Create Interactive Tour

Windows Analysis Report
https://docsend.com/view/idquj8mxi5fphufc

Overview

General Information

Sample URL:	https://docsend.com/view/idquj8mxi5fphufc
Analysis ID:	1647445
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Phishing site or detected (based on various text indicators)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML page contains hidden javascript code

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3264 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docsend.com/view/idquj8mxi5fphufc" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://docsend.com/view/idquj8mxi5fphufc

Joe Sandbox AI: Page contains button: 'DOWNLOAD FILE' Source: '0.0.pages.csv'

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.7

OCR Text: Dropbox DocSend o Pdf Document Has Been Shared With You!! DOCUMENT TITLE: Project Report Q4 #74904SHJD PDF email to email sharing; PREVIEW DOCUMENT PDF DOWNLOAD FILE Adobe DocSend Privacy Policy

Source: https://docsend.com/view/idquj8mxi5fphufc

HTTP Parser: Base64 decoded: {"version":3,"sources":["webpack://./../js/privacy_consent/privacy_consent.module.css","webpack://./../js/privacy_consent/privacy_consent.module.out.css"],"names":[],"mappings":"AAAA,sBAMI,4BAA6B,CAL7B,QAAS,CAIT,QAAS,CAIT,iBAAkB,CANlB,QAAS,CACT,MAAO,CAIP,...

Source: https://assets.docsend.com/static/presentation-SM4CK4ZK.js

HTTP Parser: (()=>{var pe0=object.create;var za1=object.defineproperty;var fe0=object.getownpropertydescriptor;var he0=object.getownpropertynames;var ge0=object.getprototypeof,ve0=object.prototype.hasownproperty;var ze0=(e,t,r)=>t in e?za1(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var lb3=(e=>typeof require<"u"?require:typeof proxy<"u"?new proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw new error('dynamic require of "'+e+'" is not supported')});var y=(e,t)=>()=>(e&&(t=e(e=0)),t);var q=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),q1=(e,t)=>{for(var r in t)za1(e,r,{get:t[r],enumerable:!0})},aw1=(e,t,r,a)=>{if(t&&typeof t=="object"||typeof t=="function")for(let n of he0(t))!ve0.call(e,n)&&n!==r&&za1(e,n,{get:()=>t[n],enumerable:!(a=fe0(t,n))||a.enumerable});return e},oo=(e,t,r)=>(aw1(e,t,"default"),r&&aw1(r,t,"default")),h=(e,t,r)=>(r=e!=null?pe0(ge0(e)):{},aw1(t||!e||!e.__esmodule?za1(r,"default",{value:e...

Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: Iframe src: https://marketing.docsend.com/view/idquj8mxi5fphufc

Source: https://docsend.com/view/idquj8mxi5fphufc

HTTP Parser: No favicon

Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="author".. found

Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found
Source: https://docsend.com/view/idquj8mxi5fphufc	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.40:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.40:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.6.20:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.230.244.168:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.78:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.6.20:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.230.244.218:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.44:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.108:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.108:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.174.127.31:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.208.37.67:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.208.37.67:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.9.74:443 -> 192.168.2.5:49837 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 51MB

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.71
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.71
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.71
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.71
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.170
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.161.71
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/presentation-O3VNFOWI.css HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/presentation-H55HVKYN.css HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/loading_images/large-loader.gif HTTP/1.1Host: assets.docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /static/whitey-D4AB5XBH.png HTTP/1.1Host: assets.docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /static/en-SZGXKYJY.js HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/presentation-SM4CK4ZK.js HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/blank.gif HTTP/1.1Host: assets.docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /static/whitey-D4AB5XBH.png HTTP/1.1Host: assets.docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /public/loading_images/large-loader.gif HTTP/1.1Host: assets.docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /public/blank.gif HTTP/1.1Host: assets.docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /static/AtlasGrotesk-Regular-Web-DLQSG2XM.ttf HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.docsend.com/static/presentation-O3VNFOWI.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/AtlasGrotesk-Medium-Web-LFHKUOTE.woff2 HTTP/1.1Host: assets.docsend.comConnection: keep-aliveOrigin: https://docsend.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.docsend.com/static/presentation-O3VNFOWI.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_client HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Adocsend.com/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Adocsend.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Adocsend.com/marketing_tracker_client HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc/page_data/1?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0gX-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docsend.com/view/idquj8mxi5fphufcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
Source: global traffic	HTTP traffic detected: GET /docs%2F18723d5a-12da-4799-acdb-45b2dadc78ae%2Friviera_images%2F1?Expires=1742847746&Signature=cEbdQgNv1sKVRLddJoBwxtuV-v2~TxQtQfsyYWTwPcsh1ZeG53z-aiwPzgXPIJIe4CfxFoMdaIL9LYuQN5yhJB6W~7qAivTtPiMNUKuOYzgCF4z3wPJYE2-cvcRblVCfIbwpd6Z9BdmbsInrHkPXAY2Szk8V2ucaT~mioMY-kjd1cUbsWjcLRF86JTilUaVsU8eFvYZ9iScT0qvxOViejb7T-GwcDMG4o-gsSkrXsXFXOiJpxQdEOqysKI9Q~tIOkYh8ysC-FmWciuLpUcQfB546nGCo6ILP5~~xuHucwaxWiofwNk0wNypf~4Xqidv-7nLcEWvRXvGMd~INx8Xbpg__&Key-Pair-Id=K35JMHU7N40WUH HTTP/1.1Host: d1ng9lshxk6v9w.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/metaserver/static/pithos/marketing_tracker_client.bundle-vflS_dwpB.js HTTP/1.1Host: cfl.dropboxstatic.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/metaserver/static/pithos/ux_analytics.bundle-vflI1ipmv.js HTTP/1.1Host: cfl.dropboxstatic.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/metaserver/static/pithos/privacy_consent.bundle-vfl7XpqFM.js HTTP/1.1Host: cfl.dropboxstatic.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc HTTP/1.1Host: marketing.docsend.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc/page_data/2?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0gX-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docsend.com/view/idquj8mxi5fphufcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: dbx_js_analytics_id=AABe0A37K1TSeIp9XArraPq5VQq2JrlngIAimBs521HSAw; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.docsend.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /api/4508202598334464/envelope/?sentry_key=c39e4bf7b5475f01ebce6918a36a3fff&sentry_version=7&sentry_client=sentry.javascript.react%2F8.37.1 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; t=16F4VS22KS95Bw864h2YmPoX
Source: global traffic	HTTP traffic detected: GET /docs%2F18723d5a-12da-4799-acdb-45b2dadc78ae%2Friviera_images%2F2?Expires=1742847748&Signature=YYRjDTwZz4v8XuTlPiaiWHIp8dbgtqOP2X0yAECg2fE06-F21MS68EiZ6-hwprgx9KpTbwWQd6GGaIyl8QFXm~d5fTf5gOFLT7MXdIVDNzEyJT7hsop1s2laoiPg13gOsBUqLsFD2t6XOOcAd9cxd77uaIhw3dW9Cv2KNQQoxFldq3RQaxjFat2IEBGPTUxOG0GhukdAE7h1rTj94QxReq06vfrcPLs140kbLwCBFNe7WXEIpyFL0Qq74g1qs5Z7-Xe9a~OndifAn34Mf7RCTwy9uj4FIZmiPVXB-k2vF1rWwIJS6aVNqHpM~7zhJkdwrIXJ08ZUb0GEGcsffgLPoA__&Key-Pair-Id=K35JMHU7N40WUH HTTP/1.1Host: d1ng9lshxk6v9w.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc/page_data/1?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: dbx_js_analytics_id=AABe0A37K1TSeIp9XArraPq5VQq2JrlngIAimBs521HSAw; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=3JkWeQd41%2F6e9kZnTSIlLeSDvd6OAELAMt7dtpFDTaAHbcC8ba4tdSBUDtt1riuFPOUoYXfAgGulxlVSBv10JVgmU8k4OIO6lvESrSt7TrH8KaB5ow%3D%3D--c4lJzKsg9%2BlczsZO--HNW9PoIEsW3HJ762iv3rBw%3D%3D
Source: global traffic	HTTP traffic detected: GET /view/idquj8mxi5fphufc/page_data/2?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: dbx_js_analytics_id=AABe0A37K1TSeIp9XArraPq5VQq2JrlngIAimBs521HSAw; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=3JkWeQd41%2F6e9kZnTSIlLeSDvd6OAELAMt7dtpFDTaAHbcC8ba4tdSBUDtt1riuFPOUoYXfAgGulxlVSBv10JVgmU8k4OIO6lvESrSt7TrH8KaB5ow%3D%3D--c4lJzKsg9%2BlczsZO--HNW9PoIEsW3HJ762iv3rBw%3D%3D
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /docs%2F18723d5a-12da-4799-acdb-45b2dadc78ae%2Friviera_images%2F1?Expires=1742847746&Signature=cEbdQgNv1sKVRLddJoBwxtuV-v2~TxQtQfsyYWTwPcsh1ZeG53z-aiwPzgXPIJIe4CfxFoMdaIL9LYuQN5yhJB6W~7qAivTtPiMNUKuOYzgCF4z3wPJYE2-cvcRblVCfIbwpd6Z9BdmbsInrHkPXAY2Szk8V2ucaT~mioMY-kjd1cUbsWjcLRF86JTilUaVsU8eFvYZ9iScT0qvxOViejb7T-GwcDMG4o-gsSkrXsXFXOiJpxQdEOqysKI9Q~tIOkYh8ysC-FmWciuLpUcQfB546nGCo6ILP5~~xuHucwaxWiofwNk0wNypf~4Xqidv-7nLcEWvRXvGMd~INx8Xbpg__&Key-Pair-Id=K35JMHU7N40WUH HTTP/1.1Host: d1ng9lshxk6v9w.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/metaserver/static/pithos/marketing_tracker_service.bundle-vfluGjITt.js HTTP/1.1Host: cfl.dropboxstatic.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://marketing.docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs%2F18723d5a-12da-4799-acdb-45b2dadc78ae%2Friviera_images%2F2?Expires=1742847748&Signature=YYRjDTwZz4v8XuTlPiaiWHIp8dbgtqOP2X0yAECg2fE06-F21MS68EiZ6-hwprgx9KpTbwWQd6GGaIyl8QFXm~d5fTf5gOFLT7MXdIVDNzEyJT7hsop1s2laoiPg13gOsBUqLsFD2t6XOOcAd9cxd77uaIhw3dW9Cv2KNQQoxFldq3RQaxjFat2IEBGPTUxOG0GhukdAE7h1rTj94QxReq06vfrcPLs140kbLwCBFNe7WXEIpyFL0Qq74g1qs5Z7-Xe9a~OndifAn34Mf7RCTwy9uj4FIZmiPVXB-k2vF1rWwIJS6aVNqHpM~7zhJkdwrIXJ08ZUb0GEGcsffgLPoA__&Key-Pair-Id=K35JMHU7N40WUH HTTP/1.1Host: d1ng9lshxk6v9w.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=6 HTTP/1.1Host: docsend.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docsend.com/view/idquj8mxi5fphufcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D
Source: global traffic	HTTP traffic detected: GET /widget/lv6lji7h HTTP/1.1Host: widget.intercom.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=6 HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /frame-modern.24099529.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor-modern.c71ca7d4.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /pubsub/5-o1eJtECmgKM7s3NRxiMkhFiTwUZFFtAPFLeEbnFnjY0wSv4qZeTEf9hiQSTaEAA1CXl0jRoPQZlxouUSkzRDu-MVrUBXBZbSstGd?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor HTTP/1.1Host: nexus-websocket-a.intercom.ioConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://docsend.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Xzyji9Cc7D7f8DI6XUwTeg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /messenger/web/launcher_settings HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/web/ping HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /vendors~app~tooltips-modern.aefe08bc.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendors~app-modern.a4ac264b.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app~tooltips-modern.7c0c2b53.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app-modern.0dfb4126.js HTTP/1.1Host: js.intercomcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970
Source: global traffic	HTTP traffic detected: GET /messenger/web/metrics HTTP/1.1Host: api-iam.intercom.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
Source: global traffic	HTTP traffic detected: GET /presentation_analytics/record_page_view HTTP/1.1Host: docsend.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=sAHqxwR7zHUXGz%2FrQpiVfHenemAXu%2B9ULQfm5zWIE2979UKa6fqtXXhfaSiYbL81whXDqgZ11pUWydPAM1p87UCiMvoNnCm7Of19n0UBJU4GCc0Vag%3D%3D--MoaWR%2BUM0AA1nPRI--dJKQT0IpYU3%2Bop5lAmg5uw%3D%3D; intercom-id-lv6lji7h=dc9aa1b0-0113-4d71-9e1e-6526bacb03ff; intercom-session-lv6lji7h=; intercom-device-id-lv6lji7h=7d99d09a-26ab-4b2c-b836-28904c657970

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docsend.com
Source: global traffic	DNS traffic detected: DNS query: assets.docsend.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: d1ng9lshxk6v9w.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: marketing.docsend.com
Source: global traffic	DNS traffic detected: DNS query: widget.intercom.io
Source: global traffic	DNS traffic detected: DNS query: js.intercomcdn.com
Source: global traffic	DNS traffic detected: DNS query: api-iam.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nexus-websocket-a.intercom.io
Source: global traffic	DNS traffic detected: DNS query: nel.heroku.com

Source: unknown

HTTP traffic detected: POST /api/4508202598334464/envelope/?sentry_key=c39e4bf7b5475f01ebce6918a36a3fff&sentry_version=7&sentry_client=sentry.javascript.react%2F8.37.1 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 490sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://docsend.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docsend.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:28 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f4c78d3825bd400f8bf4e73ff63dcd9eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:29 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 3a770eb9ae204f24979a513305fc1adcConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:30 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: efe42ca0c07442dc993e94d58808129fConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:30 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 31e5359585f44f73989bf26a47ccb31eConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:31 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 86ddd804add345b8ba036231a8857b01Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:32 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 9cfe92c1f80c4928bed473ffc1478897Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:21:36 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847696&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1pl4wPMBA%2FIfh7CbJJqttZxeqd4rI9UHg7G5DvMthDc%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847696&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1pl4wPMBA%2FIfh7CbJJqttZxeqd4rI9UHg7G5DvMthDc%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 7f9811832df4c0ab77fe1a54ea6ba566.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-LdvFJgy+Rp30QeKJ2mFEvg=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: 9f5b2865-9bb2-4ddb-a7cc-4246a83e38fcX-Runtime: 0.002692Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: yMOQgIohHgUyl3jbBMXfvH_97p6KRSDw3huuuHhfVI0C37D7GkkBRw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:37 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 0bd68bee36e1439e8e5d99dce60226b4Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:42 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b9efba9c83a64364bf83512d8272c1a1Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:21:45 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847706&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=ieGwfgbvNFohMWoG2u9FaLF%2BelPoW1vhIeplTwuYdCM%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847706&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=ieGwfgbvNFohMWoG2u9FaLF%2BelPoW1vhIeplTwuYdCM%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 6f0d33f9dc4943769155e0d17d0458aa.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-ME61Oa5Y1y3dCHKVJ06EhA=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: 8566b494-f236-4532-9d9a-eacfa1ca279dX-Runtime: 0.002565Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: -4kkzB_Ucl0VU7AV68QihozKwtJ8GtnKghk0_qsLeQe-hWvSaE_IpQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:21:58 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f434104559f74e58bbfa5ce66dce9bbfConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:21:58 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847718&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Qsxfd9BARbY4toCBDJuxUK4iIJ2ful%2B6ov8GgyI%2BKC4%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847718&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Qsxfd9BARbY4toCBDJuxUK4iIJ2ful%2B6ov8GgyI%2BKC4%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 4942ac6afe108c9d67b9bcd032c78848.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-B8YGhGjQCwRsnWqp9K3tOA=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: f2eec32a-de98-49c9-9009-2cdbf522ea46X-Runtime: 0.002780Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: vLlp7OeDFf_LxgOY5Ns4ZCiJv9g70sLagooQ6C0BV5IQ7vam-VJmuQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:22:10 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847730&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=NDd4wKoFLLYYPGqD31N%2B%2FvpAAmNf%2B6qnYrPnNxSwI7g%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847730&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=NDd4wKoFLLYYPGqD31N%2B%2FvpAAmNf%2B6qnYrPnNxSwI7g%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 a099b23be243d2ee8929f28860829b6a.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-esncEl9Nt7D7mY9mDEmDyQ=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: 7fb69fc9-ec7d-4158-a5ce-d8c486dea5f7X-Runtime: 0.002555Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: JEjyN67taTstMxLXAy9b71kmMSQLzAkkHQIK3Nl6eU05UU0kjmy_9w==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:22:20 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847740&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=sdZEckigrBTJ9b5mdMKpKbKR%2FGJsNzwM1eJf6HOu4Fw%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847740&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=sdZEckigrBTJ9b5mdMKpKbKR%2FGJsNzwM1eJf6HOu4Fw%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 1b4fcdcf534aed5a7a4dae6e1d54fc52.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-WArjxkVKqLprZPEAc3i7jQ=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: 01b48b31-fea3-4588-98f3-ba0e782fd87aX-Runtime: 0.002632Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: qlI4T_GZjKOykCNFgdNGzjh5OPxne_MiskFCOw2CiIJJFqdzPsl54Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Mon, 24 Mar 2025 20:22:27 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 76bff8980bc14d3ebd273bd0ebf65665Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 9Connection: closeServer: CowboyDate: Mon, 24 Mar 2025 20:22:32 GMTReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847752&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1kN%2FVk1XuKvTIUtmBbahXjSGqviUV%2BS3QjgonqwPHWI%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847752&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=1kN%2FVk1XuKvTIUtmBbahXjSGqviUV%2BS3QjgonqwPHWI%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Via: 1.1 vegur, 1.1 4b5d3fd6f9d06670ea48aba1d0ff3c6e.cloudfront.net (CloudFront)X-Cascade: passCache-Control: no-cacheContent-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://.previews.dropboxusercontent.com//p.m3u8 https://*.dropboxusercontent.com 'nonce-2QEfxdtHwjJBtpaPLuIG2Q=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsendX-Request-Id: 9aecc12b-4d78-4789-b0d2-6e184c9f1b86X-Runtime: 0.002741Strict-Transport-Security: max-age=31556952; includeSubDomains; preloadVary: OriginX-Cache: Error from cloudfrontX-Amz-Cf-Pop: JFK52-P6X-Amz-Cf-Id: jLXsKIgW8XFDU2uiOtOIhHVdvBJI2Wm4sO7XdqattpAMSFuBcIMl0A==

Source: chromecache_130.3.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_162.3.dr	String found in binary or memory: http://commercialtype.com/licenseAtlas
Source: chromecache_130.3.dr	String found in binary or memory: http://dev.apollodata.com/core/fragments.html#unique-names
Source: chromecache_151.3.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_151.3.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_130.3.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_130.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_130.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_130.3.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_130.3.dr	String found in binary or memory: http://videojs.com/
Source: chromecache_162.3.dr	String found in binary or memory: http://www.commercialtype.comNot
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/public/blank.gif
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/public/loading_images/large-loader.gif
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/static/en-SZGXKYJY.js
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/static/presentation-H55HVKYN.css
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/static/presentation-O3VNFOWI.css
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/static/presentation-SM4CK4ZK.js
Source: chromecache_146.3.dr	String found in binary or memory: https://assets.docsend.com/static/whitey-D4AB5XBH.png
Source: chromecache_146.3.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/nmkphfcebcpicnakipcmgapcckkbhppd
Source: chromecache_130.3.dr	String found in binary or memory: https://clipboardjs.com/
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/favicon-1024x1024.png
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/view/
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/view/idquj8mxi5fphufc/page_data/1
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/view/idquj8mxi5fphufc/page_data/2
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/view/idquj8mxi5fphufc/thumb/1
Source: chromecache_146.3.dr	String found in binary or memory: https://docsend.com/view/idquj8mxi5fphufc/thumb/2
Source: chromecache_130.3.dr, chromecache_127.3.dr	String found in binary or memory: https://fengyuanchen.github.io/cropperjs
Source: chromecache_146.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_156.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/homemadeapple/v22/Qw3EZQFXECDrI2q789EKQZJob0x6XHg.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_164.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/airbnb/polyglot.js/blob/master/LICENSE
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/airbnb/polyglot.js/blob/master/lib/polyglot.js#L299
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/kesla/parse-headers/
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/kesla/parse-headers/blob/master/LICENCE
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/mholt/PapaParse
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/mozilla/vtt.js
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/mozilla/vtt.js/blob/main/LICENSE
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/videojs/video.js/blob/main/LICENSE
Source: chromecache_130.3.dr	String found in binary or memory: https://github.com/videojs/video.js/issues/2617
Source: chromecache_130.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_130.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_130.3.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_130.3.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_130.3.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_130.3.dr	String found in binary or memory: https://uppy.io/docs/aws-s3/#getUploadParameters-file
Source: chromecache_146.3.dr	String found in binary or memory: https://widget.intercom.io/widget/
Source: chromecache_130.3.dr	String found in binary or memory: https://www.brightcove.com/
Source: chromecache_146.3.dr	String found in binary or memory: https://www.docsend.com/legal
Source: chromecache_146.3.dr	String found in binary or memory: https://www.docsend.com/what-is-docsend/
Source: chromecache_146.3.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_client
Source: chromecache_124.3.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_146.3.dr	String found in binary or memory: https://www.dropbox.com/pithos/privacy_consent
Source: chromecache_146.3.dr	String found in binary or memory: https://www.dropbox.com/pithos/ux_analytics
Source: chromecache_146.3.dr	String found in binary or memory: https://www.dropbox.com/report_abuse?ssu=https%3A%2F%2Fdocsend.com%2Fview%2Fidquj8mxi5fphufc
Source: chromecache_130.3.dr	String found in binary or memory: https://yarnpkg.com/en/docs/selective-version-resolutions

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.104:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.40:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.40:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.6.20:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.230.244.168:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.99.29:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.78:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.6.20:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.59:443 -> 192.168.2.5:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.4.18:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.230.244.218:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.44:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.108:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.139.47.108:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.174.127.31:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.208.37.67:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.208.37.67:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.244.105:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.226.9.74:443 -> 192.168.2.5:49837 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6408_542527828

