 6b 65 79 22 3a 20 22 6b 65 79 5f 74 79 70 65 3a 20 5c 22 70 61 73 73 5c 22 5c 6e 73 65 73 73 69 6f 6e 5f 69 64 3a 20 5c 22 31 33 31 36 39 35 31 33 30 39 37 38 36 37 36 33 34 32 30 37 39 30 38 34 38 39 34 38 36 39 38 30 35 38 39 38 33 31 34 5c 22 5c 6e 73 68 61 72 65 64 5f 6c 69 6e 6b 5f 75 72 6c 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 30 34 6c 6a 62 31 64 6a 34 7a 32 36 31 69 72 31 33 38 62 31 2f 53 74 72 65 65 74 2d 41 74 6c 61 73 2e 7a 69 70 3f 72 6c 6b 65 79 3d 37 6f 6b 73 70 6f 6d 6d 79 73 73 75 72 39 61 38 75 39 62 63 35 70 32 71 34 26 64 6c 3d 30 5c 22 5c 6e 22 2c 20 22 62 65 61 63 6f 6e Data Ascii: {"beacon_presence_info": {"auth_key": "key_type: \"pass\"\nsession_id: \"131695130978676342079084894869805898314\"\nshared_link_url: \"https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&dl=0\"\n", "beacon

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	1027	OUT	POST /2/stickers/get_stickers HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CSRF-Token: oZfAOfi_JWI9Fxz7wiLq0lJf X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: edison_atlasservlet.file_viewer-edison:prod sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:53 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-11-19 19:57:54 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Disposition: attachment; filename=unspecified Content-Security-Policy: sandbox X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 22 X-Webkit-Csp: sandbox Date: Tue, 19 Nov 2024 19:57:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 15638 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 50e5d0841e59456099ff99e251d50102 Connection: close
2024-11-19 19:57:54 UTC	15638	IN	Data Raw: 7b 22 73 74 69 63 6b 65 72 5f 73 65 74 73 22 3a 20 5b 7b 22 73 65 74 5f 69 64 22 3a 20 38 2c 20 22 6e 61 6d 65 22 3a 20 22 77 69 7a 61 72 64 73 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 22 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 74 69 63 6b 65 72 73 2f 73 65 74 2f 38 22 2c 20 22 73 74 69 63 6b 65 72 73 22 3a 20 5b 7b 22 69 64 22 3a 20 35 35 2c 20 22 6e 61 6d 65 22 3a 20 22 61 70 70 72 65 63 69 61 74 69 6f 6e 22 2c 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 57 69 7a 61 72 64 20 6d 61 6b 69 6e 67 20 61 20 72 61 69 6e 62 6f 77 22 2c 20 22 69 73 5f 6c 69 76 65 5f 73 74 69 63 6b 65 72 22 3a 20 74 72 75 65 2c 20 22 62 61 73 65 5f 75 72 6c 22 3a 20 22 68 74 Data Ascii: {"sticker_sets": [{"set_id": 8, "name": "wizards", "description": "Wizard", "url": "https://www.dropbox.com/stickers/set/8", "stickers": [{"id": 55, "name": "appreciation", "description": "Wizard making a rainbow", "is_live_sticker": true, "base_url": "ht

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	805	OUT	GET /pithos/api_helper_validation HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/w04ljb1dj4z261ir138b1/Street-Atlas.zip?rlkey=7okspommyssur9a8u9bc5p2q4&st=ac94myew&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:54 UTC	933	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChAJHGCoEXycLZAFfWchY90DEMLb87kGGi5BTGpzR3BDMm5haWx3YnlrM19wOElCdC15cFIxZHkySWdtTHpUdGFTSy1BcExB; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Tue, 19 Nov 2024 19:57:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 178 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9f764bd9526b41a9a8c3a0a7ac45462a Connection: close
2024-11-19 19:57:54 UTC	178	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 61 70 69 5f 68 65 6c 70 65 72 5f 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/api_helper_validation;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:53 UTC	908	OUT	OPTIONS /p/archive_tree/ACd5iI405A9fXoQOaHsWmn8yR2NHz1xTNqP69YMeqZYrM_7H7nrMsUsJ9M4AoSbVNKfEo1_4yiv3b2P3Z-BR2hwhM7Wpo0-fVmbkvapBy0EIQhNxeZEpWK6HPzIOOqM_Xtzfe0u7cj3vP-mzn7OBnBiFcx8RS027VngtFhubyjl61afMJvVgfALODtT4jlLhaw66sL7B76AI_A-IiR-dsQBSvZ6_JGielpDxLM-Mqw1AnaAS9UmvmroAGkgBv4JMPI-EOprtGBx-qovjXHPzFtaThXU692ok186wsroCspI1bPalZS1VAFvrFid1GUrMiwc/p.json?is_prewarmed=true HTTP/1.1 Host: uc4bd55cb38b10ec4d5d691ffe93.previews.dropboxusercontent.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:57:54 UTC	1220	IN	HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Cache-Control, Content-Type, If-Modified-Since, Range, Accept, Accept-Language, Content-Language, Origin, Referer, X-Dropbox-App-Name, X-Dropbox-Request-Id, X-Dropbox-Parent-Request-Id, X-Dropbox-Parent-Span-Id, X-Dropbox-Perform-As-Team-Member, X-Dropbox-Perform-As-User, X-File-Name, X-File-Size, X-File-Type, X-Prototype-Version, X-Requested-With, X-Dropbox-Teamid, X-Dropbox-Team-Authorization, X-Paper-Client-Capabilities, Pad-Sharding-Experiment, X-Dropbox-Client-SSCV-Auth Access-Control-Allow-Methods: HEAD, GET, POST, OPTIONS, PUT Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Max-Age: 600 Cache-Control: no-cache Vary: Origin, Accept-Encoding X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 1 Date: Tue, 19 Nov 2024 19:57:53 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Robots-Tag: noindex, nofollow, noimageindex X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f248bdb6330248c1a0c169d5442f495f Connection: close Transfer-Encoding: chunked
2024-11-19 19:57:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:57:54 UTC	554	OUT	GET /2/campaigns_toolkit/get_best_campaigns_for_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MTMxNjk1MTMwOTc4Njc2MzQyMDc5MDg0ODk0ODY5ODA1ODk4MzE0; t=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-js_csrf=oZfAOfi_JWI9Fxz7wiLq0lJf; __Host-ss=fp4YjBe2SA; locale=en
2024-11-19 19:57:55 UTC	411	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 140 Date: Tue, 19 Nov 2024 19:57:55 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 215f16df952a458c89526d456c455191 Connection: close
2024-11-19 19:57:55 UTC	140	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 61 6d 70 61 69 67 6e 73 5f 74 6f 6f 6c 6b 69 74 2f 67 65 74 5f 62 65 73 74 5f 63 61 6d 70 61 69 67 6e 73 5f 66 6f 72 5f 75 73 65 72 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "campaigns_toolkit/get_best_campaigns_for_user": Use HTTP POST requests instead of GET to access Dropbox API's