Play interactive tourEdit tour

Windows Analysis Report
https://app.hellosign.com/t/7ccf58727bc5731fde9f5122e7e1aac568a7acf3?utm_campaign=multisigner_complete&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original

Overview

General Information

Sample URL:	https://app.hellosign.com/t/7ccf58727bc5731fde9f5122e7e1aac568a7acf3?utm_campaign=multisigner_complete&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original
Analysis ID:	1540510
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Phishing

HTML page contains hidden javascript code

Source: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4

HTTP Parser: Base64 decoded: '%perf_eng_2024_05_24_udcl_ssa_exporter

HTML page is missing a favicon

Source: https://sign.dropbox.com/about/privacy

HTTP Parser: No favicon

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:50168 version: TLS 1.2

Networking

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.208.1
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.208.1
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.208.1
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.208.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /t/7ccf58727bc5731fde9f5122e7e1aac568a7acf3?utm_campaign=multisigner_complete&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4 HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=wi63EpNPCT29s73UR9rnIylq7AeuyIxJoA+hfnaT1O7o7UpcLOkU1um9piqxETgxoa2DWqP75AkVOveZ08bvAdJr795FerFD6en5qhlEclm1Kqe3edAuY3rqn9C5; AWSALBCORS=wi63EpNPCT29s73UR9rnIylq7AeuyIxJoA+hfnaT1O7o7UpcLOkU1um9piqxETgxoa2DWqP75AkVOveZ08bvAdJr795FerFD6en5qhlEclm1Kqe3edAuY3rqn9C5; hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/signer.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bd2463b/js/foundation.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/signer.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=
Source: global traffic	HTTP traffic detected: GET /bd2463b/js/foundation.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/signer.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=
Source: global traffic	HTTP traffic detected: GET /jsapi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fapp.hellosign.com&sandbox_redirect=false&uri_for_logging=app.hellosign.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&redesign_flag=true&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=9dc33007549a49839cb4a76f5a91ad88&time=1729710504 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=9dc33007549a49839cb4a76f5a91ad88&time=1729710504 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=p3sziR4vRr5db-gYeNcdsOwx; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /signer/ready?tsm_guid=6be51a407924c171a57c70844757ecddbcbede87&token=12a13c7bf7a94686&_c=1729710514947 HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"baggage: sentry-environment=production,sentry-release=hellosign%40bd2463b,sentry-transaction=%2Fsign%2F%3Aguid,sentry-public_key=f8e19270d07412b6be0c537098edb309,sentry-trace_id=9141d5c369ac4df299e8ba8e6d074bd3,sentry-sample_rate=0.0001sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sentry-trace: 9141d5c369ac4df299e8ba8e6d074bd3-a5a5664bcea5cfe4-0sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; AWSALB=0OBG5bInU6Oy92zf5FsOrMWiyHFATj4ti2WvQjzsMA0I9tsRsW7xf7XL7QFFF4eWJnCXw6OzYLcocWCOTQP4DtaRft+aIy3FU8aTkxb6gq51DQgJUHASAsXW5OEj; AWSALBCORS=0OBG5bInU6Oy92zf5FsOrMWiyHFATj4ti2WvQjzsMA0I9tsRsW7xf7XL7QFFF4eWJnCXw6OzYLcocWCOTQP4DtaRft+aIy3FU8aTkxb6gq51DQgJUHASAsXW5OEj; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/e241b9859333fe7f2b69.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/bd2463b/build/signer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signer/load?guid=cab54da17bf51f6ec9fb3636d959affb07b15ef4&tsm_guid=6be51a407924c171a57c70844757ecddbcbede87&status_token=12a13c7bf7a94686&_c=1729710515928 HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"baggage: sentry-environment=production,sentry-release=hellosign%40bd2463b,sentry-transaction=%2Fsign%2F%3Aguid,sentry-public_key=f8e19270d07412b6be0c537098edb309,sentry-trace_id=9141d5c369ac4df299e8ba8e6d074bd3,sentry-sample_rate=0.0001sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sentry-trace: 9141d5c369ac4df299e8ba8e6d074bd3-ad5b59a79a3634bc-0sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=P48FxU3wE1YsFALzOMkQaJgKrnf/V4aEWkN5XBleS+/M7STmo7OG1jcl+Oua0VJ1wBf6d7wZ1UAh0U5wVULxfvqKvC0vCRCU+gT+QyDCM51QUVBAOWeu2436UbeE; AWSALBCORS=P48FxU3wE1YsFALzOMkQaJgKrnf/V4aEWkN5XBleS+/M7STmo7OG1jcl+Oua0VJ1wBf6d7wZ1UAh0U5wVULxfvqKvC0vCRCU+gT+QyDCM51QUVBAOWeu2436UbeE