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6408_542527828

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@23/72@44/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3264 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docsend.com/view/idquj8mxi5fphufc"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2068 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1776,i,1886032672636536431,8156962398510842745,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3264 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://docsend.com/view/idquj8mxi5fphufc	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://dev.apollodata.com/core/fragments.html#unique-names	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
nel.heroku.com	34.226.9.74	true	false	high
widget.intercom.io	13.249.91.44	true	false	high
api-iam.intercom.io	34.198.244.105	true	false	high
cfl.dropboxstatic.com.cdn.cloudflare.net	104.16.99.29	true	false	high
d3gwed3etk0v2d.cloudfront.net	18.164.116.78	true	false	high
d2qvtfnm75xrxf.cloudfront.net	108.138.106.104	true	false	high
www-env.dropbox-dns.com	162.125.4.18	true	false	high
d-edge.v.dropbox.com	162.125.6.20	true	false	high
www.google.com	142.250.176.196	true	false	high
d1ng9lshxk6v9w.cloudfront.net	54.230.244.168	true	false	high
nexus-websocket-a.intercom.io	35.174.127.31	true	false	high
docsend.com	3.168.102.59	true	false	high
js.intercomcdn.com	108.139.47.108	true	false	high
assets.docsend.com	unknown	unknown	false	high
cfl.dropboxstatic.com	unknown	unknown	false	high
marketing.docsend.com	unknown	unknown	false	high
d.dropbox.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://docsend.com/client_log	false	high
https://assets.docsend.com/public/blank.gif	false	high
https://api-iam.intercom.io/messenger/web/launcher_settings	false	high
https://www.dropbox.com/pithos/ux_analytics	false	high
https://www.dropbox.com/pithos/host%3Adocsend.com/privacy_consent	false	high
https://assets.docsend.com/static/whitey-D4AB5XBH.png	false	high
https://assets.docsend.com/static/presentation-O3VNFOWI.css	false	high
https://www.dropbox.com/log/ux_analytics	false	high
https://js.intercomcdn.com/vendors~app-modern.a4ac264b.js	false	high
https://widget.intercom.io/widget/lv6lji7h	false	high
https://api-iam.intercom.io/messenger/web/metrics	false	high
https://www.dropbox.com/pithos/host%3Adocsend.com/marketing_tracker_client	false	high
https://docsend.com/favicon.ico?v=6	false	high
https://js.intercomcdn.com/vendor-modern.c71ca7d4.js	false	high
https://www.dropbox.com/pithos/host%3Adocsend.com/ux_analytics	false	high
https://docsend.com/view/idquj8mxi5fphufc/page_data/2?viewLoadTime=1742847682&timezoneOffset=-14400	false	high
https://docsend.com/presentation_analytics/record_page_view	false	high
https://www.dropbox.com/pithos/privacy_consent	false	high
https://d.dropbox.com/api/4508202598334464/envelope/?sentry_key=c39e4bf7b5475f01ebce6918a36a3fff&sentry_version=7&sentry_client=sentry.javascript.react%2F8.37.1	false	high
https://docsend.com/view/idquj8mxi5fphufc	false	high
https://assets.docsend.com/public/loading_images/large-loader.gif	false	high
https://assets.docsend.com/static/AtlasGrotesk-Regular-Web-DLQSG2XM.ttf	false	high
https://www.dropbox.com/pithos/marketing_tracker_service	false	high
https://js.intercomcdn.com/frame-modern.24099529.js	false	high
https://www.dropbox.com/pithos/marketing_tracker_client	false	high
https://js.intercomcdn.com/app-modern.0dfb4126.js	false	high
https://cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_client.bundle-vflS_dwpB.js	false	high
https://docsend.com/metrics/properties	false	high
https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service	false	high
https://marketing.docsend.com/view/idquj8mxi5fphufc	false	high
https://js.intercomcdn.com/app~tooltips-modern.7c0c2b53.js	false	high
https://assets.docsend.com/static/presentation-H55HVKYN.css	false	high
https://js.intercomcdn.com/vendors~app~tooltips-modern.aefe08bc.js	false	high
https://assets.docsend.com/static/en-SZGXKYJY.js	false	high
https://docsend.com/view/idquj8mxi5fphufc/page_data/1?viewLoadTime=1742847682&timezoneOffset=-14400	false	high
https://api-iam.intercom.io/messenger/web/ping	false	high
https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ux_analytics.bundle-vflI1ipmv.js	false	high
https://nel.heroku.com/reports?ts=1742847740&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=sdZEckigrBTJ9b5mdMKpKbKR%2FGJsNzwM1eJf6HOu4Fw%3D	false	high
https://nexus-websocket-a.intercom.io/pubsub/5-o1eJtECmgKM7s3NRxiMkhFiTwUZFFtAPFLeEbnFnjY0wSv4qZeTEf9hiQSTaEAA1CXl0jRoPQZlxouUSkzRDu-MVrUBXBZbSstGd?X-Nexus-New-Client=true&X-Nexus-Version=0.14.0&user_role=visitor	false	high
https://assets.docsend.com/static/AtlasGrotesk-Medium-Web-LFHKUOTE.woff2	false	high
https://assets.docsend.com/static/presentation-SM4CK4ZK.js	false	high
https://cfl.dropboxstatic.com/static/metaserver/static/pithos/marketing_tracker_service.bundle-vfluGjITt.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_151.3.dr	false		high
https://github.com/videojs/video.js/issues/2617	chromecache_130.3.dr	false		high
http://jquery.org/license	chromecache_130.3.dr	false		high
https://www.dropbox.com/report_abuse?ssu=https%3A%2F%2Fdocsend.com%2Fview%2Fidquj8mxi5fphufc	chromecache_146.3.dr	false		high
http://jqueryui.com	chromecache_130.3.dr	false		high
https://clipboardjs.com/	chromecache_130.3.dr	false		high
http://www.commercialtype.comNot	chromecache_162.3.dr	false		high
https://docsend.com/view/	chromecache_146.3.dr	false		high
https://docsend.com/view/idquj8mxi5fphufc/thumb/2	chromecache_146.3.dr	false		high
https://docsend.com/view/idquj8mxi5fphufc/thumb/1	chromecache_146.3.dr	false		high
https://github.com/mholt/PapaParse	chromecache_130.3.dr	false		high
https://docsend.com	chromecache_146.3.dr	false		high
https://github.com/focus-trap/tabbable/blob/master/LICENSE	chromecache_130.3.dr	false		high
https://github.com/kesla/parse-headers/blob/master/LICENCE	chromecache_130.3.dr	false		high
https://github.com/airbnb/polyglot.js/blob/master/lib/polyglot.js#L299	chromecache_130.3.dr	false		high
https://widget.intercom.io/widget/	chromecache_146.3.dr	false		high
http://commercialtype.com/licenseAtlas	chromecache_162.3.dr	false		high
https://github.com/airbnb/polyglot.js/blob/master/LICENSE	chromecache_130.3.dr	false		high
https://yarnpkg.com/en/docs/selective-version-resolutions	chromecache_130.3.dr	false		high
https://openjsf.org/	chromecache_130.3.dr	false		high
https://fengyuanchen.github.io/cropperjs	chromecache_130.3.dr, chromecache_127.3.dr	false		high
http://jedwatson.github.io/classnames	chromecache_130.3.dr	false		high
https://uppy.io/docs/aws-s3/#getUploadParameters-file	chromecache_130.3.dr	false		high
https://lodash.com/	chromecache_130.3.dr	false		high
https://github.com/kesla/parse-headers/	chromecache_130.3.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_130.3.dr	false		high
https://github.com/mozilla/vtt.js/blob/main/LICENSE	chromecache_130.3.dr	false		high
http://fontawesome.io/license	chromecache_151.3.dr	false		high
http://underscorejs.org/LICENSE	chromecache_130.3.dr	false		high
https://chrome.google.com/webstore/detail/nmkphfcebcpicnakipcmgapcckkbhppd	chromecache_146.3.dr	false		high
https://jquery.org/license	chromecache_130.3.dr	false		high
https://jquery.com/	chromecache_130.3.dr	false		high
http://videojs.com/	chromecache_130.3.dr	false		high
https://github.com/videojs/video.js/blob/main/LICENSE	chromecache_130.3.dr	false		high
https://www.docsend.com/what-is-docsend/	chromecache_146.3.dr	false		high
http://dev.apollodata.com/core/fragments.html#unique-names	chromecache_130.3.dr	false	Avira URL Cloud: safe	unknown
https://lodash.com/license	chromecache_130.3.dr	false		high
https://github.com/mozilla/vtt.js	chromecache_130.3.dr	false		high
https://docsend.com/favicon-1024x1024.png	chromecache_146.3.dr	false		high
https://www.brightcove.com/	chromecache_130.3.dr	false		high
https://docsend.com/view/idquj8mxi5fphufc/page_data/1	chromecache_146.3.dr	false		high
https://docsend.com/view/idquj8mxi5fphufc/page_data/2	chromecache_146.3.dr	false		high
https://www.docsend.com/legal	chromecache_146.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.168.102.79	unknown	United States	16509	AMAZON-02US	false
3.168.102.32	unknown	United States	16509	AMAZON-02US	false
3.168.102.59	docsend.com	United States	16509	AMAZON-02US	false
13.249.91.44	widget.intercom.io	United States	16509	AMAZON-02US	false
35.174.127.31	nexus-websocket-a.intercom.io	United States	14618	AMAZON-AESUS	false
162.125.6.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
34.226.9.74	nel.heroku.com	United States	14618	AMAZON-AESUS	false
104.16.99.29	cfl.dropboxstatic.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
54.230.244.218	unknown	United States	16509	AMAZON-02US	false
108.139.47.108	js.intercomcdn.com	United States	16509	AMAZON-02US	false
142.250.176.196	www.google.com	United States	15169	GOOGLEUS	false
34.198.244.105	api-iam.intercom.io	United States	14618	AMAZON-AESUS	false
108.138.106.40	unknown	United States	16509	AMAZON-02US	false
18.164.116.78	d3gwed3etk0v2d.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
162.125.4.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
54.230.244.168	d1ng9lshxk6v9w.cloudfront.net	United States	16509	AMAZON-02US	false
108.138.106.104	d2qvtfnm75xrxf.cloudfront.net	United States	16509	AMAZON-02US	false
44.208.37.67	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647445
Start date and time:	2025-03-24 21:20:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docsend.com/view/idquj8mxi5fphufc
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@23/72@44/19

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.41.3, 142.250.72.110, 142.250.31.84, 142.250.80.46, 142.250.65.174, 142.250.176.206, 142.250.176.202, 142.250.72.99, 142.250.65.234, 142.251.32.106, 142.250.80.106, 142.250.81.234, 142.251.35.170, 142.250.65.170, 142.250.80.42, 142.251.40.170, 142.250.65.202, 142.251.40.138, 142.250.72.106, 142.250.80.10, 142.251.40.106, 142.250.64.106, 142.250.64.74, 142.250.80.74, 199.232.214.172, 142.250.65.238, 142.251.40.142, 142.251.32.110, 142.251.40.227, 142.251.40.110, 34.104.35.123, 142.250.65.163, 142.250.80.78, 184.31.69.3, 4.175.87.197, 20.24.125.47, 150.171.27.10, 23.33.40.134
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://docsend.com/view/idquj8mxi5fphufc

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	627
Entropy (8bit):	4.8548730495981
Encrypted:	false
SSDEEP:	12:nnwkHFVF6YXukbpPxTEdxk2fKuv6/WbxXBu3J3nWN0j314IQL:nnwWpqkNOYDa6/gXBuNq054j
MD5:	85C876EB10030058F29245148995CC2D
SHA1:	458679E2B02107F6448729AEC844D3BD8283C9ED
SHA-256:	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
SHA-512:	2CA5D147B5630AA540DD241CB8C06429A7072108C2BEADF04ED532FC7F5291BDF1147F6C334293D96397B9402421B1AD52CDF9F1EA39918C95201DB1DBA19DCF
Malicious:	false
Reputation:	low
URL:	https://marketing.docsend.com/view/idquj8mxi5fphufc
Preview:	<html>. <head>. [if (gte IE 9) ]>. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <![endif]-->. <title>Dropbox</title>. <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-eval'; ">. </head>.<body>.<script>. (function() {. /*. Requesting marketing service to process tealium events. */. document.head.appendChild(Object.assign(document.createElement('script'), {. src: 'https://www.dropbox.com/pithos/marketing_tracker_service',. async: true. }));. })();.</script>.</body>.</html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 21:21:17.371562004 CET	53	63565	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:17.382289886 CET	53	50874	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:18.173676014 CET	53	57597	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:21.321177959 CET	58473	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:21.321338892 CET	57007	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:21.434092999 CET	53	58473	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:21.435296059 CET	53	57007	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:22.107925892 CET	49279	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:22.107925892 CET	53726	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:22.216196060 CET	53	53726	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:22.221137047 CET	53	49279	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:22.927354097 CET	63445	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:22.927504063 CET	52949	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:23.037658930 CET	53	63972	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:23.041785955 CET	53	52949	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:23.098103046 CET	53	63445	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:23.549443960 CET	64833	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:23.549663067 CET	53265	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:23.658899069 CET	53	64833	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:23.688436985 CET	53	53265	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:24.706119061 CET	55778	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:24.707547903 CET	57090	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:24.808953047 CET	53	55778	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:24.811935902 CET	53	57090	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:25.209260941 CET	58538	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:25.209459066 CET	57568	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:25.318645000 CET	53	58538	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:25.320755959 CET	53	57568	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:25.912381887 CET	53	55611	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:26.282702923 CET	54579	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:26.282979012 CET	60793	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:26.331012011 CET	64410	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:26.331161976 CET	55070	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:26.391263962 CET	53	54579	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:26.391278982 CET	53	60793	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:26.438985109 CET	53	55070	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:26.451678038 CET	53	64410	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:26.948993921 CET	51540	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:26.949166059 CET	49524	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:27.056317091 CET	53	51540	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:27.062810898 CET	53	49524	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.049611092 CET	61537	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.049776077 CET	49343	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.158756971 CET	53	49343	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.158772945 CET	53	61537	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.530417919 CET	63915	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.530591011 CET	57861	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.549346924 CET	50490	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.549532890 CET	64086	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.573272943 CET	57388	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.573903084 CET	56504	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:28.639655113 CET	53	57861	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.641681910 CET	53	63915	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.680957079 CET	53	57388	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.680974960 CET	53	56504	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.685340881 CET	53	64086	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:28.732853889 CET	53	50490	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:29.549513102 CET	54279	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:29.549988985 CET	56545	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:29.657676935 CET	53	56545	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:29.659744978 CET	53	54279	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:30.230056047 CET	52727	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:30.230056047 CET	57914	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:30.333508968 CET	53	57914	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:30.334168911 CET	53	52727	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:31.464085102 CET	57464	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:31.489001036 CET	61484	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:31.567605019 CET	53	57464	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:31.590966940 CET	53	61484	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:32.355674982 CET	60722	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:32.356591940 CET	61945	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:32.460546017 CET	53	60722	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:32.460743904 CET	53	61945	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:32.681309938 CET	63859	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:32.681617022 CET	63686	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:21:32.789747953 CET	53	63859	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:32.789803982 CET	53	63686	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:35.601691961 CET	53	61377	1.1.1.1	192.168.2.5
Mar 24, 2025 21:21:54.333395004 CET	53	54941	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:15.037910938 CET	138	138	192.168.2.5	192.168.2.255
Mar 24, 2025 21:22:16.601600885 CET	53	54562	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:17.172580957 CET	53	59420	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:19.785593033 CET	53	57508	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:25.696190119 CET	50482	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:25.696352959 CET	55961	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:25.798805952 CET	53	50482	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:25.799021006 CET	53	55961	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:26.962181091 CET	51306	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:26.962580919 CET	50386	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:27.068368912 CET	53	51306	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:27.068406105 CET	53	50386	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:31.866959095 CET	57572	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:31.867294073 CET	49835	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:31.976708889 CET	53	57572	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:31.976993084 CET	53	49835	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:32.427886963 CET	65330	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:32.428101063 CET	62895	53	192.168.2.5	1.1.1.1
Mar 24, 2025 21:22:32.529448032 CET	53	62895	1.1.1.1	192.168.2.5
Mar 24, 2025 21:22:32.529479027 CET	53	65330	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:22 UTC	682	OUT	GET /view/idquj8mxi5fphufc HTTP/1.1 Host: docsend.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:22 UTC	6587	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 29138 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:22 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847682&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=f3JYwxDwNQE5dcZzsIrBBBKaHUBmD%2Fnm0icow2SNK6o%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847682&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=f3JYwxDwNQE5dcZzsIrBBBKaHUBmD%2Fnm0icow2SNK6o%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 2bf519c66f9627d3e8acc9f581122706.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Link: <https://assets.docsend.com/static/presentation-O3VNFOWI.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-hdwF1PZcY0RJ7Mz6OKMcgCmaqtzr0LQkskObqh9LbZ8=; nopush,<https://assets.docsend.com/static/presentation-H55HVKYN.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-k5ubldAM3FsnNbFNcsGM6NWRU0UfW1Mg6gX6nGns3C0=; nopush,<https://assets.docsend.com/static/en-SZGXKYJY.js>; rel=preload; as=script; crossorigin=anonymous; integrity=sha256-PtvVqT12YfsEn9bAveD/ngsrYgizQvM3UFG58WrQJ5Q=; nopush,<https://assets.docsend.com/static/presentation-SM4CK4ZK.js>; rel=preload; as=script; crossorigin=anonymous; nopush Etag: W/"ab4211f0df8544bfe39368ad31ea167c" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: connect-src 'self' blob: https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://.previews.dropboxusercontent.com//p.m3u8 https://.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://.kissmetrics.com https://.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://.g [TRUNCATED] Set-Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; domain=.docsend.com; path=/; expires=Tue, 24 Mar 2026 20:21:22 GMT; SameSite=None; secure Set-Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; domain=.docsend.com; path=/; expires=Fri, 24 Mar 2045 20:21:22 GMT; SameSite=None; secure Set-Cookie: _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; domain=.docsend.com; path=/; secure; HttpOnly; SameSite=None X-Request-Id: be772c76-7487-428d-acb9-a9b5d72e7084 X-Runtime: 0.230753 Vary: Accept-Encoding, Origin Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: ueoLiulSFWpm7_P_nEji_RPNI99rQQq0M3oxdpzk34WcaeJi1sieXg==
2025-03-24 20:21:22 UTC	9797	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 64 69 67 2d 54 68 65 6d 65 2d 76 69 73 32 30 32 33 20 64 69 67 2d 54 68 65 6d 65 2d 76 69 73 32 30 32 33 2d 2d 62 72 69 67 68 74 20 64 69 67 2d 4d 6f 64 65 2d 2d 62 72 69 67 68 74 20 49 6e 2d 54 68 65 6d 65 2d 50 72 6f 76 69 64 65 72 27 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0a 3c 74 69 74 6c 65 3e 0a 44 6f 63 53 65 6e 64 0a 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 44 6f 63 53 65 6e 64 20 68 65 6c 70 73 20 73 61 6c 65 73 70 65 6f 70 6c 65 20 63 6f 6d 6d 75 6e 69 63 61 74 65 20 6d 6f 72 65 20 65 66 66 65 63 74 69 76 65 6c 79 20 62 79 20 72 65 70 6f 72 74 69 Data Ascii: <!DOCTYPE html><html class='dig-Theme-vis2023 dig-Theme-vis2023--bright dig-Mode--bright In-Theme-Provider' lang='en'><head><meta charset='utf-8'><title>DocSend</title><meta content='DocSend helps salespeople communicate more effectively by reporti
2025-03-24 20:21:22 UTC	16384	IN	Data Raw: 39 53 47 67 3d 3d 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 6e 6f 6e 63 65 3d 27 6e 2b 59 2b 55 41 6c 35 36 45 6c 5a 46 6a 6a 4d 56 2b 39 53 47 67 3d 3d 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 6e 6f 6e 63 65 3d 27 6e 2b 59 2b 55 41 6c 35 36 45 6c 5a 46 6a 6a 4d 56 2b 39 53 47 67 3d 3d 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 Data Ascii: 9SGg==' src='https://www.dropbox.com/pithos/privacy_consent'></script><script async nonce='n+Y+UAl56ElZFjjMV+9SGg==' src='https://www.dropbox.com/pithos/ux_analytics'></script><script async nonce='n+Y+UAl56ElZFjjMV+9SGg==' src='https://www.dropbox.com/p
2025-03-24 20:21:22 UTC	2957	IN	Data Raw: 2d 74 68 69 6e 20 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 31 32 32 20 31 36 6c 35 2e 39 33 39 2d 35 2e 39 33 39 61 31 2e 35 20 31 2e 35 20 30 20 30 20 30 2d 32 2e 31 32 32 2d 32 2e 31 32 31 4c 31 36 20 31 33 2e 38 37 39 20 31 30 2e 30 36 31 20 37 2e 39 34 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 2d 32 2e 31 32 31 20 32 2e 31 32 31 6c 35 2e 39 33 39 20 35 2e 39 34 4c 37 2e 39 34 20 32 31 2e 39 34 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 20 32 2e 31 32 31 20 32 2e 31 32 32 6c 35 2e 39 34 2d 35 2e 39 33 39 20 35 2e 39 33 39 20 35 2e 39 33 39 61 31 2e 35 20 31 2e 35 20 30 20 31 20 30 20 32 2e 31 32 32 2d 32 2e 31 32 32 6c 2d 35 2e 39 33 39 2d 35 2e 39 33 39 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 2f 64 69 76 Data Ascii: -thin "><path d="M18.122 16l5.939-5.939a1.5 1.5 0 0 0-2.122-2.121L16 13.879 10.061 7.94a1.5 1.5 0 1 0-2.121 2.121l5.939 5.94L7.94 21.94a1.5 1.5 0 1 0 2.121 2.122l5.94-5.939 5.939 5.939a1.5 1.5 0 1 0 2.122-2.122l-5.939-5.939z"></path></svg></button></div

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	591	OUT	GET /static/presentation-O3VNFOWI.css HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:23 UTC	1246	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 652310 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 9edb8d9b9614520133cf2257f302ebaa.cloudfront.net (CloudFront), 1.1 134f499632d1e15750219cb766bdc50c.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Mon, 24 Mar 2025 19:46:22 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 5mGFKaeLb0jgtpOM2lmfuFDTuq-RiMq1DH2EnqirmKYOTaCImAKt9Q== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	15138	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 74 6c 61 73 20 47 72 6f 74 65 73 6b 20 57 65 62 3b 73 72 63 3a 75 72 6c 28 2e 2f 41 74 6c 61 73 47 72 6f 74 65 73 6b 2d 52 65 67 75 6c 61 72 2d 57 65 62 2d 44 53 34 58 42 45 41 57 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2e 2f 41 74 6c 61 73 47 72 6f 74 65 73 6b 2d 52 65 67 75 6c 61 72 2d 57 65 62 2d 37 4d 54 32 4c 5a 58 51 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2e 2f 41 74 6c 61 73 47 72 6f 74 65 73 6b 2d 52 65 67 75 6c 61 72 2d 57 65 62 2d 44 4c 51 53 47 32 58 4d 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 66 6f 6e 74 2d Data Ascii: @charset "UTF-8";@font-face{font-family:Atlas Grotesk Web;src:url(./AtlasGrotesk-Regular-Web-DS4XBEAW.woff2) format("woff2"),url(./AtlasGrotesk-Regular-Web-7MT2LZXQ.woff) format("woff"),url(./AtlasGrotesk-Regular-Web-DLQSG2XM.ttf) format("truetype");font-
2025-03-24 20:21:23 UTC	10446	IN	Data Raw: 74 61 74 75 73 42 61 72 2e 69 73 2d 70 72 65 70 72 6f 63 65 73 73 69 6e 67 20 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2d 70 72 6f 67 72 65 73 73 2c 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2e 69 73 2d 70 6f 73 74 70 72 6f 63 65 73 73 69 6e 67 20 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2d 70 72 6f 67 72 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 61 36 32 33 7d 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2e 69 73 2d 77 61 69 74 69 6e 67 20 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2d 70 72 6f 67 72 65 73 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 64 69 72 3d 6c 74 72 5d 20 2e 75 70 70 79 2d 53 74 61 74 75 73 42 61 72 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 5b 64 69 Data Ascii: tatusBar.is-preprocessing .uppy-StatusBar-progress,.uppy-StatusBar.is-postprocessing .uppy-StatusBar-progress{background-color:#f6a623}.uppy-StatusBar.is-waiting .uppy-StatusBar-progress{display:none}[dir=ltr] .uppy-StatusBar-content{padding-left:10px}[di
2025-03-24 20:21:23 UTC	129	IN	Data Raw: 72 49 74 65 6d 2d 69 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 33 39 33 39 33 33 33 7d 5b 64 61 74 61 2d 75 70 70 79 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 2d 76 69 65 77 54 79 70 65 2d 2d 67 72 69 64 20 6c 69 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 49 74 65 6d 2d 2d 6e Data Ascii: rItem-inner{background-color:#93939333}[data-uppy-theme=dark] .uppy-ProviderBrowser-viewType--grid li.uppy-ProviderBrowserItem--n
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 6f 50 72 65 76 69 65 77 20 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 49 74 65 6d 2d 69 6e 6e 65 72 2c 5b 64 61 74 61 2d 75 70 70 79 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 2d 76 69 65 77 54 79 70 65 2d 2d 75 6e 73 70 6c 61 73 68 20 6c 69 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 49 74 65 6d 2d 2d 6e 6f 50 72 65 76 69 65 77 20 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 49 74 65 6d 2d 69 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 33 33 7d 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 72 42 72 6f 77 73 65 72 2d 76 69 65 77 54 79 70 65 2d 2d 67 72 69 64 20 6c 69 2e 75 70 70 79 2d 50 72 6f 76 69 64 65 Data Ascii: oPreview .uppy-ProviderBrowserItem-inner,[data-uppy-theme=dark] .uppy-ProviderBrowser-viewType--unsplash li.uppy-ProviderBrowserItem--noPreview .uppy-ProviderBrowserItem-inner{background-color:#eaeaea33}.uppy-ProviderBrowser-viewType--grid li.uppy-Provide
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 31 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 61 36 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 2d 49 74 65 6d 2d 70 72 65 76 69 65 77 4c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 32 7d 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 2d 49 74 65 6d 2d 70 72 65 76 69 65 77 4c 69 6e 6b 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 70 78 20 23 37 36 61 62 65 39 7d 5b 64 61 74 61 2d 75 70 70 79 2d 74 Data Ascii: m:0;left:0;z-index:1001;display:none;background-color:#000000a6;content:""}.uppy-Dashboard-Item-previewLink{position:absolute;top:0;right:0;bottom:0;left:0;z-index:1002}.uppy-Dashboard-Item-previewLink:focus{box-shadow:inset 0 0 0 3px #76abe9}[data-uppy-t
2025-03-24 20:21:23 UTC	7776	IN	Data Raw: 64 65 78 3a 31 30 30 35 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 65 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 37 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 2d 63 6c 6f 73 65 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 38 63 62 38 65 64 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 32 30 70 78 29 7b 5b 64 69 72 3d 6c 74 72 5d 20 2e 75 Data Ascii: dex:1005;display:block;color:#ffffffe6;font-size:27px;cursor:pointer}.uppy-Dashboard-close:focus{outline:none}.uppy-Dashboard-close::-moz-focus-inner{border:0}.uppy-Dashboard-close:focus{color:#8cb8ed}@media only screen and (min-width: 820px){[dir=ltr] .u
2025-03-24 20:21:23 UTC	13488	IN	Data Raw: 6e 2d 72 69 67 68 74 3a 2d 38 70 78 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 75 70 70 79 2d 73 69 7a 65 2d 2d 6d 64 20 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 43 6f 6e 74 65 6e 74 2d 61 64 64 4d 6f 72 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 7d 2e 75 70 70 79 2d 73 69 7a 65 2d 2d 6d 64 20 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 43 6f 6e 74 65 6e 74 2d 61 64 64 4d 6f 72 65 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 5b 64 61 74 61 2d 75 70 70 79 2d 74 68 65 6d 65 3d 64 61 72 6b 5d 20 2e 75 70 70 79 2d 44 61 73 68 62 6f 61 72 64 43 6f 6e 74 65 6e 74 2d 61 64 64 4d 6f 72 65 7b 63 6f 6c 6f 72 3a 23 30 32 62 61 66 32 7d 5b 64 69 72 3d 6c 74 72 5d 20 2e 75 70 70 79 2d 44 Data Ascii: n-right:-8px}[dir=rtl] .uppy-size--md .uppy-DashboardContent-addMore{margin-left:-8px}.uppy-size--md .uppy-DashboardContent-addMore{width:auto;height:auto;font-size:14px}[data-uppy-theme=dark] .uppy-DashboardContent-addMore{color:#02baf2}[dir=ltr] .uppy-D
2025-03-24 20:21:23 UTC	2896	IN	Data Raw: 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 36 22 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 68 69 67 68 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 75 74 65 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 69 64 65 6f 4a 53 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 76 6f 6c 75 6d 65 2d 68 69 67 68 3a 62 65 66 6f 72 65 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 75 74 65 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 Data Ascii: eholder:before{content:"\f106"}.vjs-icon-volume-high,.video-js .vjs-mute-control .vjs-icon-placeholder{font-family:VideoJS;font-weight:400;font-style:normal}.vjs-icon-volume-high:before,.video-js .vjs-mute-control .vjs-icon-placeholder:before{content:"\f1
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 30 22 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2c 2e 76 6a 73 2d 73 65 65 6b 2d 74 6f 2d 6c 69 76 65 2d 63 6f 6e 74 72 6f 6c 20 2e 76 6a 73 2d 69 63 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 6c 65 76 65 6c 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 70 6c 61 79 2d 70 72 6f 67 72 65 73 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 69 64 65 6f 4a 53 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 6a 73 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 2c 2e 76 6a 73 2d 73 65 65 6b 2d 74 6f 2d 6c 69 76 65 2d 63 6f 6e 74 72 Data Ascii: icon-cog:before{content:"\f110"}.vjs-icon-circle,.vjs-seek-to-live-control .vjs-icon-placeholder,.video-js .vjs-volume-level,.video-js .vjs-play-progress{font-family:VideoJS;font-weight:400;font-style:normal}.vjs-icon-circle:before,.vjs-seek-to-live-contr
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 70 61 6e 65 6c 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 70 61 6e 65 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 76 6a 73 2d 73 6c 69 64 65 72 2d 61 63 74 69 76 65 7b 77 69 64 74 68 3a 31 30 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 31 73 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 70 61 6e 65 6c 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 70 61 6e 65 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 76 6a 73 2d 6d 75 74 65 2d 74 6f 67 67 6c 65 2d 6f 6e 6c 79 7b 77 69 64 74 68 3a 34 65 6d 7d 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 70 61 6e 65 6c 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 63 6f 6e 74 72 6f 6c 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 76 65 72 74 69 63 61 6c 7b 68 65 69 67 68 74 3a 38 65 6d 3b 77 69 64 74 68 Data Ascii: panel.vjs-volume-panel-horizontal.vjs-slider-active{width:10em;transition:width .1s}.video-js .vjs-volume-panel.vjs-volume-panel-horizontal.vjs-mute-toggle-only{width:4em}.video-js .vjs-volume-panel .vjs-volume-control.vjs-volume-vertical{height:8em;width

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	591	OUT	GET /static/presentation-H55HVKYN.css HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:23 UTC	1246	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 614207 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 1299a022d10cdc620f209ba0440a48e8.cloudfront.net (CloudFront), 1.1 f359087e1d20f17f76b31eb5ffbbd450.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Mon, 24 Mar 2025 19:46:17 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: wZz2fm7OF6sep3oTDOne4THcCHv3bvcIEhDhFYP-PoYhQHD6p-oIRw== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 48 6f 6d 65 6d 61 64 65 2b 41 70 70 6c 65 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3b 2e 64 69 67 2d 4d 6f 64 65 2d 2d 62 72 69 67 68 74 2c 3a 72 6f 6f 74 7b 2d 2d 73 63 68 65 6d 65 5f 5f 63 6f 6c 6f 72 3a 6c 69 67 68 74 3b 2d 2d 73 63 68 65 6d 65 5f 5f 69 6e 76 65 72 73 65 5f 5f 63 6f 6c 6f 72 3a 64 61 72 6b 3b 2d 2d 73 70 61 63 69 6e 67 5f 5f 62 61 73 65 5f 75 6e 69 74 3a 38 70 78 3b 2d 2d 73 70 61 63 69 6e 67 5f 5f 75 6e 69 74 2d 2d 30 5f 35 3a 34 70 78 3b 2d 2d 73 70 61 63 69 6e 67 5f 5f 75 6e 69 74 2d 2d 31 3a 38 70 78 3b 2d 2d 73 70 61 63 69 6e 67 5f 5f 75 Data Ascii: @charset "UTF-8";@import"https://fonts.googleapis.com/css?family=Homemade+Apple&display=swap";.dig-Mode--bright,:root{--scheme__color:light;--scheme__inverse__color:dark;--spacing__base_unit:8px;--spacing__unit--0_5:4px;--spacing__unit--1:8px;--spacing__u
2025-03-24 20:21:23 UTC	6002	IN	Data Raw: 5f 5f 62 6f 64 79 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 6c 69 6e 65 68 65 69 67 68 74 5f 6c 61 62 65 6c 3a 31 38 70 78 3b 2d 2d 74 79 70 65 5f 5f 62 6f 64 79 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 6c 69 6e 65 68 65 69 67 68 74 3a 32 32 70 78 3b 2d 2d 74 79 70 65 5f 5f 62 6f 64 79 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 66 6f 6e 74 77 65 69 67 68 74 5f 73 74 72 6f 6e 67 3a 35 30 30 3b 2d 2d 74 79 70 65 5f 5f 62 6f 64 79 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 66 6f 6e 74 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 74 79 70 65 5f 5f 62 6f 64 79 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 66 6f 6e 74 73 69 7a 65 3a 31 34 70 78 3b 2d 2d 74 79 70 65 5f 5f 62 6f 64 79 5f 5f 73 6d 61 6c 6c 2d 2d 6c 69 6e 65 68 65 69 67 68 74 5f 70 61 72 61 67 72 61 70 68 3a 32 30 70 78 3b 2d 2d 74 79 70 Data Ascii: __body__standard--lineheight_label:18px;--type__body__standard--lineheight:22px;--type__body__standard--fontweight_strong:500;--type__body__standard--fontweight:400;--type__body__standard--fontsize:14px;--type__body__small--lineheight_paragraph:20px;--typ
2025-03-24 20:21:23 UTC	1879	IN	Data Raw: 2d 63 6f 6c 6f 72 5f 5f 73 68 61 64 6f 77 5f 5f 65 6c 65 76 61 74 65 64 29 7d 2e 64 69 67 2d 54 68 65 6d 65 2d 2d 62 72 69 67 68 74 2c 3a 72 6f 6f 74 7b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 66 6f 6c 64 65 72 69 63 6f 6e 5f 5f 69 63 6f 6e 2d 73 68 61 64 6f 77 3a 23 33 64 37 30 61 61 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 66 6f 6c 64 65 72 69 63 6f 6e 5f 5f 69 63 6f 6e 3a 23 35 30 39 33 64 66 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 66 6f 6c 64 65 72 69 63 6f 6e 5f 5f 73 68 61 64 6f 77 3a 23 38 61 61 38 63 61 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 66 6f 6c 64 65 72 69 63 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 3a 23 61 31 63 39 66 37 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 66 69 6c 65 69 63 6f 6e 5f 5f 69 63 6f 6e 2d 73 68 61 64 6f 77 3a 23 36 63 Data Ascii: -color__shadow__elevated)}.dig-Theme--bright,:root{--dig-color__foldericon__icon-shadow:#3d70aa;--dig-color__foldericon__icon:#5093df;--dig-color__foldericon__shadow:#8aa8ca;--dig-color__foldericon__container:#a1c9f7;--dig-color__fileicon__icon-shadow:#6c
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 64 69 73 61 62 6c 65 64 5f 5f 62 61 73 65 3a 23 62 62 62 35 61 65 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 64 69 73 61 62 6c 65 64 5f 5f 6f 6e 2d 62 61 73 65 3a 23 66 37 66 35 66 32 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 64 69 73 61 62 6c 65 64 5f 5f 73 75 72 66 61 63 65 3a 23 64 33 63 65 63 39 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 64 69 73 61 62 6c 65 64 5f 5f 6f 6e 2d 73 75 72 66 61 63 65 3a 23 38 63 38 32 37 39 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 62 61 73 65 3a 23 30 30 36 31 66 65 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 62 61 73 65 2d 2d 73 74 61 74 65 2d 31 3a 23 30 30 34 64 63 37 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 Data Ascii: --dig-color__disabled__base:#bbb5ae;--dig-color__disabled__on-base:#f7f5f2;--dig-color__disabled__surface:#d3cec9;--dig-color__disabled__on-surface:#8c8279;--dig-color__primary__base:#0061fe;--dig-color__primary__base--state-1:#004dc7;--dig-color__primary
2025-03-24 20:21:23 UTC	2440	IN	Data Raw: 66 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 68 69 67 68 6c 69 67 68 74 5f 5f 67 72 65 65 6e 2d 2d 62 6f 6c 64 3a 23 62 34 64 66 31 63 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 68 69 67 68 6c 69 67 68 74 5f 5f 67 72 65 65 6e 2d 2d 62 6f 6c 64 65 72 3a 23 39 66 63 34 31 38 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 61 63 63 65 6e 74 5f 5f 63 79 61 6e 3a 23 30 30 37 38 39 31 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 61 63 63 65 6e 74 5f 5f 72 65 64 3a 23 39 62 30 30 33 32 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 61 63 63 65 6e 74 5f 5f 6f 72 61 6e 67 65 3a 23 62 65 34 62 30 61 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 61 63 63 65 6e 74 5f 5f 67 72 65 65 6e 3a 23 30 66 35 30 33 63 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 61 63 63 65 6e 74 5f 5f 62 6c 75 65 Data Ascii: f;--dig-color__highlight__green--bold:#b4df1c;--dig-color__highlight__green--bolder:#9fc418;--dig-color__accent__cyan:#007891;--dig-color__accent__red:#9b0032;--dig-color__accent__orange:#be4b0a;--dig-color__accent__green:#0f503c;--dig-color__accent__blue
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 2d 62 61 73 65 3a 23 31 65 31 39 31 39 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 64 69 73 61 62 6c 65 64 5f 5f 6f 6e 2d 73 75 72 66 61 63 65 3a 23 38 63 38 32 37 39 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 62 61 73 65 3a 23 33 30 38 30 66 66 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 62 61 73 65 2d 2d 73 74 61 74 65 2d 31 3a 23 30 30 36 31 66 61 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 62 61 73 65 2d 2d 73 74 61 74 65 2d 32 3a 23 30 30 34 64 63 37 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 6f 6e 2d 62 61 73 65 3a 23 30 30 31 38 33 65 3b 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 70 72 69 6d 61 72 79 5f 5f 73 75 72 66 61 63 65 3a 23 30 30 32 39 36 39 3b Data Ascii: -base:#1e1919;--dig-color__disabled__on-surface:#8c8279;--dig-color__primary__base:#3080ff;--dig-color__primary__base--state-1:#0061fa;--dig-color__primary__base--state-2:#004dc7;--dig-color__primary__on-base:#00183e;--dig-color__primary__surface:#002969;
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 64 69 67 2d 5d 2c 5b 63 6c 61 73 73 5e 3d 64 69 67 2d 5d 3a 61 66 74 65 72 2c 5b 63 6c 61 73 73 5e 3d 64 69 67 2d 5d 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 64 69 67 2d 41 63 63 6f 72 64 69 6f 6e 2c 2e 64 69 67 2d 41 63 63 6f 72 64 69 6f 6e 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 64 69 67 2d 41 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 30 7d 2e 64 69 67 2d 41 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 74 72 69 67 67 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a Data Ascii: dig-],[class^=dig-]:after,[class^=dig-]:before{box-sizing:border-box}.dig-Accordion,.dig-Accordion-item{display:flex;flex-direction:column}.dig-Accordion-header{margin:0}.dig-Accordion-header-trigger{align-items:center;background-color:transparent;border:
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 20 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 6d 65 6e 75 2d 74 72 69 67 67 65 72 20 2e 64 69 67 2d 42 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 20 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 62 75 74 74 6f 6e 2b 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 6d 65 6e 75 20 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 6d 65 6e 75 2d 74 72 69 67 67 65 72 2c 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 20 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 62 75 74 74 6f 6e 2b 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 6d 65 6e 75 20 2e 64 69 67 2d 42 75 74 74 6f 6e 42 61 72 2d 6d 65 6e 75 2d 74 72 69 67 67 Data Ascii: ocus{z-index:1}.dig-ButtonBar .dig-ButtonBar-menu-trigger .dig-Button-content{padding:0}.dig-ButtonBar .dig-ButtonBar-button+.dig-ButtonBar-menu .dig-ButtonBar-menu-trigger,.dig-ButtonBar .dig-ButtonBar-button+.dig-ButtonBar-menu .dig-ButtonBar-menu-trigg
2025-03-24 20:21:23 UTC	8949	IN	Data Raw: 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 33 38 70 78 7d 2e 64 69 67 2d 49 63 6f 6e 42 75 74 74 6f 6e 2d 2d 78 6c 61 72 67 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 64 69 67 2d 72 61 64 69 75 73 5f 5f 78 6c 61 72 67 65 2c 30 29 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 34 38 70 78 7d 2e 64 69 67 2d 49 63 6f 6e 42 75 74 74 6f 6e 2d 2d 78 6c 61 72 67 65 20 2e 64 69 67 2d 49 63 6f 6e 42 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 34 36 70 78 7d 2e 64 69 67 2d 49 63 6f 6e 42 75 74 74 6f 6e 2d 2d 74 72 61 6e 73 70 61 72 65 6e 74 20 2e 64 69 67 2d 49 63 6f 6e 42 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 31 30 30 25 Data Ascii: tton-content{height:38px}.dig-IconButton--xlarge{border-radius:var(--dig-radius__xlarge,0);height:48px;line-height:48px;width:48px}.dig-IconButton--xlarge .dig-IconButton-content{height:46px}.dig-IconButton--transparent .dig-IconButton-content{height:100%
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 72 6f 77 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 5f 5f 75 6e 69 74 2d 2d 33 29 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 69 67 2d 43 61 72 6f 75 73 65 6c 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 73 70 61 63 69 6e 67 5f 5f 62 61 73 65 5f 75 6e 69 74 29 7d 2e 64 69 67 2d 43 61 72 6f 75 73 65 6c 2d 68 65 61 64 69 6e 67 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 67 2d 63 6f 6c 6f 72 5f 5f 74 65 78 74 5f 5f 62 61 73 65 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 74 79 70 65 5f 5f 74 69 74 6c 65 5f 5f 73 74 61 6e 64 61 72 64 2d 2d 66 6f 6e 74 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d Data Ascii: row;justify-content:flex-start;margin-bottom:var(--spacing__unit--3);width:100%}.dig-Carousel-button{margin-right:var(--spacing__base_unit)}.dig-Carousel-heading{color:var(--dig-color__text__base);font-family:var(--type__title__standard--fontfamily);font-

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	994	OUT	GET /public/loading_images/large-loader.gif HTTP/1.1 Host: assets.docsend.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:23 UTC	501	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 48903 Connection: close Last-Modified: Mon, 23 May 2016 23:39:27 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 24 Mar 2025 20:21:24 GMT ETag: "ceb150ad0df5017df3c4f3599cd61779" X-Cache: RefreshHit from cloudfront Via: 1.1 ed8dbde89917eaa6ca93ba7fad809c48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: JB-1tceI-x9SnR_UV7Y1fI7bXyBk4kSiR3SNVp4mFy1C-ol5MaeTfQ== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	15883	IN	Data Raw: 47 49 46 38 39 61 90 00 90 00 f7 00 00 00 00 00 25 25 25 32 32 32 32 32 32 32 32 32 32 32 32 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 34 34 34 34 34 34 35 35 35 36 36 36 36 36 36 36 36 36 36 36 36 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 38 38 38 38 38 38 39 39 39 39 39 39 39 39 39 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3c 3c 3c 3d 3d 3d 3e 3e 3e 40 40 40 41 41 41 42 42 42 43 43 43 44 44 44 45 45 45 46 46 46 48 48 48 4a 4a 4a 4b 4b 4b 4c 4c 4c 4e 4e 4e 4f 4f 4f 50 50 Data Ascii: GIF89a%%%222222222222333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333444444555666666666666777777777777777777777888888999999999:::::::::::::::<<<===>>>@@@AAABBBCCCDDDEEEFFFHHHJJJKKKLLLNNNOOOPP
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: a2 51 48 47 25 b2 93 64 a8 d3 83 2c c8 24 9d 9a 94 4c d0 a7 4f 89 1c a5 ca 35 11 11 ac 43 59 6c e5 da f5 2a 58 9d 65 c8 aa 1d 55 e6 ac ce 24 6b d7 36 75 7b f3 4e 5c b5 77 e8 de 84 74 97 ac 23 bd 35 6b f4 55 5b 03 f0 4c 26 83 c9 ce 35 0c 13 71 62 aa 4c 18 c7 14 fc 78 6a 61 c9 30 f9 56 1e 05 09 73 4c bb 9b f3 56 5c 42 c5 4d 97 25 2e e8 1e 69 b2 65 c9 0d 8b 8e 2b 47 96 78 e3 8e 2a 5b b8 73 1b 5a f2 f4 46 9c 41 c0 83 0f 1a 63 36 e2 9c ca 73 26 ce c9 cd 9c f9 a2 d4 3c b7 08 9f 3e e8 ce 62 88 2c 34 f7 85 54 bc a1 8b 45 cd c3 fe e3 ce 84 64 a7 1c ea e8 bb 4c 4c a2 7d 2d a4 af 11 0d 89 9f 9f 09 fa 4d e9 e8 d1 1f 99 c8 e2 f8 da 39 dd 35 a4 c6 7c 04 2e 82 d3 0d f9 e5 47 47 80 0e 31 01 da 54 77 cc 16 91 0b b7 11 38 1f 6f 36 9d 97 60 7a 17 11 c1 04 13 f0 51 b4 9c 85 Data Ascii: QHG%d,$LO5CYlXeU$k6u{N\wt#5kU[L&5qbLxja0VsLV\BM%.ie+Gx[sZFAc6s&<>b,4TEdLL}-M95\|.GG1Tw8o6`zQ
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 54 55 55 55 55 55 55 56 56 56 57 57 57 57 57 57 58 58 58 58 58 58 59 59 59 5a 5a 5a 5b 5b 5b 5c 5c 5c 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5e 5f 5f 5f 61 61 61 63 63 63 64 64 64 66 66 66 68 68 68 6b 6b 6b 6c 6c 6c 6d 6d 6d 6e 6e 6e 6f 6f 6f 71 71 71 71 71 71 72 72 72 72 72 72 72 72 72 73 73 73 73 73 73 73 73 73 73 73 73 73 73 73 74 74 74 75 75 75 78 78 78 7c 7c 7c 82 82 82 85 85 85 86 86 86 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 87 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 89 89 89 89 89 89 8c 8c 8c 8e 8e 8e 90 90 90 93 93 93 96 96 96 98 98 98 9a 9a 9a 9a 9a 9a 9b 9b 9b 9b 9b 9b 9c 9c 9c 9c 9c 9c 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d 9d Data Ascii: TUUUUUUVVVWWWWWWXXXXXXYYYZZZ[[[\\\]]]]]]]]]]]]]]]^^^^^^^^^^^^^^^___aaacccdddfffhhhkkklllmmmnnnoooqqqqqqrrrrrrrrrssssssssssssssstttuuuxxx\|\|\|
2025-03-24 20:21:23 UTC	252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	982	OUT	GET /static/whitey-D4AB5XBH.png HTTP/1.1 Host: assets.docsend.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:23 UTC	1097	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2430 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 016de4084b3995907681c203a7d5af44.cloudfront.net (CloudFront), 1.1 f07e3fd03d3423bceb1c6083ab62cf8a.cloudfront.net (CloudFront) Last-Modified: Mon, 24 Mar 2025 19:46:22 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: XIc2HonNRc5DZDVU6tflyrKcu11Sq6vLLaUyThL0ix6WGW69OcyHDQ== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	2430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cf 00 00 00 28 08 03 00 00 00 6e 1e 5e 57 00 00 00 36 50 4c 54 45 e1 e2 e4 e0 e1 e3 e2 e3 e5 df e0 e2 de df e1 e3 e4 e6 dd de e0 e4 e5 e7 dc dd df e5 e6 e8 db dc de da db dd e6 e7 e9 d9 da dc d8 d9 db e7 e8 ea d7 d8 da d6 d7 d9 1f f6 3e ae 00 00 09 03 49 44 41 54 78 5e 8d 59 8b 72 e4 20 0e d4 9b 87 67 b2 77 ff ff b3 57 92 d5 9e 2c 75 a9 6c 57 6c c7 36 60 1a b5 84 60 48 df 66 ff 89 08 d7 cb d8 94 4d 85 a7 89 cd 20 51 23 b5 30 26 56 d3 a0 fd 76 63 35 63 56 8b 98 73 86 a9 bd f3 79 98 e5 93 7d 5d 59 2b 94 95 88 98 59 75 1a 6b 16 b5 bd 2d 8f aa 4f 6c 41 36 59 67 16 31 53 65 6b c4 dc d3 f2 a3 44 56 87 66 fd 30 13 b1 60 62 12 17 56 26 65 22 35 25 40 1b a4 6f b5 af 88 37 cf ff ec d8 33 f6 d4 b8 b6 6a 98 88 Data Ascii: PNGIHDR(n^W6PLTE>IDATx^Yr gwW,ulWl6``HfM Q#0&Vvc5cVsy}]Y+Yuk-OlA6Yg1SekDVf0`bV&e"5%@o73j