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=p3sziR4vRr5db-gYeNcdsOwx; locale=en
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ul-visitor-id: e8264b9e-a1e7-44b4-8b80-ac22c6f61135sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-ul-installation-method: web-snippetsprig-modules: replayx-ul-sdk-version: 2.31.6x-ul-environment-id: B0gYx8LpZMuserleap-platform: websec-ch-ua-platform: "Windows"Accept: */*Origin: https://app.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signer/ready?tsm_guid=6be51a407924c171a57c70844757ecddbcbede87&token=12a13c7bf7a94686&_c=1729710514947 HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=P48FxU3wE1YsFALzOMkQaJgKrnf/V4aEWkN5XBleS+/M7STmo7OG1jcl+Oua0VJ1wBf6d7wZ1UAh0U5wVULxfvqKvC0vCRCU+gT+QyDCM51QUVBAOWeu2436UbeE; AWSALBCORS=P48FxU3wE1YsFALzOMkQaJgKrnf/V4aEWkN5XBleS+/M7STmo7OG1jcl+Oua0VJ1wBf6d7wZ1UAh0U5wVULxfvqKvC0vCRCU+gT+QyDCM51QUVBAOWeu2436UbeE
Source: global traffic	HTTP traffic detected: GET /bd2463b/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signer/load?guid=cab54da17bf51f6ec9fb3636d959affb07b15ef4&tsm_guid=6be51a407924c171a57c70844757ecddbcbede87&status_token=12a13c7bf7a94686&_c=1729710515928 HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=uIjRArGWTabnMoKMKk3vuk38BNwRJFvVtitgDnNZC+ltDmMnNgEpnDzHvUcNQ/9Wlz2du5tV65g2zM+cW99AIcgKWRcs30pXPge1Wf811VxkwmSysU1yUweOt3vI; AWSALBCORS=uIjRArGWTabnMoKMKk3vuk38BNwRJFvVtitgDnNZC+ltDmMnNgEpnDzHvUcNQ/9Wlz2du5tV65g2zM+cW99AIcgKWRcs30pXPge1Wf811VxkwmSysU1yUweOt3vI
Source: global traffic	HTTP traffic detected: GET /signature/list?type_code=S&ux_version=2&preloaded_tsm_group_key=default HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-CSRF-Token: beffee34cc6f7fd4ae18ef0691b9a09af0d76a7442d3b57dff22aba8aca8ce8csec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=EYGjmw6QgrRA88vZjPIEJ7MFII7TgC5qD5Pn/RKmQKFKZGmZfOB2RsEkgf5ouULj/xr2949wKA8ze5SElm9V0vMoe+uQs7qqXT0fh8B5w/c+jSnsz6cYyiVn8fH/; AWSALBCORS=EYGjmw6QgrRA88vZjPIEJ7MFII7TgC5qD5Pn/RKmQKFKZGmZfOB2RsEkgf5ouULj/xr2949wKA8ze5SElm9V0vMoe+uQs7qqXT0fh8B5w/c+jSnsz6cYyiVn8fH/
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/chunks/d2c35f2b76c751f369db.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/chunks/4032fc2bb3afb63f9ecc.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/6446.631445d810bbf78f3fc9.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/2024.8db30cb9e6c0a61f6de3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signature/list?type_code=I&ux_version=2&preloaded_tsm_group_key=default HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-CSRF-Token: beffee34cc6f7fd4ae18ef0691b9a09af0d76a7442d3b57dff22aba8aca8ce8csec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=jYvrSQDNWtlYtKvdfRvSv+JkpRZlJnlOtCUS2++iNxDbcu9rosiURFRmbfWfFa/YWuoUL0Jx3ElfmPOkeZcOO60yVC4sLaV2IDpjS7bsM/nxq8Kv6ijSux35/8W2; AWSALBCORS=jYvrSQDNWtlYtKvdfRvSv+JkpRZlJnlOtCUS2++iNxDbcu9rosiURFRmbfWfFa/YWuoUL0Jx3ElfmPOkeZcOO60yVC4sLaV2IDpjS7bsM/nxq8Kv6ijSux35/8W2
Source: global traffic	HTTP traffic detected: GET /signature/list?type_code=S&ux_version=2&preloaded_tsm_group_key=default HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=jYvrSQDNWtlYtKvdfRvSv+JkpRZlJnlOtCUS2++iNxDbcu9rosiURFRmbfWfFa/YWuoUL0Jx3ElfmPOkeZcOO60yVC4sLaV2IDpjS7bsM/nxq8Kv6ijSux35/8W2; AWSALBCORS=jYvrSQDNWtlYtKvdfRvSv+JkpRZlJnlOtCUS2++iNxDbcu9rosiURFRmbfWfFa/YWuoUL0Jx3ElfmPOkeZcOO60yVC4sLaV2IDpjS7bsM/nxq8Kv6ijSux35/8W2