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	566	OUT	GET /static/en-SZGXKYJY.js HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:23 UTC	1260	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 260551 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 a0042b5b0abdf83ac753e9d8be59e4e4.cloudfront.net (CloudFront), 1.1 c790ffcab27717f283a6e87f31c6d65a.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Mon, 24 Mar 2025 19:45:16 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 0kcu6xqJVP4mMJz-Ch87cnXeU7bNbhAoWU1GeIe_tG2vYove6Eoxaw== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	2531	IN	Data Raw: 28 28 29 3d 3e 7b 73 65 6c 66 2e 45 4e 56 3d 73 65 6c 66 2e 45 4e 56 7c 7c 7b 7d 3b 73 65 6c 66 2e 45 4e 56 2e 4d 45 53 53 41 47 45 53 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 60 7b 22 2b 30 46 37 66 65 22 3a 5b 7b 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 52 65 71 75 69 72 65 20 65 6d 61 69 6c 22 7d 5d 2c 22 74 79 70 65 22 3a 38 2c 22 76 61 6c 75 65 22 3a 22 73 74 72 6f 6e 67 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 66 65 61 74 75 72 65 2c 20 61 6e 64 20 77 69 6c 6c 20 62 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 75 72 6e 65 64 20 6f 6e 20 77 68 65 6e 20 79 6f 75 72 20 63 68 61 6e 67 65 73 20 61 72 65 Data Ascii: (()=>{self.ENV=self.ENV\|\|{};self.ENV.MESSAGES=JSON.parse(`{"+0F7fe":[{"children":[{"type":0,"value":"Require email"}],"type":8,"value":"strong"},{"type":0,"value":" is required to use this feature, and will be automatically turned on when your changes are
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 22 76 61 6c 75 65 22 3a 22 31 20 73 70 65 63 69 61 6c 20 63 68 61 72 61 63 74 65 72 22 7d 5d 2c 22 2b 52 6e 32 32 46 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 52 65 63 65 69 76 65 64 20 66 69 6c 65 22 7d 5d 2c 22 2b 52 74 6b 78 6a 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 43 6c 69 63 6b 20 74 6f 20 76 69 65 77 20 66 69 6c 65 20 61 6e 61 6c 79 74 69 63 73 22 7d 5d 2c 22 2b 53 35 50 78 30 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 52 65 71 75 69 72 65 20 4e 44 41 22 7d 5d 2c 22 2b 53 4f 2f 6e 64 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 44 6f 77 6e 6c 6f 61 64 20 61 73 20 5a 49 50 22 7d 5d 2c 22 2b 54 57 63 50 68 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c Data Ascii: "value":"1 special character"}],"+Rn22F":[{"type":0,"value":"Received file"}],"+Rtkxj":[{"type":0,"value":"Click to view file analytics"}],"+S5Px0":[{"type":0,"value":"Require NDA"}],"+SO/nd":[{"type":0,"value":"Download as ZIP"}],"+TWcPh":[{"type":0,"val
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 73 20 62 75 74 74 6f 6e 20 77 69 6c 6c 20 6f 70 65 6e 20 74 68 65 20 41 64 64 20 46 6f 6c 64 65 72 20 64 69 61 6c 6f 67 22 7d 5d 2c 22 31 76 6e 32 63 4b 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 4e 65 78 74 20 62 69 6c 6c 20 64 61 74 65 3a 22 7d 5d 2c 22 31 77 46 42 4d 63 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 53 61 66 65 6c 79 20 72 65 63 65 69 76 65 20 66 69 6c 65 73 20 69 6e 20 6f 6e 65 20 70 6c 61 63 65 20 77 69 74 68 20 66 69 6c 65 20 72 65 71 75 65 73 74 73 22 7d 5d 2c 22 31 78 52 33 71 32 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 4f 6e 65 2d 63 6c 69 63 6b 20 53 69 67 6e 61 62 6c 65 22 7d 5d 2c 22 31 78 6f 76 47 54 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 Data Ascii: s button will open the Add Folder dialog"}],"1vn2cK":[{"type":0,"value":"Next bill date:"}],"1wFBMc":[{"type":0,"value":"Safely receive files in one place with file requests"}],"1xR3q2":[{"type":0,"value":"One-click Signable"}],"1xovGT":[{"type":0,"value"
2025-03-24 20:21:23 UTC	992	IN	Data Raw: 22 36 33 63 38 6d 34 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 46 6f 75 6e 64 65 72 20 44 65 61 6c 20 52 6f 6f 6d 22 7d 5d 2c 22 36 34 6c 54 69 4e 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 4c 69 6e 6b 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 7d 5d 2c 22 36 35 66 39 73 70 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 57 65 6c 63 6f 6d 65 20 6d 65 73 73 61 67 65 22 7d 5d 2c 22 36 35 69 5a 47 67 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 57 65 20 77 65 72 65 20 75 6e 61 62 6c 65 20 74 6f 20 69 6d 70 6f 72 74 20 74 68 69 73 20 66 69 6c 65 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 7d 5d 2c 22 36 36 37 6f 38 67 22 3a 5b 7b 22 74 79 Data Ascii: "63c8m4":[{"type":0,"value":"Founder Deal Room"}],"64lTiN":[{"type":0,"value":"Link accessibility"}],"65f9sp":[{"type":0,"value":"Welcome message"}],"65iZGg":[{"type":0,"value":"We were unable to import this file. Please try again later."}],"667o8g":[{"ty
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 64 6f 48 44 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 73 65 6e 64 20 53 70 61 63 65 20 75 70 64 61 74 65 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 74 6f 20 70 65 6f 70 6c 65 20 77 68 6f 20 68 61 76 65 20 61 6c 72 65 61 64 79 20 76 69 73 69 74 65 64 20 61 20 53 70 61 63 65 20 61 6e 64 20 65 6e 74 65 72 65 64 20 61 6e 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 7d 5d 2c 22 36 49 38 51 71 31 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 4e 6f 22 7d 5d 2c 22 36 49 39 53 6a 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 53 65 73 73 69 6f 6e 20 22 7d 2c 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 73 65 73 73 69 6f 6e 4e 75 6d 62 65 72 22 Data Ascii: doHD":[{"type":0,"value":"You can only send Space update notifications to people who have already visited a Space and entered an email address."}],"6I8Qq1":[{"type":0,"value":"No"}],"6I9Sjl":[{"type":0,"value":"Session "},{"type":1,"value":"sessionNumber"
2025-03-24 20:21:23 UTC	15990	IN	Data Raw: 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 46 6f 72 67 6f 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 3f 22 7d 5d 2c 22 42 35 4e 46 64 72 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 47 65 74 20 73 74 61 72 74 65 64 20 77 69 74 68 20 44 6f 63 53 65 6e 64 27 73 20 70 6f 77 65 72 66 75 6c 20 64 61 74 61 20 72 6f 6f 6d 20 66 65 61 74 75 72 65 73 22 7d 5d 2c 22 42 35 54 31 42 58 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 49 50 20 44 65 76 65 6c 6f 70 6d 65 6e 74 22 7d 5d 2c 22 42 35 63 4b 46 41 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 54 68 65 72 65 20 77 61 73 20 61 20 70 72 6f 62 6c 65 6d 20 6c 6f 61 64 69 6e 67 20 74 68 6f 73 65 20 75 73 65 72 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 72 Data Ascii: e":0,"value":"Forgot your password?"}],"B5NFdr":[{"type":0,"value":"Get started with DocSend's powerful data room features"}],"B5T1BX":[{"type":0,"value":"IP Development"}],"B5cKFA":[{"type":0,"value":"There was a problem loading those users. Please try r
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 69 73 20 6c 6f 63 61 74 65 64 20 69 6e 20 61 20 66 6f 6c 64 65 72 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 61 63 63 65 73 73 20 74 6f 2e 22 7d 5d 2c 22 46 4b 30 46 61 45 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 42 61 73 69 63 20 73 68 61 72 69 6e 67 20 63 6f 6e 74 72 6f 6c 73 22 7d 5d 2c 22 46 4c 55 34 6c 50 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 55 70 6c 6f 61 64 65 64 20 74 6f 64 61 79 20 61 74 20 22 7d 2c 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 74 69 6d 65 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 2e 22 7d 2c 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 62 72 65 61 6b 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 56 65 Data Ascii: is located in a folder you do not have access to."}],"FK0FaE":[{"type":0,"value":"Basic sharing controls"}],"FLU4lP":[{"type":0,"value":"Uploaded today at "},{"type":1,"value":"time"},{"type":0,"value":"."},{"type":1,"value":"break"},{"type":0,"value":"Ve
2025-03-24 20:21:23 UTC	2378	IN	Data Raw: 74 68 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 6c 69 6e 6b 73 22 7d 5d 7d 7d 2c 22 70 6c 75 72 61 6c 54 79 70 65 22 3a 22 63 61 72 64 69 6e 61 6c 22 2c 22 74 79 70 65 22 3a 36 2c 22 76 61 6c 75 65 22 3a 22 6c 69 6e 6b 43 6f 75 6e 74 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 20 77 69 6c 6c 20 6e 6f 20 6c 6f 6e 67 65 72 20 62 65 20 70 72 6f 74 65 63 74 65 64 2e 20 57 68 61 74 20 77 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 6f 20 64 6f 20 77 69 74 68 20 74 68 65 20 61 66 66 65 63 74 65 64 20 22 7d 2c 7b 22 6f 66 66 73 65 74 22 3a 30 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 6f 6e 65 22 3a 7b 22 76 61 6c 75 65 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 6c Data Ascii: ther":{"value":[{"type":0,"value":"links"}]}},"pluralType":"cardinal","type":6,"value":"linkCount"},{"type":0,"value":" will no longer be protected. What would you like to do with the affected "},{"offset":0,"options":{"one":{"value":[{"type":0,"value":"l
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 5b 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 6e 61 6d 65 42 65 66 6f 72 65 53 61 76 65 22 7d 5d 2c 22 74 79 70 65 22 3a 38 2c 22 76 61 6c 75 65 22 3a 22 42 4f 4c 44 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 20 74 6f 20 22 7d 2c 7b 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 6e 61 6d 65 41 66 74 65 72 53 61 76 65 22 7d 5d 2c 22 74 79 70 65 22 3a 38 2c 22 76 61 6c 75 65 22 3a 22 42 4f 4c 44 22 7d 5d 2c 22 4b 34 70 32 2f 71 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 41 6c 6c 20 76 69 73 69 74 73 22 7d 5d 2c 22 4b 35 75 31 59 63 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 4f 70 65 72 61 74 69 6f 6e 61 6c 20 26 20 54 65 63 68 6e Data Ascii: [{"type":1,"value":"nameBeforeSave"}],"type":8,"value":"BOLD"},{"type":0,"value":" to "},{"children":[{"type":1,"value":"nameAfterSave"}],"type":8,"value":"BOLD"}],"K4p2/q":[{"type":0,"value":"All visits"}],"K5u1Yc":[{"type":0,"value":"Operational & Techn
2025-03-24 20:21:23 UTC	10216	IN	Data Raw: 3a 22 53 6f 6d 65 6f 6e 65 20 76 69 73 69 74 69 6e 67 20 66 72 6f 6d 20 61 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 22 7d 5d 2c 22 4f 66 74 44 39 54 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 41 67 72 65 65 6d 65 6e 74 73 22 7d 5d 2c 22 4f 69 5a 47 63 46 22 3a 5b 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 54 75 72 6e 20 6f 66 66 20 66 61 73 74 20 66 6f 72 77 61 72 64 22 7d 5d 2c 22 4f 6a 38 47 62 64 22 3a 5b 7b 22 74 79 70 65 22 3a 31 2c 22 76 61 6c 75 65 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 76 61 6c 75 65 22 3a 22 2c 20 77 65 20 63 6f 75 6c 64 6e 27 74 20 70 72 6f 63 65 73 73 20 79 6f 75 72 20 70 61 79 6d 65 6e 74 20 65 6e 64 69 6e 67 20 69 6e 20 22 7d 2c 7b 22 74 79 70 65 22 3a 31 2c 22 76 Data Ascii: :"Someone visiting from a mobile device"}],"OftD9T":[{"type":0,"value":"Agreements"}],"OiZGcF":[{"type":0,"value":"Turn off fast forward"}],"Oj8Gbd":[{"type":1,"value":"name"},{"type":0,"value":", we couldn't process your payment ending in "},{"type":1,"v

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	576	OUT	GET /static/presentation-SM4CK4ZK.js HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:23 UTC	1246	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12614030 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 9fb7397504a65afc778db3eb0ee0bfa4.cloudfront.net (CloudFront), 1.1 e87e1498b0d1acb21c287e606097161a.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Mon, 24 Mar 2025 19:46:17 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: ZZDVDfIr_AZPWUkXMlvwcTw7WBBaTCG0UiF4AzzS8IEkwzRaWfyevw== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	9769	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 70 65 30 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 5a 61 31 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 66 65 30 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 68 65 30 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 67 65 30 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 76 65 30 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 5a 65 30 3d 28 65 2c 74 2c 72 29 3d 3e 74 20 69 6e 20 65 3f 5a 61 31 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 Data Ascii: (()=>{var pe0=Object.create;var Za1=Object.defineProperty;var fe0=Object.getOwnPropertyDescriptor;var he0=Object.getOwnPropertyNames;var ge0=Object.getPrototypeOf,ve0=Object.prototype.hasOwnProperty;var Ze0=(e,t,r)=>t in e?Za1(e,t,{enumerable:!0,configura
2025-03-24 20:21:23 UTC	11418	IN	Data Raw: 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 72 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 7b 65 77 26 26 4d 36 2e 6c 6f 67 28 60 46 61 69 6c 65 64 20 74 6f 20 61 64 64 20 6e 6f 6e 2d 65 6e 75 6d 65 72 61 62 6c 65 20 70 72 6f 70 65 72 74 79 20 22 24 7b 74 7d 22 20 74 6f 20 6f 62 6a 65 63 74 60 2c 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 4d 31 28 65 2c 74 29 7b 74 72 79 7b 6c 65 74 20 72 3d 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3d 72 2c 42 66 28 65 2c 22 5f 5f 73 65 6e 74 72 79 5f 6f 72 69 67 69 6e 61 6c 5f 5f 22 2c 74 29 7d 63 61 74 63 68 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 55 28 65 29 Data Ascii: ineProperty(e,t,{value:r,writable:!0,configurable:!0})}catch{ew&&M6.log(`Failed to add non-enumerable property "${t}" to object`,e)}}function dM1(e,t){try{let r=t.prototype\|\|{};e.prototype=t.prototype=r,Bf(e,"__sentry_original__",t)}catch{}}function AU(e)
2025-03-24 20:21:23 UTC	13198	IN	Data Raw: 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 2d 2d 6c 7c 7c 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 63 28 21 30 29 29 7d 2c 73 29 7d 29 7d 29 7d 72 65 74 75 72 6e 7b 24 3a 74 2c 61 64 64 3a 6e 2c 64 72 61 69 6e 3a 6f 7d 7d 76 61 72 20 56 77 33 3d 79 28 28 29 3d 3e 7b 4d 53 32 28 29 3b 55 53 32 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 6e 31 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 7b 7d 3b 6c 65 74 20 74 3d 65 2e 6d 61 74 63 68 28 2f 5e 28 28 5b 5e 3a 2f 3f 23 5d 2b 29 3a 29 3f 28 5c 2f 5c 2f 28 5b 5e 2f 3f 23 5d 2a 29 29 3f 28 5b 5e 3f 23 5d 2a 29 28 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 23 28 2e 2a 29 29 3f 24 2f 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 7b 7d 3b 6c 65 74 20 72 3d 74 5b 36 5d 7c 7c 22 22 2c 61 3d 74 5b 38 5d 7c 7c 22 22 3b 72 Data Ascii: ).then(()=>{--l\|\|(clearTimeout(u),c(!0))},s)})})}return{$:t,add:n,drain:o}}var Vw3=y(()=>{MS2();US2()});function on1(e){if(!e)return{};let t=e.match(/^(([^:/?#]+):)?(\/\/([^/?#]))?([^?#])(\?([^#]))?(#(.))?$/);if(!t)return{};let r=t[6]\|\|"",a=t[8]\|\|"";r
2025-03-24 20:21:23 UTC	8949	IN	Data Raw: 69 64 3a 61 2c 73 70 61 6e 5f 69 64 3a 74 2c 74 72 61 63 65 5f 69 64 3a 72 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 76 4d 33 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6e 75 6d 62 65 72 22 3f 5a 4d 33 28 65 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 5b 30 5d 2b 65 5b 31 5d 2f 31 65 39 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 3f 5a 4d 33 28 65 2e 67 65 74 54 69 6d 65 28 29 29 3a 56 66 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 4d 33 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 39 39 39 39 39 39 39 39 39 39 3f 65 2f 31 65 33 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 4c 55 28 65 29 7b 69 66 28 44 6f 30 28 65 29 29 72 65 74 75 72 6e 20 65 2e 67 65 74 53 70 61 6e 4a 53 4f 4e 28 29 3b 74 72 79 7b 6c 65 74 7b 73 70 61 6e 49 64 3a Data Ascii: id:a,span_id:t,trace_id:r})}function vM3(e){return typeof e=="number"?ZM3(e):Array.isArray(e)?e[0]+e[1]/1e9:e instanceof Date?ZM3(e.getTime()):Vf()}function ZM3(e){return e>9999999999?e/1e3:e}function LU(e){if(Do0(e))return e.getSpanJSON();try{let{spanId:
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 63 6f 6c 3f 60 24 7b 65 2e 70 72 6f 74 6f 63 6f 6c 7d 3a 60 3a 22 22 2c 72 3d 65 2e 70 6f 72 74 3f 60 3a 24 7b 65 2e 70 6f 72 74 7d 60 3a 22 22 3b 72 65 74 75 72 6e 60 24 7b 74 7d 2f 2f 24 7b 65 2e 68 6f 73 74 7d 24 7b 72 7d 24 7b 65 2e 70 61 74 68 3f 60 2f 24 7b 65 2e 70 61 74 68 7d 60 3a 22 22 7d 2f 61 70 69 2f 60 7d 66 75 6e 63 74 69 6f 6e 20 72 69 30 28 65 29 7b 72 65 74 75 72 6e 60 24 7b 74 69 30 28 65 29 7d 24 7b 65 2e 70 72 6f 6a 65 63 74 49 64 7d 2f 65 6e 76 65 6c 6f 70 65 2f 60 7d 66 75 6e 63 74 69 6f 6e 20 61 69 30 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 53 32 28 7b 73 65 6e 74 72 79 5f 6b 65 79 3a 65 2e 70 75 62 6c 69 63 4b 65 79 2c 73 65 6e 74 72 79 5f 76 65 72 73 69 6f 6e 3a 65 69 30 2c 2e 2e 2e 74 26 26 7b 73 65 6e 74 72 79 5f 63 6c 69 65 Data Ascii: col?`${e.protocol}:`:"",r=e.port?`:${e.port}`:"";return`${t}//${e.host}${r}${e.path?`/${e.path}`:""}/api/`}function ri0(e){return`${ti0(e)}${e.projectId}/envelope/`}function ai0(e,t){return zS2({sentry_key:e.publicKey,sentry_version:ei0,...t&&{sentry_clie
2025-03-24 20:21:23 UTC	3627	IN	Data Raw: 30 28 74 29 2c 6e 3d 42 69 30 28 74 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 72 2c 61 2c 6e 29 7d 63 61 74 63 68 7b 7d 72 65 74 75 72 6e 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 71 69 30 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 46 69 30 2e 74 65 73 74 28 65 2e 6d 65 73 73 61 67 65 29 3f 31 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 42 69 30 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 2e 66 72 61 6d 65 73 54 6f 50 6f 70 3d 3d 22 6e 75 6d 62 65 72 22 3f 65 2e 66 72 61 6d 65 73 54 6f 50 6f 70 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 63 45 33 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 57 65 62 41 73 73 65 6d 62 6c 79 3c 22 75 22 26 26 74 79 70 65 6f 66 20 57 65 62 41 73 73 65 6d 62 6c 79 2e 45 78 63 65 70 74 69 6f 6e 3c 22 75 22 3f 65 20 69 6e 73 Data Ascii: 0(t),n=Bi0(t);try{return e(r,a,n)}catch{}return[]}function qi0(e){return e&&Fi0.test(e.message)?1:0}function Bi0(e){return typeof e.framesToPop=="number"?e.framesToPop:0}function cE3(e){return typeof WebAssembly<"u"&&typeof WebAssembly.Exception<"u"?e ins
2025-03-24 20:21:23 UTC	8949	IN	Data Raw: 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 70 72 65 73 73 22 2c 74 2c 21 31 29 2c 5b 22 45 76 65 6e 74 54 61 72 67 65 74 22 2c 22 4e 6f 64 65 22 5d 2e 66 6f 72 45 61 63 68 28 72 3d 3e 7b 6c 65 74 20 61 3d 45 63 5b 72 5d 26 26 45 63 5b 72 5d 2e 70 72 6f 74 6f 74 79 70 65 3b 21 61 7c 7c 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 7c 7c 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 7c 7c 28 42 73 28 61 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 2c 63 29 7b 69 66 28 6f 3d 3d 3d 22 63 6c 69 63 6b 22 7c 7c 6f 3d 3d 22 6b 65 79 70 72 65 73 73 22 29 74 72 79 7b 6c 65 Data Ascii: ddEventListener("keypress",t,!1),["EventTarget","Node"].forEach(r=>{let a=Ec[r]&&Ec[r].prototype;!a\|\|!a.hasOwnProperty\|\|!a.hasOwnProperty("addEventListener")\|\|(Bs(a,"addEventListener",function(n){return function(o,i,c){if(o==="click"\|\|o=="keypress")try{le
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 72 75 6d 65 6e 74 22 7d 7d 2c 63 3d 41 55 28 6f 29 3b 72 65 74 75 72 6e 20 63 26 26 28 69 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 2e 68 61 6e 64 6c 65 72 3d 61 53 28 63 29 29 2c 50 55 28 6f 2c 69 29 7d 29 7d 29 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 63 30 28 65 29 7b 6c 65 74 20 74 3d 52 65 2c 72 3d 74 5b 65 5d 26 26 74 5b 65 5d 2e 70 72 6f 74 6f 74 79 70 65 3b 21 72 7c 7c 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 7c 7c 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 7c 7c 28 42 73 28 72 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c Data Ascii: rument"}},c=AU(o);return c&&(i.mechanism.data.handler=aS(c)),PU(o,i)})}),e.apply(this,t)}}function kc0(e){let t=Re,r=t[e]&&t[e].prototype;!r\|\|!r.hasOwnProperty\|\|!r.hasOwnProperty("addEventListener")\|\|(Bs(r,"addEventListener",function(a){return function(n,
2025-03-24 20:21:23 UTC	731	IN	Data Raw: 6c 3d 73 73 30 28 74 2c 73 29 3b 74 72 79 7b 69 73 30 28 65 2c 73 2c 6c 29 7d 63 61 74 63 68 7b 7d 7d 7d 7d 72 65 74 75 72 6e 20 65 7d 76 7a 33 2e 65 78 70 6f 72 74 73 3d 67 7a 33 7d 29 3b 76 61 72 20 5a 7a 33 3d 79 28 28 29 3d 3e 7b 44 78 32 28 29 3b 63 7a 33 28 29 7d 29 3b 76 61 72 20 48 58 3d 71 28 28 4c 4c 39 2c 79 7a 33 29 3d 3e 7b 76 61 72 20 6d 73 30 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 64 73 30 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 72 3d 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 6d 73 30 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7d 79 7a 33 2e 65 78 70 6f 72 74 73 3d 64 73 30 7d 29 3b 76 61 72 20 4b 78 Data Ascii: l=ss0(t,s);try{is0(e,s,l)}catch{}}}}return e}vz3.exports=gz3});var Zz3=y(()=>{Dx2();cz3()});var HX=q((LL9,yz3)=>{var ms0=Object.prototype;function ds0(e){var t=e&&e.constructor,r=typeof t=="function"&&t.prototype\|\|ms0;return e===r}yz3.exports=ds0});var Kx
2025-03-24 20:21:23 UTC	16384	IN	Data Raw: 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 67 6c 6f 62 61 6c 3b 77 7a 33 2e 65 78 70 6f 72 74 73 3d 53 73 30 7d 29 3b 76 61 72 20 73 6d 3d 71 28 28 52 4c 39 2c 4d 7a 33 29 3d 3e 7b 76 61 72 20 78 73 30 3d 51 78 32 28 29 2c 5f 73 30 3d 74 79 70 65 6f 66 20 73 65 6c 66 3d 3d 22 6f 62 6a 65 63 74 22 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 77 73 30 3d 78 73 30 7c 7c 5f 73 30 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 4d 7a 33 2e 65 78 70 6f 72 74 73 3d 77 73 30 7d 29 3b 76 61 72 20 24 4f 3d 71 28 28 46 4c 39 2c 45 7a 33 29 3d 3e 7b 76 61 72 20 4d 73 30 3d 73 6d 28 29 2c 45 73 30 3d 4d 73 30 2e 53 79 6d 62 6f 6c 3b 45 7a 33 2e 65 78 70 6f 72 74 73 3d 45 73 30 7d Data Ascii: t===Object&&global;wz3.exports=Ss0});var sm=q((RL9,Mz3)=>{var xs0=Qx2(),_s0=typeof self=="object"&&self&&self.Object===Object&&self,ws0=xs0\|\|_s0\|\|Function("return this")();Mz3.exports=ws0});var $O=q((FL9,Ez3)=>{var Ms0=sm(),Es0=Ms0.Symbol;Ez3.exports=Es0}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	972	OUT	GET /public/blank.gif HTTP/1.1 Host: assets.docsend.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:23 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Sat, 12 Apr 2014 01:42:38 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 24 Mar 2025 20:21:24 GMT ETag: "f837aa60b6fe83458f790db60d529fc9" X-Cache: RefreshHit from cloudfront Via: 1.1 6fde4eba6716c9f80db3b63d251f248c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: dspLTJnAowz7GCrnewRejV4ZAGBrz2VxeJR6RHMJKOLhlZ2T5wjHNw== X-Robots-Tag: noindex
2025-03-24 20:21:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:23 UTC	785	OUT	GET /static/whitey-D4AB5XBH.png HTTP/1.1 Host: assets.docsend.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:24 UTC	1104	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2430 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:23 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847683&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=D3M51baBPSKRzB6m0W87gb4Mj9K60%2BjSNuW525nM4Qo%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 016de4084b3995907681c203a7d5af44.cloudfront.net (CloudFront), 1.1 134f499632d1e15750219cb766bdc50c.cloudfront.net (CloudFront) Last-Modified: Mon, 24 Mar 2025 19:46:22 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: spKXWH8ALE8uJ7lCCFt8GMNSHHbZFUSd-fMbz1KcumHziXu46giO1Q== Age: 1 X-Robots-Tag: noindex
2025-03-24 20:21:24 UTC	2430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cf 00 00 00 28 08 03 00 00 00 6e 1e 5e 57 00 00 00 36 50 4c 54 45 e1 e2 e4 e0 e1 e3 e2 e3 e5 df e0 e2 de df e1 e3 e4 e6 dd de e0 e4 e5 e7 dc dd df e5 e6 e8 db dc de da db dd e6 e7 e9 d9 da dc d8 d9 db e7 e8 ea d7 d8 da d6 d7 d9 1f f6 3e ae 00 00 09 03 49 44 41 54 78 5e 8d 59 8b 72 e4 20 0e d4 9b 87 67 b2 77 ff ff b3 57 92 d5 9e 2c 75 a9 6c 57 6c c7 36 60 1a b5 84 60 48 df 66 ff 89 08 d7 cb d8 94 4d 85 a7 89 cd 20 51 23 b5 30 26 56 d3 a0 fd 76 63 35 63 56 8b 98 73 86 a9 bd f3 79 98 e5 93 7d 5d 59 2b 94 95 88 98 59 75 1a 6b 16 b5 bd 2d 8f aa 4f 6c 41 36 59 67 16 31 53 65 6b c4 dc d3 f2 a3 44 56 87 66 fd 30 13 b1 60 62 12 17 56 26 65 22 35 25 40 1b a4 6f b5 af 88 37 cf ff ec d8 33 f6 d4 b8 b6 6a 98 88 Data Ascii: PNGIHDR(n^W6PLTE>IDATx^Yr gwW,ulWl6``HfM Q#0&Vvc5cVsy}]Y+Yuk-OlA6Yg1SekDVf0`bV&e"5%@o73j

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:24 UTC	626	OUT	GET /static/AtlasGrotesk-Regular-Web-DLQSG2XM.ttf HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://assets.docsend.com/static/presentation-O3VNFOWI.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	1250	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 120884 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:24 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847685&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=uRfyjagda5y5mL9N5w5x%2Bkk2FOGOgJA4Ra8K12d%2Bx1Y%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847685&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=uRfyjagda5y5mL9N5w5x%2Bkk2FOGOgJA4Ra8K12d%2Bx1Y%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 3072c658bb2e308b174aea92028efcd6.cloudfront.net (CloudFront), 1.1 d33ed2107293e32734a96656b820e092.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Mon, 24 Mar 2025 19:46:22 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: mUeCS2SHF0aQQcdMTZ1fx0D80TJcY1rhGM8BorXIhU3-ccfP6hOZxQ== X-Robots-Tag: noindex
2025-03-24 20:21:25 UTC	6873	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 50 4f 53 bb d1 3b c2 00 01 45 34 00 00 7f e4 47 53 55 42 75 93 5f d9 00 01 c5 18 00 00 13 1a 4c 54 53 48 92 5e 27 22 00 00 0a 00 00 00 02 02 4f 53 2f 32 5f 82 6d 0a 00 00 01 a8 00 00 00 60 63 6d 61 70 c3 95 9f ff 00 00 6c 0c 00 00 03 5c 63 76 74 20 00 b8 11 59 00 00 72 04 00 00 00 2e 66 70 67 6d 92 42 1a fa 00 00 6f 68 00 00 01 61 67 61 73 70 00 07 00 07 00 01 45 28 00 00 00 0c 67 6c 79 66 5d 8b b7 fe 00 00 76 34 00 00 bb 20 68 64 6d 78 1a db 88 17 00 00 0c 04 00 00 60 08 68 65 61 64 fb fa ff ea 00 00 01 2c 00 00 00 36 68 68 65 61 07 e9 05 54 00 00 01 64 00 00 00 24 68 6d 74 78 52 95 6f 76 00 00 02 08 00 00 07 f8 6c 6f 63 61 b2 e7 84 70 00 00 72 34 00 00 03 fe 6d 61 78 70 04 18 02 dd 00 00 01 88 00 00 00 20 6e 61 6d Data Ascii: GPOS;E4GSUBu_LTSH^'"OS/2_m`cmapl\cvt Yr.fpgmBohagaspE(glyf]v4 hdmx`head,6hheaTd$hmtxRovlocapr4maxp nam
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: 09 0c 0a 0d 0a 0b 09 0b 09 0b 09 0a 09 0b 09 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0e 09 05 04 05 04 05 04 05 04 05 04 0b 09 07 04 0b 09 09 0a 04 0a 04 0a 04 0a 06 0a 05 0d 0a 0d 0a 0d 0a 0a 0d 09 0d 09 0d 09 0d 09 13 0f 0b 06 0b 06 0b 06 0b 08 0b 08 0b 08 0b 08 0a 06 0a 06 0a 06 0c 0a 0c 0a 0c 0a 0c 0a 0c 0a 0c 0a 11 0d 0a 08 0a 0a 08 0a 08 0a 08 07 0c 09 11 0e 0d 09 0b 08 0a 06 04 06 06 06 06 06 06 06 06 11 0d 11 0d 11 0d 0a 08 02 09 0e 04 04 04 06 06 06 05 05 05 0d 15 04 06 05 05 04 0b 0b 0e 0f 0e 0f 0f 0e 0a 0a 0a 0a 0a 0e 0b 0a 0a 04 06 09 0e 05 05 09 09 06 06 06 06 06 06 06 06 09 09 05 06 10 06 0b 06 06 06 06 06 06 06 0a 06 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 05 05 05 05 06 0a 0e 13 04 05 09 0a 07 07 07 07 05 06 07 07 06 07 07 05 06 07 07 07 07 06 07 Data Ascii:
2025-03-24 20:21:25 UTC	7240	IN	Data Raw: 1a 25 1d 26 1e 21 1a 21 1a 21 1a 21 1a 21 1a 28 1d 28 1d 28 1d 28 1d 26 1d 26 1d 0f 0d 0f 0d 0f 0d 0f 0d 0f 0d 20 1b 14 0d 22 1b 1b 1d 0d 1d 0d 1d 0d 1d 13 1d 0e 26 1d 26 1d 26 1d 1d 26 1d 28 1b 28 1b 28 1b 3a 2d 21 13 21 13 21 13 22 18 22 18 23 18 22 18 1f 11 1f 11 1f 11 25 1d 25 1d 25 1d 25 1d 25 1d 24 1c 34 28 1f 19 1f 1f 19 1f 19 1f 19 14 23 1b 34 2a 28 1b 22 18 1f 11 0d 12 12 12 12 12 12 12 12 34 28 34 28 34 28 1f 19 05 1a 2b 0b 0b 0b 13 13 13 10 10 10 26 3e 0b 13 10 10 0b 20 22 2a 2e 2a 2e 2e 2b 1e 1e 1e 1e 1e 2b 21 1e 1e 0d 13 1a 2b 10 10 1a 1a 11 11 12 12 11 11 11 11 1a 1a 0e 12 30 11 21 12 12 12 12 12 12 12 1d 12 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 1d 0e 0e 0e 0e 12 1d 2b 3a 0d 0e 1a 1d 14 14 14 14 0e 11 14 14 13 15 15 0e 13 14 14 14 14 11 14 Data Ascii: %&!!!!!((((&& "&&&&(((:-!!!""#"%%%%%$4(#4("4(4(4(+&> ".*..++!+0!+:
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: 37 2f 1b b1 37 03 3e 59 b0 25 10 b1 00 01 f4 b2 07 25 37 11 12 39 b0 07 10 b1 1c 01 f4 b0 0f d0 b0 37 10 b1 10 01 f4 b0 37 10 b0 12 d0 b2 16 37 25 11 12 39 b0 16 2f b0 10 10 b0 1b d0 b0 25 10 b0 26 dc b0 25 10 b0 28 d0 b2 2b 25 37 11 12 39 b0 2b 2f b0 00 10 b0 2f d0 b0 07 10 b0 30 d0 b0 37 10 b0 38 dc 30 31 01 06 06 15 14 16 17 17 13 36 36 35 34 26 27 27 11 07 35 26 26 27 33 1e 03 17 11 27 26 26 35 34 3e 02 37 35 33 15 16 16 17 23 26 26 27 11 17 16 16 15 14 06 07 15 01 15 3c 40 40 35 07 48 49 3e 3c 45 0c 42 73 71 08 59 04 14 23 34 24 12 5d 63 1f 37 4d 2f 42 66 6e 05 58 06 3b 40 1d 6f 5b 75 72 02 a4 08 46 2e 39 3a 09 01 fe 9b 08 47 34 30 41 0d 02 fe fd ba 6d 08 78 5b 1a 30 27 1a 04 01 11 03 11 63 5b 27 44 33 21 05 50 50 09 6f 58 31 4d 0a fe fb 05 14 66 4f Data Ascii: 7/7>Y%%79777%9/%&%(+%79+//078016654&''5&&'3'&&54>753#&&'<@@5HI><EBsqY#4$]c7M/BfnX;@o[urF.9:G40Amx[0'c['D3!PPoX1MfO
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: 15 3e 59 30 31 00 00 00 02 00 2a 01 35 01 ac 02 ef 00 11 00 1d 00 26 00 b0 00 45 58 b0 08 2f 1b b1 08 0f 3e 59 b0 00 dc b2 1f 00 01 72 b0 08 10 b1 12 02 f4 b0 00 10 b1 18 02 f4 30 31 13 22 26 35 34 3e 02 33 32 1e 02 15 14 0e 02 03 22 06 15 14 16 33 32 36 35 34 26 ea 5e 62 1b 31 48 2d 30 48 30 19 1b 32 48 2d 37 35 33 3b 39 33 33 01 35 79 64 31 52 3a 20 20 3a 51 32 32 51 3a 20 01 7e 57 4a 4b 55 56 4a 4b 56 00 00 00 00 02 00 4f 00 39 01 e3 01 d0 00 05 00 0b 00 15 00 b0 05 2f b0 03 dc b0 05 10 b0 06 d0 b0 03 10 b0 08 d0 30 31 37 37 27 33 17 07 33 37 27 33 17 07 50 69 6a 55 71 70 79 68 69 54 72 71 39 ce c9 cb cc ce c9 cb cc 00 00 ff ff 00 1e ff d8 03 10 03 0d 00 26 01 c2 00 00 00 27 01 c5 01 94 fe b3 01 07 01 6b 01 0a 00 00 00 13 00 b0 00 45 58 b0 16 2f 1b b1 Data Ascii: >Y01*5&EX/>Yr01"&54>32"32654&^b1H-0H02H-753;9335yd1R: :Q22Q: ~WJKUVJKVO9/0177'337'3PijUqpyhiTrq9&'kEX/
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: 01 02 68 6a 55 72 71 01 d0 ce c9 cc cb 00 00 00 01 00 4f 00 39 01 15 01 d0 00 05 00 09 00 b0 00 2f b0 02 dc 30 31 37 37 27 33 17 07 50 69 6a 55 71 70 39 ce c9 cb cc 00 01 ff 3b ff d8 01 ac 03 0d 00 03 00 09 00 b0 01 2f b0 02 2f 30 31 01 33 01 23 01 5e 4e fd dd 4e 03 0d fc cb 00 00 00 00 01 00 1e ff f0 02 6d 02 f0 00 3b 00 6e 00 b0 00 45 58 b0 19 2f 1b b1 19 0f 3e 59 b0 00 45 58 b0 05 2f 1b b1 05 03 3e 59 b2 00 05 19 11 12 39 b0 00 2f b2 30 19 05 11 12 39 b0 30 2f b1 33 01 f4 b0 0a d0 b0 30 10 b0 0d d0 b0 30 10 b0 27 dc b2 0f 27 01 5d b1 2a 01 f4 b0 13 d0 b0 27 10 b0 16 d0 b2 1e 19 05 11 12 39 b0 1e 2f b0 19 10 b1 24 01 f4 b0 05 10 b1 36 01 f4 30 31 25 0e 03 23 22 2e 02 27 23 35 33 26 34 35 34 34 37 23 35 33 36 36 33 32 1e 02 17 23 2e 03 23 22 06 07 33 15 Data Ascii: hjUrqO9/0177'3PijUqp9;//013#^NNm;nEX/>YEX/>Y9/090/300'']*'9/$601%#".'#53&45447#536632#.#"3
2025-03-24 20:21:25 UTC	80	IN	Data Raw: 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 Data Ascii: +,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQR
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 01 03 00 a3 00 84 00 85 00 bd 00 96 00 e8 00 86 00 8e 00 8b 00 9d 00 a9 00 a4 00 8a 01 04 00 83 00 93 00 f2 00 f3 00 8d 00 88 01 05 00 de 00 f1 00 9e 00 aa 00 f5 00 f4 00 f6 00 a2 00 ad 00 c9 00 c7 00 ae 00 62 00 63 00 90 00 64 00 cb 00 65 00 c8 00 ca 00 cf 00 cc 00 cd 00 ce 00 e9 00 66 00 d3 00 d0 00 d1 00 af 00 67 00 f0 00 91 00 d6 00 d4 00 d5 00 68 00 eb 00 ed 00 89 00 6a 00 69 00 6b 00 6d 00 6c 00 6e 00 a0 00 6f 00 71 00 70 00 72 00 73 00 75 00 74 00 76 00 77 00 ea 00 78 00 7a 00 79 00 7b 00 7d 00 7c 00 b8 00 a1 00 7f 00 7e 00 80 00 81 00 ec 00 ee 00 ba 01 06 01 07 01 08 01 09 01 0a 01 0b 00 fd 00 fe 01 0c 01 0d 01 0e 01 0f 00 ff 01 00 01 10 01 11 01 12 01 13 01 14 Data Ascii: STUVWXYZ[\]^_`abcdefghjikmlnoqprsutvwxzy{}\|~
2025-03-24 20:21:25 UTC	4880	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 ff f6 ff fb 00 00 00 01 00 42 00 04 00 05 00 06 00 07 Data Ascii: B
2025-03-24 20:21:25 UTC	11584	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 ff fb ff f6 ff ec ff b5 ff d8 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 00 00 00 1e 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 ff f6 00 00 00 00 00 00 00 00 00 14 00 2d 00 14 00 14 00 0a ff ec ff ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 0a 00 00 00 00 ff d8 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e2 ff d8 ff c4 ff ec ff f6 00 1e ff dd 00 1e 00 0a ff ec ff ec ff ec 00 00 00 00 ff ec ff ec ff b0 ff ba 00 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: -

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	627	OUT	GET /static/AtlasGrotesk-Medium-Web-LFHKUOTE.woff2 HTTP/1.1 Host: assets.docsend.com Connection: keep-alive Origin: https://docsend.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://assets.docsend.com/static/presentation-O3VNFOWI.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	1278	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Content-Length: 46188 Connection: close Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742652882&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=TN9dSRRc1C%2BVxqQLcQ4D%2F0Dm4TWvNLdGx%2F1zmkN5Kmk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742652882&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=TN9dSRRc1C%2BVxqQLcQ4D%2F0Dm4TWvNLdGx%2F1zmkN5Kmk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 c3fbf93d9b0f1f9b36fcc420314f3186.cloudfront.net (CloudFront), 1.1 6741f9acf28bc52b25f06e9986a71e26.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: Access-Control-Max-Age: 604800 Last-Modified: Fri, 21 Mar 2025 23:35:06 GMT Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Amz-Cf-Pop: IAD79-C3 Date: Mon, 24 Mar 2025 14:26:31 GMT Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: RuNZI5HQBBtSwGkm8NCQMVW9s_D-VTobTSb02qNjq7tPzzImaHTNkg== Age: 21293 X-Robots-Tag: noindex
2025-03-24 20:21:25 UTC	15106	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b4 6c 00 12 00 00 00 01 f2 08 00 00 b4 04 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 82 9c 26 1c a6 1a 14 84 02 06 60 00 86 5c 08 32 09 82 61 11 0c 0a 83 87 5c 82 d9 4d 12 81 c0 08 01 36 02 24 03 8f 78 0b 87 7e 00 04 20 05 90 1f 07 9c 7c 0c 82 3f 5b bd d5 91 07 a5 72 f7 4f a9 74 66 8c 24 f4 14 93 64 0e 77 53 63 e7 dc 88 e6 d8 3d 84 33 2d 3d 37 76 3d 91 a9 b6 96 1f 60 6e ea 8a 75 ee b6 d1 c7 68 f6 7c f4 49 d9 ff ff ff ff ff ff a2 64 22 63 96 5c e9 25 69 01 40 51 55 87 8a be 73 ef ef 85 62 2e 26 6e 2e 54 a6 dc 25 4a a8 90 5a 6a db d5 ca be 0c 5e 28 ad 8d e6 ce b6 33 89 c9 a4 f3 0d 6b c8 76 56 94 1d 7b 38 28 82 d2 8f 4d 7b 4a 2f fb 43 92 e7 77 3c 15 75 56 17 03 b6 9f 3d 75 fe 32 74 10 a2 59 88 96 Data Ascii: wOF2lB&`\2a\M6$x~ \|?[rOtf$dwSc=3-=7v=`nuh\|Id"c\%i@QUsb.&n.T%JZj^(3kvV{8(M{J/Cw<uV=u2tY
2025-03-24 20:21:25 UTC	16384	IN	Data Raw: a7 d3 63 87 11 3a 7d 52 a4 90 86 c7 0c be 6d 4f 14 59 b3 b6 c2 9c 57 d4 5f 14 55 94 31 80 a3 a9 c1 9a 06 4f 9b 69 fa c9 7d 53 fe 54 3f 5f b3 af 0f f4 5f 48 80 c9 02 fa fa 8a 56 28 41 0d 5f bd 16 c5 f0 a2 5f a9 82 4d f5 b9 98 e4 f1 2b 13 e2 7f f8 a6 d4 d7 a6 88 cc 76 c0 bb da 07 1f cd 58 be da c7 0d 94 03 79 46 e5 13 eb 7f 6e 44 11 1a 88 d2 36 6b 5b ee cd 08 f1 63 f2 cf 77 af 55 ad 85 78 86 19 40 be c4 f1 bc a9 81 e8 4d c5 12 07 18 91 50 19 b5 8c 59 64 ba a1 58 e8 43 6d 29 11 84 ea 46 56 6d 6b 6c 22 20 d1 0e 37 f5 b4 15 2a 6a 77 63 85 68 91 16 fd 82 76 57 03 db 5e fb 82 20 7b d2 7c c8 6a 90 58 c6 e4 7c cf 61 8a 09 dd 93 2d a6 c5 85 d4 65 5d 12 8e cb d3 48 06 22 09 35 0b 13 65 49 40 cd 8d 81 81 a4 a8 c6 96 41 2c 93 b1 ad 12 8e 53 2b 20 56 e2 35 24 85 de d7 Data Ascii: c:}RmOYW_U1Oi}ST?__HV(A__M+vXyFnD6k[cwUx@MPYdXCm)FVmkl" 7*jwchvW^ {\|jX\|a-e]H"5eI@A,S+ V5$
2025-03-24 20:21:25 UTC	14698	IN	Data Raw: b0 3b 53 cf eb 80 43 5e 7f eb 6d 6e 51 a0 4c 95 24 15 e4 a9 f3 e6 fd 93 eb 39 8d 5d 24 cf ff eb 95 af 8e 4c 70 9a d7 ae 4c 06 4e fc c3 82 91 1d 27 a5 57 56 ca 5a d9 f0 c6 1d 9e a1 c0 c6 1c 5b 38 ab 1b b8 b9 7d 8a 82 6a 5a 0b 12 79 fa 19 57 78 54 ec ba a3 7b 69 f6 4c a3 22 fe fa 63 c7 26 f1 50 c3 6d 14 d6 61 49 23 08 f6 cb c8 77 06 43 00 4f 67 da 09 12 10 18 1a 28 b0 10 a0 c3 d6 e2 93 57 8b 9b 34 95 3e 2f db ec ab af 6e 4b 56 ec 60 b5 25 1b 6d ae 0e d5 b1 3a 55 67 cb 8e 81 84 e3 bf 12 5b 36 8d c0 2b 07 e4 35 8c ec 2b 56 a9 c3 3a ee c2 a5 e3 61 95 88 32 20 2a fc 2b 9f 6c 4f 5e fc e0 b5 27 1f 7d 9e 0c 93 71 32 4d 66 cf 7a cd 9c 83 2f 48 27 1c e3 db 4d af fd 8a 1d f4 2b 6f ed d5 e3 28 ad 02 a2 ca 58 8b ad 4f 54 27 55 96 ac 92 3b d4 b0 94 d0 f3 a5 66 ee 3f 03 Data Ascii: ;SC^mnQL$9]$LpLN'WVZ[8}jZyWxT{iL"c&PmaI#wCOg(W4>/nKV`%m:Ug[6+5+V:a2 *+lO^'}q2Mfz/H'M+o(XOT'U;f?

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	573	OUT	GET /pithos/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	1392	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Adocsend.com/privacy_consent Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjgwNjM1NjUyNTU5NzAxNzk3OTM4MTE2MzkwNDM5NDgzMTUzNjQ3; expires=Sat, 23 Mar 2030 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=pOQQw1yCzdOt2KVsGpCr89bx; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=pOQQw1yCzdOt2KVsGpCr89bx; expires=Tue, 24 Mar 2026 20:21:25 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=7YTZd5cUpU; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Sat, 23 Mar 2030 20:21:25 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 168 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 97f137e73e2a4fe69d3d856c2594c33b Connection: close
2025-03-24 20:21:25 UTC	168	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Adocsend.com/privacy_consent;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	570	OUT	GET /pithos/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	1389	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Adocsend.com/ux_analytics Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTM5OTM4NDg3ODY2NjkzNjI4ODY0MTI1MDIwMjc0Njk2NjIxNzg5; expires=Sat, 23 Mar 2030 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=r3NEnc56aOaJrY1xAjLEGrkJ; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=r3NEnc56aOaJrY1xAjLEGrkJ; expires=Tue, 24 Mar 2026 20:21:25 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=ssqvr3uUaI; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Sat, 23 Mar 2030 20:21:25 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:24 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 165 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0c6ed4a828594c8f9c30d873577880b6 Connection: close
2025-03-24 20:21:25 UTC	165	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Adocsend.com/ux_analytics;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	582	OUT	GET /pithos/marketing_tracker_client HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	1401	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Adocsend.com/marketing_tracker_client Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; expires=Sat, 23 Mar 2030 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:25 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:25 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Sat, 23 Mar 2030 20:21:25 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 177 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a8b9a3821dca4d90b9bb74aa68e41407 Connection: close
2025-03-24 20:21:25 UTC	177	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 63 6c 69 65 6e 74 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Adocsend.com/marketing_tracker_client;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	740	OUT	POST /api/4508202598334464/envelope/?sentry_key=c39e4bf7b5475f01ebce6918a36a3fff&sentry_version=7&sentry_client=sentry.javascript.react%2F8.37.1 HTTP/1.1 Host: d.dropbox.com Connection: keep-alive Content-Length: 490 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:25 UTC	490	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 35 2d 30 33 2d 32 34 54 32 30 3a 32 31 3a 32 33 2e 38 39 33 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 37 2e 31 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 39 35 36 32 31 34 65 32 36 32 61 65 34 32 36 36 39 63 32 66 36 65 30 34 66 64 35 64 61 63 66 35 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 35 2d 30 33 2d 32 34 54 32 30 3a 32 31 3a 32 33 2e 38 39 33 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 33 2d 32 34 54 32 30 3a 32 31 3a 32 33 2e 38 39 33 5a 22 2c 22 73 74 61 74 75 73 Data Ascii: {"sent_at":"2025-03-24T20:21:23.893Z","sdk":{"name":"sentry.javascript.react","version":"8.37.1"}}{"type":"session"}{"sid":"956214e262ae42669c2f6e04fd5dacf5","init":true,"started":"2025-03-24T20:21:23.893Z","timestamp":"2025-03-24T20:21:23.893Z","status
2025-03-24 20:21:25 UTC	467	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-sentry-error,x-sentry-rate-limits,retry-after Content-Length: 2 Content-Type: application/json Cross-Origin-Resource-Policy: cross-origin Date: Mon, 24 Mar 2025 20:21:25 GMT Server: envoy Vary: origin,access-control-request-method,access-control-request-headers X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9db28e0fb36f42a18282b15087f92d02 Connection: close
2025-03-24 20:21:25 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	1111	OUT	POST /metrics/properties HTTP/1.1 Host: docsend.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0g X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://docsend.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docsend.com/view/idquj8mxi5fphufc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:25 UTC	3105	IN	HTTP/1.1 204 No Content Content-Length: 0 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:25 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847685&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=uRfyjagda5y5mL9N5w5x%2Bkk2FOGOgJA4Ra8K12d%2Bx1Y%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847685&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=uRfyjagda5y5mL9N5w5x%2Bkk2FOGOgJA4Ra8K12d%2Bx1Y%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 b8f0ff2969e7ec30e68b72cac77780e8.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.co [TRUNCATED] X-Request-Id: f960fc02-92f5-46d8-8e15-b3b717d9b8fe X-Runtime: 0.008699 Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: zRqOHIZX1m05r1sYmJKLikMJDz4kh6G0nixUOa3f12f6kaWnjCYcGA==

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	735	OUT	GET /pithos/host%3Adocsend.com/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
2025-03-24 20:21:26 UTC	3287	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6 [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qATys512aFKLtD8Xc2zx' 'nonce-Y1KAYPUQtI0P2NZg44fm' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 14153 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d797a5500fed401d89ca4f857717ca9a Connection: close
2025-03-24 20:21:26 UTC	13097	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()
2025-03-24 20:21:26 UTC	1056	IN	Data Raw: 63 72 69 70 74 5f 69 64 22 3a 20 22 43 47 49 2d 31 34 35 22 2c 20 22 73 63 72 69 70 74 5f 75 72 6c 22 3a 20 22 43 47 49 2d 31 34 35 22 2c 20 22 74 6f 74 61 6c 5f 74 69 6d 65 22 3a 20 22 43 47 49 2d 31 34 35 22 2c 20 22 70 72 6f 64 75 63 74 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 70 61 72 65 6e 74 5f 70 72 6f 64 75 63 74 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 6c 69 63 65 6e 73 65 73 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 74 79 70 65 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 70 75 72 63 68 61 73 65 5f 70 72 69 63 65 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 62 69 6c 6c 69 6e 67 5f 63 79 63 6c 65 22 3a 20 22 43 47 49 2d 36 30 37 22 2c 20 22 68 73 5f 61 Data Ascii: cript_id": "CGI-145", "script_url": "CGI-145", "total_time": "CGI-145", "product": "CGI-607", "parent_product": "CGI-607", "licenses": "CGI-607", "type": "CGI-607", "purchase_price": "CGI-607", "currency_code": "CGI-607", "billing_cycle": "CGI-607", "hs_a

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	738	OUT	GET /pithos/host%3Adocsend.com/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
2025-03-24 20:21:26 UTC	3286	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6 [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qATys512aFKLtD8Xc2zx' 'nonce-Y1KAYPUQtI0P2NZg44fm' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: __Host-logged-out-session=ChAxY35kbF55V15ROMwLbBtLEMb9hr8GGi5BTW5jdlZlWElpYVJWaDM1Z1JQQTRiQTZnMTRkMl84Z2lnUlVza2ExZzloaTZ3; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 30 X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7850 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 156520d485814e39b9968355d3917ccd Connection: close
2025-03-24 20:21:26 UTC	7850	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:25 UTC	747	OUT	GET /pithos/host%3Adocsend.com/marketing_tracker_client HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX
2025-03-24 20:21:26 UTC	3286	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6 [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qATys512aFKLtD8Xc2zx' 'nonce-Y1KAYPUQtI0P2NZg44fm' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:26 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: __Host-logged-out-session=ChDFTe7aasUTzTrDYYLQrf9yEMb9hr8GGi5BTW1GdUlpdF9Fck5ueWJDWFN6dU5LMEtiR2lZenNVM2Jyc3RJbUxVbE15bmRR; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 7971 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 722c705576ec4282960671af3d9fb184 Connection: close
2025-03-24 20:21:26 UTC	7971	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docsend.com/view/idquj8mxi5fphufc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Windows Analysis Report
https://docsend.com/view/idquj8mxi5fphufc

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:26 UTC	1166	OUT	GET /view/idquj8mxi5fphufc/page_data/1?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1 Host: docsend.com Connection: keep-alive sec-ch-ua-platform: "Windows" X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0g X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docsend.com/view/idquj8mxi5fphufc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _v_=KL8TEx7ctOP32SkFLY%2FNL4vq3n8vfw%2FpqHLtzqNe8kFnZRnxV3LsYTseP7VHLxQZjfHUKgrLGipGaTBwOnlMi0%2BWjnZSTT2NXapaMQi6QC%2F%2FT4q1mw%3D%3D--me7n2zKKdA2aHgln--6crZpUZLc0X7O3xCOlMS2Q%3D%3D; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6
2025-03-24 20:21:26 UTC	5575	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 6166 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:26 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847686&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=QSCuwXBbtwdVYkTalQHLNHgFoxeE1oBb26uy%2BNCnPic%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847686&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=QSCuwXBbtwdVYkTalQHLNHgFoxeE1oBb26uy%2BNCnPic%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 2d309cac2555275db9509df4973cc040.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Etag: W/"6e50821c3d7a2deac443dc50b39bbf0d" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: connect-src 'self' blob: https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://.previews.dropboxusercontent.com//p.m3u8 https://.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://.kissmetrics.com https://.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://.g [TRUNCATED] Set-Cookie: _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D; domain=.docsend.com; path=/; expires=Tue, 24 Mar 2026 20:21:26 GMT; SameSite=None; secure X-Request-Id: 1e52b4c0-4fc6-4c1b-81e1-531b898bc9fe X-Runtime: 0.054427 Vary: Accept-Encoding, Origin Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: k4Twa1z8iE7Npn0NJ9zcG66GCLryEDCMwOBcH2HJB8FiYqcmepGDvQ==
2025-03-24 20:21:26 UTC	6002	IN	Data Raw: 7b 22 64 6f 63 75 6d 65 6e 74 4c 69 6e 6b 73 22 3a 5b 7b 22 78 22 3a 30 2e 37 34 38 37 35 36 39 34 34 34 34 34 34 34 34 35 2c 22 79 22 3a 30 2e 30 38 38 38 38 38 38 38 38 38 38 38 38 38 38 38 38 2c 22 77 69 64 74 68 22 3a 30 2e 30 31 33 34 31 36 36 36 36 36 36 36 36 36 36 36 32 32 2c 22 68 65 69 67 68 74 22 3a 30 2e 30 37 34 30 30 30 30 30 30 30 30 30 30 30 30 30 37 2c 22 75 72 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 66 73 73 65 77 66 2e 63 72 6e 69 6e 73 75 6c 61 74 69 6f 6e 2e 63 6f 6d 5c 2f 73 61 64 71 77 5c 2f 22 2c 22 74 72 61 63 6b 65 64 55 72 6c 22 3a 22 5c 2f 67 6f 5c 2f 32 33 38 34 38 34 36 32 36 5c 2f 33 32 30 30 34 32 37 37 38 3f 76 69 73 69 74 5f 75 75 69 64 3d 34 31 61 62 62 65 38 64 2d 63 32 32 34 2d 34 66 65 65 2d 39 32 38 34 2d 66 31 36 Data Ascii: {"documentLinks":[{"x":0.7487569444444445,"y":0.08888888888888888,"width":0.013416666666666622,"height":0.07400000000000007,"uri":"http:\/\/sfssewf.crninsulation.com\/sadqw\/","trackedUrl":"\/go\/238484626\/320042778?visit_uuid=41abbe8d-c224-4fee-9284-f16
2025-03-24 20:21:26 UTC	164	IN	Data Raw: 6d 7a 2d 44 61 74 65 3d 32 30 32 35 30 33 32 34 54 32 30 32 31 32 36 5a 5c 75 30 30 32 36 58 2d 41 6d 7a 2d 45 78 70 69 72 65 73 3d 36 30 5c 75 30 30 32 36 58 2d 41 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 5c 75 30 30 32 36 58 2d 41 6d 7a 2d 53 69 67 6e 61 74 75 72 65 3d 30 37 35 35 65 37 65 30 63 66 38 33 66 32 38 35 34 32 66 61 35 39 63 31 65 38 66 39 64 33 31 61 33 66 37 63 34 37 34 34 37 30 30 63 37 66 39 64 32 33 61 37 36 30 38 31 38 37 63 30 63 39 38 36 22 7d Data Ascii: mz-Date=20250324T202126Z\u0026X-Amz-Expires=60\u0026X-Amz-SignedHeaders=host\u0026X-Amz-Signature=0755e7e0cf83f28542fa59c1e8f9d31a3f7c4744700c7f9d23a7608187c0c986"}

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:26 UTC	1090	OUT	GET /docs%2F18723d5a-12da-4799-acdb-45b2dadc78ae%2Friviera_images%2F1?Expires=1742847746&Signature=cEbdQgNv1sKVRLddJoBwxtuV-v2~TxQtQfsyYWTwPcsh1ZeG53z-aiwPzgXPIJIe4CfxFoMdaIL9LYuQN5yhJB6W~7qAivTtPiMNUKuOYzgCF4z3wPJYE2-cvcRblVCfIbwpd6Z9BdmbsInrHkPXAY2Szk8V2ucaT~mioMY-kjd1cUbsWjcLRF86JTilUaVsU8eFvYZ9iScT0qvxOViejb7T-GwcDMG4o-gsSkrXsXFXOiJpxQdEOqysKI9Q~tIOkYh8ysC-FmWciuLpUcQfB546nGCo6ILP5~~xuHucwaxWiofwNk0wNypf~4Xqidv-7nLcEWvRXvGMd~INx8Xbpg__&Key-Pair-Id=K35JMHU7N40WUH HTTP/1.1 Host: d1ng9lshxk6v9w.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:26 UTC	511	IN	HTTP/1.1 200 OK Content-Length: 398395 Connection: close Date: Mon, 24 Mar 2025 20:21:27 GMT Last-Modified: Mon, 24 Mar 2025 17:09:49 GMT ETag: "89bfc7d39be2baa22520212d6f2b4949-1" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2c7d387775f2e52dd268d2f49202b5d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: zj0sm2Bvm31_WcDmHo-tC8MMaBpN3bpEATe_1Wssa2P8j_u_D753ZA== X-Robots-Tag: noindex
2025-03-24 20:21:26 UTC	15873	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 10 e0 00 00 09 7e 08 02 00 00 00 89 4d 0b 9d 00 00 01 35 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 78 9c 63 60 60 32 61 80 82 dc bc 92 a2 20 77 27 85 88 c8 28 05 f6 7b 0c 6c 0c 2c 0c 82 0c da 0c 16 89 c9 c5 05 0c 98 80 11 c1 fc 76 0d c2 bb ac 8b 45 1d 21 c0 95 92 5a 9c 0c a4 ff 00 71 65 52 76 41 09 d0 e8 0a 20 5b a4 bc 04 cc ee 01 b1 93 0b 8a 40 ec 05 40 b6 68 11 d0 81 40 f6 0e 90 78 3a 84 7d 06 c4 4e 82 b0 1f 80 d8 45 21 41 ce 40 f6 17 20 db 21 1d 89 9d 84 c4 86 da 0b 02 f2 c5 20 8f 7b ba 3a 9b 19 5a 9a 99 e9 1a e9 1a 2a 24 e5 24 26 67 2b 14 27 27 e6 a4 a6 90 e1 2b 02 00 14 c6 10 16 b3 18 10 1b 33 30 30 2d 41 88 21 c2 b3 24 b5 a2 04 c4 72 29 ca 2f 48 ca af d0 51 f0 cc 4b d6 43 d1 9f bf 88 81 Data Ascii: PNGIHDR~M5iCCPICC Profilexc``2a w'({l,vE!ZqeRvA [@@h@x:}NE!A@ ! {:Z*$$&g+''+300-A!$r)/HQKC
2025-03-24 20:21:26 UTC	117	IN	Data Raw: 42 fc b6 bd f3 47 50 92 92 ff 54 d9 ed 8f f1 9f 7d f6 59 0a 7f 08 3f e7 9c 73 92 f9 c9 79 da b4 69 4d 9b 35 4d d5 2a 9c db 6e bb ad 72 ea 44 4d 99 32 a5 e1 d1 0d d2 b4 78 28 16 8b 35 3c ba c1 94 29 53 52 35 db 40 d1 8e 3d f5 50 bf 76 ca 56 cf 37 69 dc 38 c4 ba f9 9e 3d 7b a6 6a 02 41 25 b9 ba 28 dd 04 54 76 f8 76 c3 77 83 06 0d 4a 79 a2 63 4f 72 73 Data Ascii: BGPT}Y?syiM5M*nrDM2x(5<)SR5@=PvV7i8={jA%(TvvwJycOrs
2025-03-24 20:21:26 UTC	1004	IN	Data Raw: 73 07 0e 1c 98 8e 3d ef cb f6 9a 4d df 09 61 3c 1e 1f 34 68 50 d5 56 cf fb be aa 0a a8 0c 1a 34 28 e8 a0 f5 ea d6 4d c7 b3 b7 ee ab af 92 0f 94 86 90 95 95 f5 e4 93 4f 56 da df fd dd 77 df 4d eb 45 4d d3 66 4d 53 b8 df f3 d0 a1 43 93 fc ee ce cd cd fd 7e f3 b2 f7 6c 0a 3f 7c 9a 35 6f 56 9d 4b a9 84 ab a0 12 8b c5 9e 7c f2 c9 aa 9e fb ae 22 06 54 12 89 d2 c7 1e 7b 2c 85 79 c8 6b af bd 36 1d 8b 80 cb 36 3b 48 df c2 d6 ef 3b e7 9c 73 52 15 86 5c f7 d5 57 c9 8f bb cb c5 ec b6 6d db fa f4 e9 13 74 f2 f5 ea d6 0d 3d db e5 cb 57 a4 f5 79 ce cd cd 7d 7e c4 88 74 7f 92 27 12 a5 0f 3d f4 50 0a af 68 7a f6 ec b9 73 20 61 6f 0f a8 04 7a 4d ee d0 b6 6d db 28 83 06 dd 50 23 79 f1 78 3c 62 2a 32 e8 5d 9d 10 4f c5 b3 cf 3e 1b f4 05 f9 ec b3 cf 96 d3 e1 f3 23 46 a4 ef 9a Data Ascii: s=Ma<4hPV4(MOVwMEMfMSC~l?\|5oVK\|"T{,yk66;H;sR\Wmt=Wy}~t'=Phzs aozMm(P#yx<b*2]O>#F
2025-03-24 20:21:27 UTC	16384	IN	Data Raw: 52 e8 b6 e5 4b 24 12 c9 97 11 db ad a0 5b f5 77 e9 d2 25 c4 28 81 5e 90 f1 78 bc fc d3 83 45 9f 7e 9a be 6b f6 f2 95 94 94 7c fe f9 e7 69 1d a2 b8 b8 f8 8e 3b ee e8 d4 a9 53 0a cf c4 a6 4c 9e d2 a6 55 ab 99 33 67 a6 aa c3 4a 30 60 c0 80 10 31 a4 65 cb 57 bc fe fa bf f7 f4 af 6f bd 3d 76 d9 f2 15 81 3a 8c c7 e3 77 dc 71 47 76 76 98 2c eb e6 cd 85 57 5f 7d 75 f7 ee dd 17 2f 59 12 a2 79 50 0b 17 2d 3a fd f4 d3 fa f7 ef 5f b8 65 4b 25 0c b7 5b a9 ba 9d 5e 85 b2 03 e6 96 73 72 6a a6 7c 0e 35 6a 1c 18 b4 c9 81 99 99 29 9f 06 00 00 b0 af 12 50 01 00 a0 fa 0a 7a 9b 3e b4 d2 d2 ed 0f 3c f0 c0 85 17 5e 58 58 98 e2 45 30 89 44 a2 5f bf 7e 3f 3b ff bc 82 82 82 10 6d cb 3f e0 cb 2f 53 b9 c6 31 79 6b bf fc b2 4a c6 ad ce fe f8 c7 3f 86 6b b8 6c f9 8a 15 2b 96 47 9f c0 Data Ascii: RK$[w%(^xE~k\|i;SLU3gJ0`1eWo=v:wqGvv,W_}u/YyP-:_eK%[^srj\|5j)Pz><^XXE0D_~?;m?/S1ykJ?kl+G
2025-03-24 20:21:27 UTC	1024	IN	Data Raw: c5 0e c3 ab 88 ec ec 00 29 af 40 75 4e 02 09 94 93 39 22 f3 f0 fa e0 03 00 00 11 65 54 f6 00 00 00 20 80 9c 9c 9c df dc 79 e7 ec d9 b3 43 a4 53 76 ec 28 0c 31 a9 a5 12 97 7e 54 41 a5 3a 5a bd a6 bc 30 c6 81 34 6e 54 5e 49 90 ed db b7 87 78 eb 36 6d da 34 c4 48 ca 97 91 51 a3 6e dd 83 2f fe fd 0d e5 cf 80 5f b1 72 65 d0 2f e9 93 9c 60 0a 29 94 fc 11 72 e5 27 d5 69 6e 31 10 8b c5 b6 6d db 3e 7e fc f8 fe 67 f4 6f da b4 e9 b0 cb 2f 1f 3b 76 ec fc f9 0b 2a 66 01 f8 10 57 5f ad 5b b7 4e c7 3a eb 85 85 85 0f 3d f4 50 db b6 6d 47 8c 18 f1 d9 c6 8d 29 ef bf fa 6a d0 a0 c1 75 d7 5d b7 64 e9 b2 27 9e 78 22 2f c2 c5 d5 63 8f 3d 76 d0 62 41 c5 c5 c5 9f 84 8a 3a 57 4d ab 3e f9 a4 b2 87 90 16 41 67 16 a6 ea 26 eb 88 e0 33 1a 0f 0d f5 13 89 3b ee b8 63 ed da 75 4f 3c f1 Data Ascii: )@uN9"eT yCSv(1~TA:Z04nT^Ix6m4HQn/_re/`)r'in1m>~go/;v*fW_[N:=PmG)ju]d'x"/c=vbA:WM>Ag&3;cuO<
2025-03-24 20:21:27 UTC	15990	IN	Data Raw: 64 94 f7 e5 42 f2 eb 25 57 3b 41 27 98 86 c8 b4 b0 5f 19 19 35 86 0c 19 32 73 e6 8c c9 93 27 07 9d 42 7d 20 e3 c7 8f 4f 49 3f 87 8c dd bb 77 ff e9 4f 7f 6a d5 ea f8 bb 46 8d 5a b5 7a 4d 65 0f a7 fa a9 fa 35 79 be a1 fc 23 79 f2 13 8b cb 94 94 94 d4 ae 1d 66 41 99 c3 ca d1 47 e5 76 ed da 35 50 93 82 82 82 c5 8b 3f fa f6 bf ef da 55 34 6f ee bc 24 3b e9 d5 ab 57 32 f3 e3 fb f5 ef 1f 68 6c 33 de 9e b1 df b7 fd ae 5d 45 0b 16 2c 48 be 9f 81 03 07 06 da 6f 0a 55 d8 69 da 73 d7 ea 2e 91 a8 17 ae 88 4a e8 f2 29 b1 b0 a7 95 ac ac b4 3c 38 ad 73 64 e0 23 7c f2 6f fb c3 30 c1 15 e8 f9 76 fa 1e 86 07 ea 39 74 46 0b 00 00 38 3c 09 a8 00 00 50 75 b5 68 de ec d7 bf fe f5 87 1f 7e f8 d2 8b 2f b5 6f df 3e 62 6f 21 be d1 a9 dc 79 f0 2a a8 54 3b f3 e6 cd 0b 37 c9 b5 6d 9b Data Ascii: dB%W;A'_52s'B} OI?wOjFZzMe5y#yfAGv5P?U4o$;W2hl3]E,HoUis.J)<8sd#\|o0v9tF8<Puh~/o>bo!y*T;7m
2025-03-24 20:21:27 UTC	394	IN	Data Raw: f2 6a 2a 27 75 25 12 89 67 9e 79 e6 fe fb ef 4f 5f 04 88 e4 a5 f0 08 59 af 5e dd c7 1f 7f 7c c6 8c 19 15 bf 10 7e 56 56 d6 f0 e1 c3 e7 ce 9d db ac d9 71 15 bc eb 6a e7 e2 8b 2f 7a ee b9 e7 52 f8 89 1e 34 e8 bb a9 ea 2a 8a a0 ef e4 0a b8 36 c8 c8 a8 d0 cb 8f cc cc cc 47 1f 7d f4 d1 47 1f 4d 79 2c 79 f0 90 c1 ef cf 5f 10 34 e8 18 e8 37 9c 91 51 e3 6f 7f 7b e2 f7 bf ff 7d ba f3 09 b9 b9 b9 f7 de 7b ef 5b d3 de aa b2 c7 8a cc cc cc 4b 2e b9 a4 72 c7 90 95 95 75 fe 05 e7 3f f3 cc 33 9b 37 e7 a7 3b 9a b2 57 66 66 e6 75 d7 5d 57 59 73 fd fb f5 ef 37 ed cd 37 53 f8 9b 6f d8 a8 d1 84 09 13 a6 bd f9 66 fb 76 ed 52 d5 67 92 72 72 72 46 8e 1c 39 67 de bc 10 7f b8 e2 e2 e2 a0 4d 14 ee a8 9f 48 3c f1 c4 f8 f7 df 9f 3f 68 d0 a0 0a db e9 d0 a1 43 3f fa e8 a3 09 13 26 54 Data Ascii: j'u%gyO_Y^\|~VVqj/zR46G}GMy,y_47Qo{}{[K.ru?37;Wffu]WYs77SofvRgrrrF9gMH<?hC?&T
2025-03-24 20:21:27 UTC	16384	IN	Data Raw: 56 fa c3 46 52 22 ad b7 d5 19 19 35 2e 1b 36 ec 83 0f 3f 4c 6b 61 ab bd b2 b2 b2 6e b8 e1 86 f7 e7 2f 48 f7 13 ad cc cc cc d1 a3 47 4f 9c f8 af 14 46 3a f3 9a 36 7d f1 c5 17 ff eb ae bb aa c2 27 6b d8 e5 3f 08 7a 5f 3f 60 c0 99 29 af fa f2 b3 eb 7f 16 b4 c9 f5 3f fb 59 55 f8 05 02 00 00 d5 c3 1e 00 00 38 98 51 a3 46 05 bd ce 1c 39 72 64 65 8f 3a 8c 6d db b6 dd 7c f3 cd d1 bf 37 4a 24 12 8f 3e fa e8 d7 5f 7f bd df bd dc 77 df 7d 49 f6 33 7a f4 e8 d0 af 65 e3 a7 9f 06 9d 7c 39 69 d2 a4 d0 bb ab 48 93 27 4f ae e0 05 47 e3 f1 78 a7 4e 27 0c 1f 3e fc d1 47 1f 9d 3b 77 ee 81 fe b2 55 c1 f4 e9 d3 87 0e 1d 9a a6 ef 3e 73 73 73 6f bd f5 d6 f5 eb d7 57 fc eb da b4 79 f3 ad b7 de 9a 9b 9b 9b c2 97 96 48 24 6e bf fd f6 af be fa 2a 85 e3 5c b6 6c 59 df e0 8b cf 7d 43 Data Ascii: VFR"5.6?Lkan/HGOF:6}'k?z_?`)?YU8QF9rde:m\|7J$>_w}I3ze\|9iH'OGxN'>G;wU>sssoWyH$n*\lY}C
2025-03-24 20:21:27 UTC	2048	IN	Data Raw: b6 6d 2b 1e b0 87 87 c7 94 29 53 ae 5c b9 f2 d9 d4 a9 9a ff 5d 44 f3 a5 97 5e 92 39 aa 62 4b ad 56 9b db a4 d1 68 7a 0b ab 2e ac 59 2d 37 5b c0 a4 ef be fb ce dc 26 ad 56 db 49 f6 c1 fc ec 19 3f 7e bc d1 98 53 d4 a3 00 50 b2 b9 b8 b8 0c 1b 36 ec f4 e9 d3 3a 9d f4 e2 b8 eb d7 ff f2 f8 b1 05 8b f8 02 c5 8d e0 7a 46 8e 57 aa 56 fd f5 97 0d cb 97 2f 97 8c 34 18 0c 7b f7 fc 69 4b 5f 80 bd e9 f5 fa 31 63 c7 c8 89 0c 0e 1e 78 fa cc 99 8e 1d 3b ca b9 7d 7b 59 a7 5b ba 74 e9 e6 2d 9b dd dc 24 32 16 0c 06 43 4a 4a ca cc 99 33 64 0d d7 8c 1f 7e f8 fe c4 89 13 26 37 69 b5 da 88 88 e9 b6 34 6e 0f 89 89 89 26 1f 17 d4 42 b9 71 c3 6c ae be 78 6a be 93 53 a9 8e 1d 3b 76 b5 cd 2b af bc 22 59 af 32 78 a0 dc 25 2d 0a 18 3d 66 b4 b9 6f 33 02 03 03 3b bf a3 40 4e f2 0f ab cd Data Ascii: m+)S\]D^9bKVhz.Y-7[&VI?~SP6:zFWV/4{iK_1cx;}{Y[t-$2CJJ3d~&7i4n&BqlxjS;v+"Y2x%-=fo3;@N
2025-03-24 20:21:27 UTC	16384	IN	Data Raw: b7 6e 5a d7 78 72 72 f2 86 0d 1b 8e 1f 3f 7e ee dc b9 b8 b8 b8 c2 63 f6 70 77 af e3 ef ef ef ef df ad 5b b7 e6 cd 5b 58 77 75 9d 9c 9c 7c f0 c0 81 a4 6b d7 9e 3c 79 a2 52 a9 ca 94 29 e3 59 bd 7a db b6 6d 5f a9 5a b5 70 b0 d1 98 b3 6d db d6 df 7e fb 6d ef 9e 3f 0b 4c 39 55 ab d5 0d 1b 36 6c d6 ac 59 a7 c0 4e 9d 3a 06 da 72 a9 5f 58 76 76 f6 ce 9d 3b 0f 1f 3e 1c 73 21 26 36 26 c6 e4 6c 57 37 37 37 6f 1f 6f 1f 6f 9f 06 0d 1a 74 e9 d2 d5 df df df ea 31 a4 a4 a4 ee df bf 2f 31 f1 ca a3 47 8f 8c 46 a3 ab ab 6b d5 aa 55 df 78 e3 8d c2 c7 fc d1 a3 47 67 cd 9e b5 fd f7 ed f9 df 29 7e be be c1 83 06 8d 19 33 36 77 00 8f 1e a5 9f 3c 71 5c ff ff bf 7c d7 ae 5d 13 f7 7e ee dc b9 4a 95 2a 15 7e dc 59 ad 6e de a2 85 a5 05 4c 24 6d d9 bc 59 7c 00 ab 54 2a af 1a 9e 0b 17 Data Ascii: nZxrr?~cpw[[Xwu\|k<yR)Yzm_Zpm~m?L9U6lYN:r_Xvv;>s!&6&lW777ooot1/1GFkUxGg)~36w<q\\|]~J~YnL$mY\|T

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:26 UTC	633	OUT	GET /static/metaserver/static/pithos/marketing_tracker_client.bundle-vflS_dwpB.js HTTP/1.1 Host: cfl.dropboxstatic.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:26 UTC	623	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 20:21:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Tue, 18 Mar 2025 10:48:04 GMT x-dropbox-request-id: c609365cd1db8eeec398cbd9dd353831 x-content-type-options: nosniff x-cached: HIT expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public, immutable access-control-allow-origin: * timing-allow-origin: https://www.dropbox.com CF-Cache-Status: HIT Age: 293101 Server: cloudflare CF-RAY: 9258dffadc6fa67e-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 20:21:26 UTC	746	IN	Data Raw: 33 32 66 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 34 30 30 62 37 34 64 66 2d 34 63 36 63 2d 33 32 39 37 2d 61 32 63 66 2d 64 38 37 63 65 33 39 39 34 33 32 32 22 29 Data Ascii: 32f6!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="400b74df-4c6c-3297-a2cf-d87ce3994322")
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 29 3d 3e 6b 65 7d 29 3b 6c 65 74 20 6e 3d 22 70 72 6f 64 75 63 74 69 6f 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 6e 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6f 3d 7b 7d 29 7b 69 66 28 65 29 72 65 74 75 72 6e 3b 22 70 72 6f 64 75 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 61 6c 65 72 74 28 60 41 73 73 65 72 74 69 6f 6e 20 45 72 72 6f 72 3a 20 24 7b 74 7d 60 29 3b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 60 41 73 73 65 72 74 69 6f 6e 20 45 72 72 6f 72 3a 20 24 7b 74 7d 60 29 2c 7b 74 61 67 73 3a 72 3d 5b 5d 2c 65 78 63 5f 65 78 74 72 61 3a 61 3d 6e 75 6c 6c 7d 3d 6f 3b 74 68 72 6f 77 20 69 2e 61 73 73 65 72 74 4f 70 74 69 6f 6e 73 3d 7b 74 61 67 73 3a 72 2e 63 6f 6e 63 61 74 28 22 6d 6f 64 75 6c 65 3a 65 78 63 65 70 74 69 6f 6e Data Ascii: )=>ke});let n="production";function o(e){n=e}function i(e,t,o={}){if(e)return;"production"!==n&&alert(`Assertion Error: ${t}`);const i=new Error(`Assertion Error: ${t}`),{tags:r=[],exc_extra:a=null}=o;throw i.assertOptions={tags:r.concat("module:exception
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 4f 42 41 4c 2e 6d 61 72 6b 65 74 69 6e 67 54 72 61 63 6b 65 72 4c 6f 67 67 69 6e 67 51 75 65 75 65 3d 44 42 58 5f 55 58 41 5f 47 4c 4f 42 41 4c 2e 6d 61 72 6b 65 74 69 6e 67 54 72 61 63 6b 65 72 4c 6f 67 67 69 6e 67 51 75 65 75 65 7c 7c 5b 5d 2c 44 42 58 5f 55 58 41 5f 47 4c 4f 42 41 4c 2e 6d 61 72 6b 65 74 69 6e 67 54 72 61 63 6b 65 72 4c 6f 67 67 69 6e 67 51 75 65 75 65 2e 70 75 73 68 28 74 29 7d 2c 6d 3d 28 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 44 42 58 5f 55 58 41 5f 47 4c 4f 42 41 4c 2e 6d 61 72 6b 65 74 69 6e 67 54 72 61 63 6b 65 72 4c 6f 67 67 69 6e 67 51 75 65 75 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 44 42 58 5f 55 58 41 5f 47 4c 4f 42 41 4c 2e 6c 6f 67 54 6f 4d 61 72 6b 65 74 69 6e 67 54 72 61 63 6b 65 72 29 72 65 74 75 72 6e 3b 6c 65 74 Data Ascii: OBAL.marketingTrackerLoggingQueue=DBX_UXA_GLOBAL.marketingTrackerLoggingQueue\|\|[],DBX_UXA_GLOBAL.marketingTrackerLoggingQueue.push(t)},m=()=>{if(void 0===DBX_UXA_GLOBAL.marketingTrackerLoggingQueue\|\|void 0===DBX_UXA_GLOBAL.logToMarketingTracker)return;let
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 79 74 69 63 73 22 2c 50 65 72 66 6f 72 6d 61 6e 63 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 3a 22 70 65 72 66 6f 72 6d 61 6e 63 65 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 2c 53 6f 63 69 61 6c 4d 65 64 69 61 41 64 76 65 72 74 69 73 69 6e 67 3a 22 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 61 64 76 65 72 74 69 73 69 6e 67 22 7d 2c 4e 3d 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 4d 29 2c 6a 3d 7b 5b 4d 2e 53 74 72 69 63 74 6c 79 4e 65 63 65 73 73 61 72 79 5d 3a 21 30 2c 5b 4d 2e 4d 61 72 6b 65 74 69 6e 67 41 64 76 65 72 74 69 73 69 6e 67 5d 3a 21 31 2c 5b 4d 2e 41 6e 61 6c 79 74 69 63 73 5d 3a 21 31 2c 5b 4d 2e 50 65 72 66 6f 72 6d 61 6e 63 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5d 3a 21 31 2c 5b 4d 2e 53 6f 63 69 61 6c 4d 65 64 69 61 41 64 Data Ascii: ytics",PerformanceFunctionality:"performance and functionality",SocialMediaAdvertising:"social media advertising"},N=Object.values(M),j={[M.StrictlyNecessary]:!0,[M.MarketingAdvertising]:!1,[M.Analytics]:!1,[M.PerformanceFunctionality]:!1,[M.SocialMediaAd
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 68 28 74 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 43 29 3b 63 6f 6e 73 74 20 6e 3d 7b 6f 70 74 49 6e 54 6f 44 4e 53 3a 65 2c 65 78 70 69 72 65 44 61 74 65 3a 74 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 7d 3b 47 28 74 68 69 73 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 2c 76 2c 6e 2c 74 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 29 7d 62 61 6b 65 43 43 50 41 54 6f 6b 65 6e 43 6f 6f 6b 69 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 61 74 65 28 65 2e 65 78 70 69 72 65 44 61 74 65 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 47 28 74 68 69 73 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 2c 6b 2c 65 2c 74 29 7d 63 72 65 61 74 65 53 68 61 64 6f 77 43 6f 6f 6b 69 65 56 61 6c 75 65 28 65 2c 74 3d 21 31 29 7b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 67 65 74 53 68 61 Data Ascii: h(t.getMonth()+C);const n={optInToDNS:e,expireDate:t.toISOString()};G(this.cookieDomain,v,n,t.toUTCString())}bakeCCPATokenCookie(e){const t=new Date(e.expireDate).toUTCString();G(this.cookieDomain,k,e,t)}createShadowCookieValue(e,t=!1){const n=this.getSha
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 67 65 74 53 68 61 64 6f 77 43 6f 6f 6b 69 65 28 29 3b 72 65 74 75 72 6e 21 21 74 26 26 65 2e 65 76 65 72 79 28 28 65 3d 3e 74 2e 63 61 74 65 67 6f 72 69 65 73 5b 65 5d 29 29 7d 68 61 73 41 63 63 65 70 74 65 64 41 6c 6c 43 61 74 65 67 6f 72 69 65 73 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 67 65 74 53 68 61 64 6f 77 43 6f 6f 6b 69 65 28 29 3b 72 65 74 75 72 6e 21 21 65 26 26 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 65 2e 63 61 74 65 67 6f 72 69 65 73 29 2e 65 76 65 72 79 28 28 65 3d 3e 65 29 29 7d 67 65 74 41 6c 6c 6f 77 65 64 43 61 74 65 67 6f 72 69 65 73 4d 61 70 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 53 68 61 64 6f 77 43 6f 6f 6b 69 65 28 29 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 6a 3b 69 66 28 21 Data Ascii: t=this.getShadowCookie();return!!t&&e.every((e=>t.categories[e]))}hasAcceptedAllCategories(){const e=this.getShadowCookie();return!!e&&Object.values(e.categories).every((e=>e))}getAllowedCategoriesMap(e){const t=this.getShadowCookie();if(!t)return j;if(!
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 7b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3b 6c 65 74 20 6e 3d 5b 65 2c 22 22 5d 3b 72 65 74 75 72 6e 20 74 3e 3d 30 26 26 28 6e 3d 5b 65 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 2e 73 6c 69 63 65 28 74 2b 31 29 5d 29 2c 6e 3d 6e 2e 6d 61 70 28 28 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 20 5c 74 5d 2a 7c 5b 20 5c 74 5d 2a 24 2f 67 2c 22 22 29 29 29 2c 5b 6e 5b 30 5d 2c 6e 5b 31 5d 5d 7d 68 61 73 50 72 65 76 69 6f 75 73 6c 79 44 65 63 6c 69 6e 65 64 43 6f 6e 73 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 73 55 73 65 72 49 6e 74 65 72 61 63 74 65 64 28 29 26 26 74 68 69 73 2e 6f 6e 6c 79 53 74 72 69 63 74 6c 79 4e 65 63 65 73 73 61 72 79 43 6f 6e 73 65 6e 74 28 29 7d 7d 63 6f 6e 73 74 20 46 3d 22 75 73 65 72 Data Ascii: {const t=e.indexOf("=");let n=[e,""];return t>=0&&(n=[e.slice(0,t),e.slice(t+1)]),n=n.map((e=>e.replace(/^[ \t]\|[ \t]$/g,""))),[n[0],n[1]]}hasPreviouslyDeclinedConsent(){return this.hasUserInteracted()&&this.onlyStrictlyNecessaryConsent()}}const F="user
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 6c 64 20 6e 6f 74 20 66 69 6e 64 20 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 20 6f 6e 20 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 20 69 66 72 61 6d 65 20 65 6c 65 6d 65 6e 74 22 29 2c 73 65 76 65 72 69 74 79 3a 22 6e 6f 6e 2d 63 72 69 74 69 63 61 6c 22 7d 29 7d 29 29 29 7d 2c 74 68 69 73 2e 6c 6f 61 64 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 74 2e 68 69 64 64 65 6e 3d 21 30 2c 74 2e 73 72 63 3d 65 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 Data Ascii: ld not find contentWindow on marketing_tracker iframe element"),severity:"non-critical"})})))},this.load=e=>{const t=document.createElement("iframe");return t.style.display="none",t.hidden=!0,t.src=e,t.setAttribute("sandbox","allow-scripts allow-same-orig
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 6f 72 74 22 2c 7b 65 78 63 65 70 74 69 6f 6e 5f 6d 65 73 73 61 67 65 3a 65 7d 29 7d 29 29 7d 2c 59 3d 28 29 3d 3e 7b 48 28 22 6d 6f 64 61 6c 4f 70 65 6e 65 64 22 29 7d 2c 5a 3d 28 29 3d 3e 7b 48 28 22 6d 6f 64 61 6c 43 6c 6f 73 65 64 22 29 7d 2c 65 65 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 64 65 28 74 29 3b 65 3d 7b 2e 2e 2e 65 2c 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 3a 6e 7d 7d 48 28 22 64 69 61 6c 6f 67 5f 63 75 73 74 6f 6d 5f 65 76 65 6e 74 22 2c 7b 65 76 65 6e 74 54 79 70 65 3a 22 64 69 61 6c 6f 67 4f 70 65 6e 22 2c 65 78 74 72 61 3a 65 7d 29 7d 2c 74 65 3d 65 3d 3e 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 64 65 6c 61 79 65 64 5f 70 61 67 Data Ascii: ort",{exception_message:e})}))},Y=()=>{H("modalOpened")},Z=()=>{H("modalClosed")},ee=(e,t)=>{if(t){const n=de(t);e={...e,hierarchy_group:n}}H("dialog_custom_event",{eventType:"dialogOpen",extra:e})},te=e=>{window.dispatchEvent(new CustomEvent("delayed_pag
2025-03-24 20:21:26 UTC	1356	IN	Data Raw: 62 78 3a 75 78 2d 76 61 72 69 61 6e 74 2d 74 6f 6b 65 6e 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 74 65 6e 74 7d 2c 6c 65 3d 28 29 3d 3e 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 79 70 65 7d 2c 64 65 3d 65 3d 3e 7b 6c 65 74 20 74 3d 30 2c 6e 3d 65 3b 66 6f 72 28 3b 6e 26 26 74 3c 56 3b 29 7b 63 6f 6e 73 74 20 65 3d 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 78 61 2d 68 69 65 72 61 72 Data Ascii: bx:ux-variant-token"))\|\|void 0===e?void 0:e.content},le=()=>{var e;const t=null===(e=performance.getEntriesByType("navigation"))\|\|void 0===e?void 0:e[0];return null==t?void 0:t.type},de=e=>{let t=0,n=e;for(;n&&t<V;){const e=n.getAttribute("data-uxa-hierar

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:26 UTC	621	OUT	GET /static/metaserver/static/pithos/ux_analytics.bundle-vflI1ipmv.js HTTP/1.1 Host: cfl.dropboxstatic.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:26 UTC	624	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 20:21:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Thu, 20 Mar 2025 23:41:19 GMT x-dropbox-request-id: ea6252a4e56c8b419bd990ada9f6e234 x-content-type-options: nosniff x-cached: MISS expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public, immutable access-control-allow-origin: * timing-allow-origin: https://www.dropbox.com CF-Cache-Status: HIT Age: 331366 Server: cloudflare CF-RAY: 9258dffadb94fbf2-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 20:21:26 UTC	745	IN	Data Raw: 37 64 34 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 62 65 39 65 36 61 33 37 2d 34 31 33 65 2d 33 66 30 31 2d 61 32 36 33 2d 34 32 33 34 39 61 39 62 35 65 34 64 22 29 Data Ascii: 7d43!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="be9e6a37-413e-3f01-a263-42349a9b5e4d")
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 29 2e 72 65 64 75 63 65 28 28 28 74 2c 6e 29 3d 3e 28 69 2e 66 5b 6e 5d 28 65 2c 74 29 2c 74 29 29 2c 5b 5d 29 29 2c 69 2e 75 3d 65 3d 3e 65 2b 22 2e 62 75 6e 64 6c 65 2e 6a 73 22 2c 69 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 6e 3d 7b 7d 2c 69 2e 6c 3d 28 65 2c 74 2c 6f 2c 61 29 3d 3e 7b 69 66 28 6e 5b 65 5d 29 6e 5b 65 5d 2e 70 75 73 68 28 74 29 3b 65 6c 73 65 7b 76 61 72 20 72 2c 73 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 66 6f 72 28 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 63 3d 30 3b 63 3c 6c 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 Data Ascii: ).reduce(((t,n)=>(i.f[n](e,t),t)),[])),i.u=e=>e+".bundle.js",i.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),n={},i.l=(e,t,o,a)=>{if(n[e])n[e].push(t);else{var r,s;if(void 0!==o)for(var l=document.getElementsByTagName("script"),c=0;c<l.length;c++){va
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 72 72 6f 72 22 2c 73 2e 74 79 70 65 3d 61 2c 73 2e 72 65 71 75 65 73 74 3d 72 2c 6f 5b 31 5d 28 73 29 7d 7d 3b 69 2e 6c 28 72 2c 6c 2c 22 63 68 75 6e 6b 2d 22 2b 74 2c 74 29 7d 7d 3b 76 61 72 20 74 3d 28 74 2c 6e 29 3d 3e 7b 76 61 72 5b 6f 2c 61 2c 72 5d 3d 6e 2c 73 2c 6c 2c 63 3d 30 3b 69 66 28 6f 2e 73 6f 6d 65 28 28 74 3d 3e 30 21 3d 3d 65 5b 74 5d 29 29 29 7b 66 6f 72 28 73 20 69 6e 20 61 29 69 2e 6f 28 61 2c 73 29 26 26 28 69 2e 6d 5b 73 5d 3d 61 5b 73 5d 29 3b 69 66 28 72 29 76 61 72 20 64 3d 72 28 69 29 7d 66 6f 72 28 74 26 26 74 28 6e 29 3b 63 3c 6f 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6c 3d 6f 5b 63 5d 2c 69 2e 6f 28 65 2c 6c 29 26 26 65 5b 6c 5d 26 26 65 5b 6c 5d 5b 30 5d 28 29 2c 65 5b 6c 5d 3d 30 7d 2c 6e 3d 73 65 6c 66 2e 70 69 74 68 6f 73 3d Data Ascii: rror",s.type=a,s.request=r,o[1](s)}};i.l(r,l,"chunk-"+t,t)}};var t=(t,n)=>{var[o,a,r]=n,s,l,c=0;if(o.some((t=>0!==e[t]))){for(s in a)i.o(a,s)&&(i.m[s]=a[s]);if(r)var d=r(i)}for(t&&t(n);c<o.length;c++)l=o[c],i.o(e,l)&&e[l]&&e[l][0](),e[l]=0},n=self.pithos=
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 22 64 61 74 61 2d 75 78 61 2d 6c 6f 67 22 29 2c 74 61 67 5f 6e 61 6d 65 3a 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 6e 74 69 74 79 5f 69 64 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 78 61 2d 65 6e 74 69 74 79 2d 69 64 22 29 2c 74 72 61 63 65 5f 69 64 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 78 61 2d 74 72 61 63 65 2d 69 64 22 29 2c 65 6c 65 6d 65 6e 74 5f 72 61 6e 6b 3a 5f 28 65 29 2c 75 6e 74 72 75 73 74 65 64 5f 72 61 77 5f 76 61 72 69 61 6e 74 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 78 61 2d 75 6e 74 72 75 73 74 65 64 2d 72 61 77 2d 76 61 72 69 61 6e 74 22 29 2c 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 3a 67 28 65 29 7d 7d 2c 67 3d Data Ascii: "data-uxa-log"),tag_name:e.tagName.toLowerCase(),entity_id:e.getAttribute("data-uxa-entity-id"),trace_id:e.getAttribute("data-uxa-trace-id"),element_rank:_(e),untrusted_raw_variant:e.getAttribute("data-uxa-untrusted-raw-variant"),hierarchy_group:g(e)}},g=
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 3d 6b 2e 6d 6f 63 6b 61 62 6c 65 47 65 74 44 61 74 65 28 29 2c 74 3d 75 6e 64 65 66 69 6e 65 64 2c 6e 3d 65 2e 67 65 74 54 69 6d 65 28 29 2b 31 35 37 36 38 65 37 3b 72 65 74 75 72 6e 20 65 2e 73 65 74 54 69 6d 65 28 6e 29 2c 65 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 7d 2c 6b 3d 7b 75 78 61 49 73 45 73 73 65 6e 74 69 61 6c 3a 68 2c 61 6e 61 6c 79 74 69 63 73 54 72 61 63 6b 69 6e 67 49 73 41 6c 6c 6f 77 65 64 3a 45 2c 6d 6f 63 6b 61 62 6c 65 47 65 74 44 61 74 65 3a 28 29 3d 3e 6e 65 77 20 44 61 74 65 7d 2c 78 3d 28 29 3d 3e 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 3f 76 6f 69 64 20 30 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f Data Ascii: =k.mockableGetDate(),t=undefined,n=e.getTime()+15768e7;return e.setTime(n),e.toUTCString()},k={uxaIsEssential:h,analyticsTrackingIsAllowed:E,mockableGetDate:()=>new Date},x=()=>{var e;const t=null===(e=null===document\|\|void 0===document?void 0:document.co
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 7b 64 65 74 61 69 6c 3a 74 7d 29 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 21 30 2c 21 30 2c 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 7d 2c 4e 3d 65 3d 3e 7b 72 75 6e 41 66 74 65 72 55 78 61 4c 69 73 74 65 6e 69 6e 67 28 28 28 29 3d 3e 7b 55 28 22 65 78 63 65 70 74 69 6f 6e 52 65 70 6f 72 74 22 2c 7b 65 78 63 65 70 74 69 6f 6e 5f 6d 65 73 73 61 67 65 3a 65 7d 29 7d 29 29 7d 2c 52 3d 28 29 3d 3e 7b 55 28 22 6d 6f 64 61 6c 4f 70 65 6e 65 64 22 29 7d 2c 58 3d 28 29 3d 3e 7b 55 28 Data Ascii: ent(new CustomEvent(e,{detail:t}));else{const n=document.createEvent("CustomEvent");n.initCustomEvent(e,!0,!0,t),document.dispatchEvent(n)}},N=e=>{runAfterUxaListening((()=>{U("exceptionReport",{exception_message:e})}))},R=()=>{U("modalOpened")},X=()=>{U(
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6e 61 6d 65 64 49 74 65 6d 28 22 64 62 78 3a 77 61 72 70 2d 6d 65 74 61 64 61 74 61 2d 74 6f 6b 65 6e 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 74 65 6e 74 7d 2c 6a 3d 28 29 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6e 61 6d 65 64 49 74 65 6d 28 22 64 62 78 3a 75 78 2d 76 61 72 69 61 6e 74 2d 74 6f 6b 65 6e 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6e 74 65 6e 74 7d 2c 4a 3d 28 29 3d 3e 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 74 3d 6e 75 6c 6c Data Ascii: ementsByTagName("meta").namedItem("dbx:warp-metadata-token"))\|\|void 0===e?void 0:e.content},j=()=>{var e;return null===(e=document.head.getElementsByTagName("meta").namedItem("dbx:ux-variant-token"))\|\|void 0===e?void 0:e.content},J=()=>{var e;const t=null
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 6e 73 74 20 61 3d 75 6e 64 65 66 69 6e 65 64 3b 79 65 28 7b 76 61 72 69 61 6e 74 5f 74 6f 6b 65 6e 73 3a 6f 2e 6a 6f 69 6e 28 6f 65 29 2c 6d 61 74 63 68 65 72 73 3a 69 7d 29 7d 2c 75 65 3d 28 65 2c 74 29 3d 3e 7b 6c 65 74 20 6e 3b 6e 3d 65 2e 73 74 61 72 74 73 57 69 74 68 28 65 65 29 3f 5a 3a 74 65 2c 74 5b 6e 5d 3f 74 5b 6e 5d 2b 3d 6f 65 2b 65 3a 74 5b 6e 5d 3d 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 28 65 2c 74 29 3d 3e 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 73 65 28 65 2e 65 78 74 72 61 2c 74 2e 65 78 74 72 61 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 7c 7c 21 73 65 6c 66 29 72 65 74 75 72 6e 3b 6c 65 74 20 6e 3b 64 65 28 29 3b 63 6f 6e 73 74 20 69 3d 73 65 6c 66 2e 5f 44 Data Ascii: nst a=undefined;ye({variant_tokens:o.join(oe),matchers:i})},ue=(e,t)=>{let n;n=e.startsWith(ee)?Z:te,t[n]?t[n]+=oe+e:t[n]=e};function he(e){const t=(e,t)=>void 0===e\|\|se(e.extra,t.extra);if("undefined"==typeof self\|\|!self)return;let n;de();const i=self._D
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 70 65 28 65 29 3a 5f 65 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 73 65 6c 66 2e 5f 44 42 58 5f 55 58 5f 76 61 72 69 61 6e 74 73 5f 63 6f 6e 66 69 67 53 74 6f 72 65 3d 73 65 6c 66 2e 5f 44 42 58 5f 55 58 5f 76 61 72 69 61 6e 74 73 5f 63 6f 6e 66 69 67 53 74 6f 72 65 7c 7c 7b 7d 3b 63 6f 6e 73 74 20 74 3d 73 65 6c 66 2e 5f 44 42 58 5f 55 58 5f 76 61 72 69 61 6e 74 73 5f 63 6f 6e 66 69 67 53 74 6f 72 65 2c 7b 76 61 72 69 61 6e 74 5f 74 6f 6b 65 6e 73 3a 6e 2c 6d 61 74 63 68 65 72 73 3a 69 7d 3d 65 3b 69 66 28 6e 29 66 6f 72 28 63 6f 6e 73 74 20 65 20 6f 66 20 6e 2e 73 70 6c 69 74 28 6f 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 76 65 28 65 29 3b 69 66 28 6e 29 66 6f 72 28 63 6f 6e 73 74 5b 69 2c 6f 5d 6f 66 20 Data Ascii: pe(e):_e(e);function ye(e){if(!e)return;self._DBX_UX_variants_configStore=self._DBX_UX_variants_configStore\|\|{};const t=self._DBX_UX_variants_configStore,{variant_tokens:n,matchers:i}=e;if(n)for(const e of n.split(oe)){const n=ve(e);if(n)for(const[i,o]of
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 64 65 64 22 2c 7a 6f 6f 6d 43 68 61 74 49 6e 69 74 69 61 74 65 64 3a 22 7a 6f 6f 6d 5f 63 68 61 74 5f 69 6e 69 74 69 61 74 65 64 22 2c 7a 6f 6f 6d 43 68 61 74 49 6e 69 74 69 61 74 69 6f 6e 53 75 63 63 65 73 73 3a 22 7a 6f 6f 6d 5f 63 68 61 74 5f 69 6e 69 74 69 61 74 69 6f 6e 5f 73 75 63 63 65 73 73 22 2c 7a 6f 6f 6d 43 68 61 74 49 6e 69 74 69 61 74 69 6f 6e 46 61 69 6c 65 64 3a 22 7a 6f 6f 6d 5f 63 68 61 74 5f 69 6e 69 74 69 61 74 69 6f 6e 5f 66 61 69 6c 65 64 22 2c 7a 6f 6f 6d 43 68 61 74 54 69 6d 65 4f 75 74 46 61 69 6c 65 64 3a 22 7a 6f 6f 6d 5f 63 68 61 74 5f 74 69 6d 65 6f 75 74 5f 66 61 69 6c 75 72 65 22 2c 7a 6f 6f 6d 43 68 61 74 4e 65 74 77 6f 72 6b 46 61 69 6c 65 64 3a 22 7a 6f 6f 6d 5f 63 68 61 74 5f 6e 65 74 77 6f 72 6b 5f 66 61 69 6c 65 64 22 Data Ascii: ded",zoomChatInitiated:"zoom_chat_initiated",zoomChatInitiationSuccess:"zoom_chat_initiation_success",zoomChatInitiationFailed:"zoom_chat_initiation_failed",zoomChatTimeOutFailed:"zoom_chat_timeout_failure",zoomChatNetworkFailed:"zoom_chat_network_failed"

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:26 UTC	624	OUT	GET /static/metaserver/static/pithos/privacy_consent.bundle-vfl7XpqFM.js HTTP/1.1 Host: cfl.dropboxstatic.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 20:21:26 UTC	624	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 20:21:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding last-modified: Fri, 21 Mar 2025 02:41:14 GMT x-dropbox-request-id: ce9a0529216065962ac3a9a8b9add465 x-content-type-options: nosniff x-cached: MISS expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public, immutable access-control-allow-origin: * timing-allow-origin: https://www.dropbox.com CF-Cache-Status: HIT Age: 320658 Server: cloudflare CF-RAY: 9258dffadd5dc35b-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 20:21:26 UTC	745	IN	Data Raw: 37 64 34 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 28 6e 65 77 20 65 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6e 26 26 28 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 65 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6e 5d 3d 22 65 36 66 63 39 33 36 66 2d 62 61 30 37 2d 33 66 65 30 2d 38 32 62 66 2d 39 35 37 33 30 66 63 33 38 66 63 64 22 29 Data Ascii: 7d43!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[n]="e6fc936f-ba07-3fe0-82bf-95730fc38fcd")
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 79 36 5f 31 2e 5f 62 61 6e 6e 65 72 2d 76 69 73 69 62 6c 65 5f 31 36 33 79 36 5f 31 33 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 36 70 78 20 33 32 70 78 20 30 20 23 30 30 30 30 30 30 31 61 3b 6c 65 66 74 3a 32 34 70 78 3b 77 69 64 74 68 3a 36 30 30 70 78 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 34 38 70 78 29 7b 2e 5f 63 63 70 61 2d 69 66 72 61 6d 65 5f 31 36 33 79 36 5f 31 2e 5f 62 61 6e 6e 65 72 2d 76 69 73 69 62 6c 65 5f 31 36 33 79 36 5f 31 33 7b 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 6c 65 66 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 34 70 78 29 7d 7d 2e 5f 63 63 70 61 2d 69 66 72 61 6d 65 5f 31 36 33 79 36 5f 31 3a 6e 6f 74 28 2e 5f 62 61 6e 6e 65 72 2d 76 69 Data Ascii: y6_1._banner-visible_163y6_13{bottom:24px;box-shadow:0 16px 32px 0 #0000001a;left:24px;width:600px}@media (max-width:648px){._ccpa-iframe_163y6_1._banner-visible_163y6_13{bottom:12px;left:12px;width:calc(100% - 24px)}}._ccpa-iframe_163y6_1:not(._banner-vi
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 5c 6e 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 5c 6e 20 20 20 20 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 6e 6f 6e 65 3b 20 2f 2a 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 74 68 65 20 62 61 63 6b 67 72 6f 75 6e 64 20 74 6f 20 62 65 20 74 72 61 6e 73 70 61 72 65 6e 74 20 6f 6e 20 33 72 64 20 70 61 72 74 79 20 73 69 74 65 73 20 2a 2f 5c 6e 7d 5c 6e 5c 6e 2e 63 63 70 61 2d 69 66 72 61 6d 65 2e 62 61 6e 6e 65 72 2d 76 69 73 69 62 6c 65 20 7b 5c 6e 20 20 20 20 2f 2a 20 54 68 65 20 73 68 61 64 6f 77 20 6e 65 65 64 73 20 74 6f 20 62 65 20 70 6c 61 63 65 64 20 6f 6e 20 74 68 65 20 69 66 72 61 6d 65 20 65 6c 65 6d 65 6e 74 20 69 74 73 65 6c 66 20 74 6f 20 62 65 20 73 65 65 6e 20 6f 74 Data Ascii: z-index: 999999;\n overflow: hidden;\n color-scheme: none; /* This allows the background to be transparent on 3rd party sites /\n}\n\n.ccpa-iframe.banner-visible {\n / The shadow needs to be placed on the iframe element itself to be seen ot
2025-03-24 20:21:26 UTC	1369	IN	Data Raw: 73 20 6f 70 65 6e 20 2a 2f 5c 6e 2e 63 63 70 61 2d 69 66 72 61 6d 65 2e 64 65 74 61 69 6c 65 64 2d 76 69 65 77 2d 76 69 73 69 62 6c 65 20 7b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 7d 5c 6e 22 2c 22 2e 5f 63 63 70 61 2d 69 66 72 61 6d 65 5f 31 36 33 79 36 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 7d 2e 5f 63 63 70 61 2d 69 66 72 61 6d 65 5f Data Ascii: s open */\n.ccpa-iframe.detailed-view-visible {\n height: 100%;\n width: 100%;\n}\n","._ccpa-iframe_163y6_1{background-color:transparent;border:0;bottom:0;color-scheme:none;height:0;left:0;overflow:hidden;position:fixed;z-index:999999}._ccpa-iframe_
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 3b 6f 26 26 72 5b 63 5b 30 5d 5d 7c 7c 28 6e 26 26 28 63 5b 32 5d 3f 63 5b 32 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 61 6e 64 20 22 29 2e 63 6f 6e 63 61 74 28 63 5b 32 5d 29 3a 63 5b 32 5d 3d 6e 29 2c 74 2e 70 75 73 68 28 63 29 29 7d 7d 2c 74 7d 7d 2c 33 33 38 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 29 7c 7c 69 28 65 2c 74 29 7c 7c 6f 28 65 2c 74 29 7c 7c 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 Data Ascii: ;o&&r[c[0]]\|\|(n&&(c[2]?c[2]="".concat(n," and ").concat(c[2]):c[2]=n),t.push(c))}},t}},338:e=>{"use strict";function t(e,t){return a(e)\|\|i(e,t)\|\|o(e,t)\|\|n()}function n(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 65 55 52 4c 3d 22 2e 63 6f 6e 63 61 74 28 69 2e 73 6f 75 72 63 65 52 6f 6f 74 7c 7c 22 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 20 2a 2f 22 29 7d 29 29 3b 72 65 74 75 72 6e 5b 72 5d 2e 63 6f 6e 63 61 74 28 6c 29 2e 63 6f 6e 63 61 74 28 5b 63 5d 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 72 65 74 75 72 6e 5b 72 5d 2e 6a 6f 69 6e 28 22 5c 6e 22 29 7d 7d 2c 39 38 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 36 37 32 29 2c 72 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 75 6c 74 50 72 Data Ascii: eURL=".concat(i.sourceRoot\|\|"").concat(e," */")}));return[r].concat(l).concat([c]).join("\n")}return[r].join("\n")}},981:(e,t,n)=>{"use strict";var o=n(672),r={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultPr
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 3a 36 30 31 30 39 2c 6c 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 3a 36 30 31 31 30 2c 75 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 61 73 79 6e 63 5f 6d 6f 64 65 22 29 3a 36 30 31 31 31 2c 68 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 63 75 72 72 65 6e 74 5f 6d 6f 64 65 22 29 3a 36 30 31 31 31 2c 66 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 3a 36 30 31 31 32 2c 64 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 3a 36 30 31 31 33 2c 70 3d 6e 3f 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 Data Ascii: ("react.provider"):60109,l=n?Symbol.for("react.context"):60110,u=n?Symbol.for("react.async_mode"):60111,h=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,d=n?Symbol.for("react.suspense"):60113,p=n?Symbol.for("react.su
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 54 28 65 29 3d 3d 3d 6d 7d 2c 74 2e 69 73 50 6f 72 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 28 65 29 3d 3d 3d 72 7d 2c 74 2e 69 73 50 72 6f 66 69 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 28 65 29 3d 3d 3d 73 7d 2c 74 2e 69 73 53 74 72 69 63 74 4d 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 28 65 29 3d 3d 3d 61 7d 2c 74 2e 69 73 53 75 73 70 65 6e 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 28 65 29 3d 3d 3d 64 7d 2c 74 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: T(e)===m},t.isPortal=function(e){return T(e)===r},t.isProfiler=function(e){return T(e)===s},t.isStrictMode=function(e){return T(e)===a},t.isSuspense=function(e){return T(e)===d},t.isValidElementType=function(e){return"string"==typeof e\|\|"function"==typeof
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 6f 72 20 75 73 65 20 74 68 65 20 6e 6f 6e 2d 6d 69 6e 69 66 69 65 64 20 64 65 76 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 20 66 6f 72 20 66 75 6c 6c 20 65 72 72 6f 72 73 20 61 6e 64 20 61 64 64 69 74 69 6f 6e 61 6c 20 68 65 6c 70 66 75 6c 20 77 61 72 6e 69 6e 67 73 2e 22 7d 76 61 72 20 45 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 70 72 6f 70 Data Ascii: or use the non-minified dev environment for full errors and additional helpful warnings."}var E={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},g={};function b(e,t,n){this.prop
2025-03-24 20:21:27 UTC	1369	IN	Data Raw: 6f 70 73 3a 65 2e 70 72 6f 70 73 2c 5f 6f 77 6e 65 72 3a 65 2e 5f 6f 77 6e 65 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 65 2e 24 24 74 79 70 65 6f 66 3d 3d 3d 69 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 29 29 7d 76 61 72 20 77 3d 2f 5c 2f 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 Data Ascii: ops:e.props,_owner:e._owner}}function N(e){return"object"==typeof e&&null!==e&&e.$$typeof===i}function A(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}var w=/\/+/g;function R(e,t){return"object"==typeof e&&null!==e&&

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:27 UTC	1077	OUT	GET /view/idquj8mxi5fphufc HTTP/1.1 Host: marketing.docsend.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D
2025-03-24 20:21:27 UTC	437	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 627 Connection: close Last-Modified: Wed, 31 May 2023 19:16:09 GMT Server: AmazonS3 Date: Mon, 24 Mar 2025 00:03:51 GMT ETag: "85c876eb10030058f29245148995cc2d" X-Cache: Error from cloudfront Via: 1.1 7c55514b62254664b7255cfc5da6dc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: uEZG3APlYGDYFQlBJXo_tJB-hdBVbm4AaApwqTFrFn3p6aohyw9nlw== Age: 73057
2025-03-24 20:21:27 UTC	627	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 28 67 74 65 20 49 45 20 39 29 20 5d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 68 74 74 70 73 3a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 75 6e 73 61 66 65 2d Data Ascii: <html> <head> ...[if (gte IE 9) ]> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <![endif]--> <title>Dropbox</title> <meta http-equiv="Content-Security-Policy" content="default-src https: 'unsafe-inline' 'unsafe-

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:27 UTC	1163	OUT	POST /client_log HTTP/1.1 Host: docsend.com Connection: keep-alive Content-Length: 107 sec-ch-ua-platform: "Windows" X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0g sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: https://docsend.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docsend.com/view/idquj8mxi5fphufc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D
2025-03-24 20:21:27 UTC	107	OUT	Data Raw: 6c 6f 67 5f 65 6e 74 72 79 3d 25 35 42 50 72 69 76 61 63 79 42 61 6e 6e 65 72 25 35 44 2b 54 68 65 72 65 2b 77 61 73 2b 61 2b 70 72 6f 62 6c 65 6d 2b 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 2b 77 69 74 68 2b 50 69 74 68 6f 73 2b 61 6e 64 2b 62 61 6e 6e 65 72 2b 63 6f 75 6c 64 2b 6e 6f 74 2b 62 65 2b 66 65 74 63 68 65 64 Data Ascii: log_entry=%5BPrivacyBanner%5D+There+was+a+problem+communicating+with+Pithos+and+banner+could+not+be+fetched
2025-03-24 20:21:27 UTC	3109	IN	HTTP/1.1 204 No Content Content-Length: 0 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:27 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847687&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=H2nHvmnwBxtU73yKdAzD%2Bc9RV5%2Fz8NWYU2P%2BEMDGySs%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847687&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=H2nHvmnwBxtU73yKdAzD%2Bc9RV5%2Fz8NWYU2P%2BEMDGySs%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 4c71f51c48fb1aec28bdb43b72260ca2.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy-Report-Only: connect-src 'self' blob: https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.co [TRUNCATED] X-Request-Id: e5b9b775-10c6-45b1-997b-75ececd50b23 X-Runtime: 0.008254 Strict-Transport-Security: max-age=31556952; includeSubDomains; preload Vary: Origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: K_k1mRsPTCH1KEGMlq8SfA4emfFKOu168yj3ARPaFXZKKkhEDiJo_A==

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:27 UTC	933	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 985 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://docsend.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
2025-03-24 20:21:27 UTC	985	OUT	Data Raw: 65 76 65 6e 74 5f 74 79 70 65 3d 70 61 67 65 5f 76 69 65 77 26 65 78 74 72 61 5f 70 61 72 61 6d 73 3d 25 37 42 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6c 61 74 65 6e 63 79 25 32 32 25 33 41 2d 31 25 32 43 25 32 32 62 66 63 61 63 68 65 5f 65 6c 69 67 69 62 6c 65 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 70 61 67 65 5f 76 69 65 77 5f 6f 72 69 67 69 6e 25 32 32 25 33 41 25 32 32 6e 6f 72 6d 61 6c 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 79 5f 67 72 6f 75 70 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 76 69 73 69 74 5f 69 64 25 32 32 25 33 41 25 32 32 36 36 35 30 38 35 30 39 38 37 34 36 31 30 36 31 25 32 32 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 73 65 71 25 32 32 25 33 41 30 25 32 43 25 32 32 72 65 71 75 65 73 74 5f 69 64 25 32 32 25 Data Ascii: event_type=page_view&extra_params=%7B%22page_view_latency%22%3A-1%2C%22bfcache_eligible%22%3Afalse%2C%22page_view_origin%22%3A%22normal%22%2C%22hierarchy_group%22%3Anull%2C%22visit_id%22%3A%226650850987461061%22%2C%22request_seq%22%3A0%2C%22request_id%22%
2025-03-24 20:21:27 UTC	3456	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://docsend.com Access-Control-Expose-Headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6 [TRUNCATED] Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qATys512aFKLtD8Xc2zx' 'nonce-Y1KAYPUQtI0P2NZg44fm' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:27 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:27 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:27 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 14 X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 80f3633b3880471f84903b576864edda Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:27 UTC	863	OUT	GET /pithos/marketing_tracker_service HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://marketing.docsend.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: locale=en; gvc=MjU4NTIwMTA0NDUwOTUxNzgyNTU4MjEwODc4MTY1ODU1MjU1NDUw; t=16F4VS22KS95Bw864h2YmPoX; __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; __Host-logged-out-session=ChAHo1j+UwLTZCSH+Jzhh7+wEMb9hr8GGi5BTW1wODRwdlZ6MlljWVg2dmpTOEdkcjNTY3NWX3h5bXlUcGxRR21vOHU3aUxB
2025-03-24 20:21:28 UTC	1147	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: t=16F4VS22KS95Bw864h2YmPoX; Domain=dropbox.com; expires=Tue, 24 Mar 2026 20:21:28 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=16F4VS22KS95Bw864h2YmPoX; expires=Tue, 24 Mar 2026 20:21:28 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=T5Cfv8I_XQ; expires=Tue, 24 Mar 2026 20:21:28 GMT; HttpOnly; Path=/; SameSite=Strict; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Date: Mon, 24 Mar 2025 20:21:27 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 188 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8cf73e78e9714525a52f6d24d0dbd8b1 Connection: close
2025-03-24 20:21:28 UTC	188	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 6d 61 72 6b 65 74 69 6e 67 2e 64 6f 63 73 65 6e 64 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 73 65 72 76 69 63 65 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service;you should be redirected automatically.

Timestamp	Bytes transferred	Direction	Data
2025-03-24 20:21:28 UTC	1228	OUT	GET /view/idquj8mxi5fphufc/page_data/2?viewLoadTime=1742847682&timezoneOffset=-14400 HTTP/1.1 Host: docsend.com Connection: keep-alive sec-ch-ua-platform: "Windows" X-CSRF-Token: 4-hBaY9o-yVMBd5wpmh5Ldxeg2R33kyvPUCcnKRrk3KQjHL2wnbHrackKhDlegfuaD3VIG1ILnSwU1gkSC8j0g X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docsend.com/view/idquj8mxi5fphufc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: dbx_js_analytics_id=AABe0A37K1TSeIp9XArraPq5VQq2JrlngIAimBs521HSAw; _us_=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkluWnBaWGRsWkNCa2IyTWkiLCJleHAiOm51bGwsInB1ciI6ImNvb2tpZS5fdXNfIn19--d99e89135b29409ec95f7b01021ec543a463b2ba; _dss_=7e4e668b403dedf3c3ff19ac8cdf8ae6; _v_=e2mhl0sBQiG5DgRShUodT7cObJy4skipxcW2YOoSpDBCna2sJyGn4Qj%2FCkOUAopg94Hp6p7CZUBmECjJHXMCHTj1djOiItixmm9lXpOR3FoBw2GjYg%3D%3D--vBVposaOPBKhhkFP--SBIE6QkR9D%2BHAIE1mGO7sg%3D%3D
2025-03-24 20:21:28 UTC	5575	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1712 Connection: close Server: Cowboy Date: Mon, 24 Mar 2025 20:21:28 GMT Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742847688&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=9zwFOzbmQJBPN0Oadrjc5RO6ODQn%2B7eemm78nMQg6Ug%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742847688&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=9zwFOzbmQJBPN0Oadrjc5RO6ODQn%2B7eemm78nMQg6Ug%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Via: 1.1 vegur, 1.1 2f9dde02d417472d74833382d313abde.cloudfront.net (CloudFront) X-Frame-Options: SAMEORIGIN X-Xss-Protection: 0 X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Etag: W/"a375e5fc7869b22d98650f1f7144eccc" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: connect-src 'self' blob: https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://.previews.dropboxusercontent.com//p.m3u8 https://.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://.kissmetrics.com https://.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://.g [TRUNCATED] Set-Cookie: _v_=3JkWeQd41%2F6e9kZnTSIlLeSDvd6OAELAMt7dtpFDTaAHbcC8ba4tdSBUDtt1riuFPOUoYXfAgGulxlVSBv10JVgmU8k4OIO6lvESrSt7TrH8KaB5ow%3D%3D--c4lJzKsg9%2BlczsZO--HNW9PoIEsW3HJ762iv3rBw%3D%3D; domain=.docsend.com; path=/; expires=Tue, 24 Mar 2026 20:21:28 GMT; SameSite=None; secure X-Request-Id: 2815a97a-b8ff-4f5e-89c0-a67abc83083c X-Runtime: 0.044463 Vary: Accept-Encoding, Origin Strict-Transport-Security: max-age=31556952; includeSubDomains; preload X-Cache: Miss from cloudfront X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: klMyF9FI7hUvOg8tSg9pGNn31_MlyNQdn8_sPV3HGloaokGoFS2zzw==
2025-03-24 20:21:28 UTC	1712	IN	Data Raw: 7b 22 64 6f 63 75 6d 65 6e 74 4c 69 6e 6b 73 22 3a 5b 7b 22 78 22 3a 30 2e 36 36 39 33 30 35 35 35 35 35 35 35 35 35 35 35 2c 22 79 22 3a 30 2e 30 38 38 38 38 38 38 38 38 38 38 38 38 38 38 38 39 2c 22 77 69 64 74 68 22 3a 30 2e 30 30 34 38 35 34 31 36 36 36 36 36 36 36 36 36 37 33 2c 22 68 65 69 67 68 74 22 3a 30 2e 30 31 37 38 38 38 38 38 38 38 38 38 38 38 38 39 2c 22 75 72 69 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 75 6f 65 69 75 75 6f 65 69 65 6e 2e 75 62 70 61 67 65 73 2e 63 6f 6d 5c 2f 63 61 6c 69 22 2c 22 74 72 61 63 6b 65 64 55 72 6c 22 3a 22 5c 2f 67 6f 5c 2f 32 33 38 34 38 34 36 34 37 5c 2f 33 32 30 30 34 32 37 37 38 3f 76 69 73 69 74 5f 75 75 69 64 3d 34 31 61 62 62 65 38 64 2d 63 32 32 34 2d 34 66 65 65 2d 39 32 38 34 2d 66 31 36 36 30 37 38 37 Data Ascii: {"documentLinks":[{"x":0.6693055555555555,"y":0.08888888888888889,"width":0.004854166666666673,"height":0.0178888888888889,"uri":"https:\/\/uoeiuuoeien.ubpages.com\/cali","trackedUrl":"\/go\/238484647\/320042778?visit_uuid=41abbe8d-c224-4fee-9284-f1660787