Source: global traffic	HTTP traffic detected: GET /signature/list?type_code=I&ux_version=2&preloaded_tsm_group_key=default HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=2HcDNmPw9wC7u7zu32iQlHagLJGMSeXWWrWCyL1n6PXI/vty+aXvuta2Uz4S4FuO+ONfK+vQ++CLwryrmB2CVXqM4NTX3wnEWtw8swD5X6RH1VxVO9c9XWxKI88J; AWSALBCORS=2HcDNmPw9wC7u7zu32iQlHagLJGMSeXWWrWCyL1n6PXI/vty+aXvuta2Uz4S4FuO+ONfK+vQ++CLwryrmB2CVXqM4NTX3wnEWtw8swD5X6RH1VxVO9c9XWxKI88J
Source: global traffic	HTTP traffic detected: GET /signer/getData?cached_params_token=a46e05ddb8293140a13a0b4bb005e147 HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonX-CSRF-Token: beffee34cc6f7fd4ae18ef0691b9a09af0d76a7442d3b57dff22aba8aca8ce8csec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/sign/cab54da17bf51f6ec9fb3636d959affb07b15ef4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=eAH3sFt4TWs4uA5gVQZ6+ZlliLrCRUo3+ud44g992jWN1fbUzBwdzeDWFhsVuOOAXE71VM9NwuZ4OjHfg5R+rHnu9pqP6r6K6r4aO22fd1dzO5zlU2MXi+1b6qxc; AWSALBCORS=eAH3sFt4TWs4uA5gVQZ6+ZlliLrCRUo3+ud44g992jWN1fbUzBwdzeDWFhsVuOOAXE71VM9NwuZ4OjHfg5R+rHnu9pqP6r6K6r4aO22fd1dzO5zlU2MXi+1b6qxc
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/6446.631445d810bbf78f3fc9.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/5d96717aefe7b4d6e7de.svg HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/2024.8db30cb9e6c0a61f6de3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/eb783956ad074ea9063a.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/bd2463b/build/signer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /signer/getData?cached_params_token=a46e05ddb8293140a13a0b4bb005e147 HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_user=dddf4549eada57064d2bb88c9f85dafc393832c4d2db1f0873ecff82f745ada0:7067819111e54c6cf77d5c1de1975d4f77fc670039af523b3ead2629e1345ad6; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AWSALB=IbxFUoNqrwdHDixNXnCOtmZdD1KSt7Mj4Dq9lq7JsYcJyEkaYzR2T8fOPMNSsVSu+1iE66mL17lmnqoLci4tneaBWF7FeISXYtSYOoHJzx0bc7s+akVl6LZzBQme; AWSALBCORS=IbxFUoNqrwdHDixNXnCOtmZdD1KSt7Mj4Dq9lq7JsYcJyEkaYzR2T8fOPMNSsVSu+1iE66mL17lmnqoLci4tneaBWF7FeISXYtSYOoHJzx0bc7s+akVl6LZzBQme
Source: global traffic	HTTP traffic detected: GET /hellofax_uploads/documents/2024/10/23/09ab29404d7a8f6cb9b5376b38add8ff26528bd4/snapshot/acdb79022051815a6bc33b54b1a70499aacc5f96/converted.png?response-content-disposition=attachment&response-content-type=application%2Fbinary&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAUMSXJYX5V735SFEW%2F20241023%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241023T185521Z&X-Amz-SignedHeaders=host&X-Amz-Expires=86400&X-Amz-Signature=bcd27968a43b21171a5fe47180a7848bb2eb09a886c75b0be14f72b7b20d7401 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /about/privacy HTTP/1.1Host: www.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/5d96717aefe7b4d6e7de.svg HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /hellofax_uploads/documents/2024/10/23/09ab29404d7a8f6cb9b5376b38add8ff26528bd4/snapshot/acdb79022051815a6bc33b54b1a70499aacc5f96/converted.png?response-content-disposition=attachment&response-content-type=application%2Fbinary&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAUMSXJYX5V735SFEW%2F20241023%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241023T185521Z&X-Amz-SignedHeaders=host&X-Amz-Expires=86400&X-Amz-Signature=bcd27968a43b21171a5fe47180a7848bb2eb09a886c75b0be14f72b7b20d7401 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about/privacy HTTP/1.1Host: sign.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=p3sziR4vRr5db-gYeNcdsOwx; locale=en
Source: global traffic	HTTP traffic detected: GET /bd2463b/build/19dce59526bdb47b8e52.ttf HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/bd2463b/build/signer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/js/dropbox-sign.e91304d72.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=64412cfef2e5476af2f044bd HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls/main.29b395f72a924d86eef4.css HTTP/1.1Host: mar-cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /js/forms2/js/forms2.min.js HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=64412cfef2e5476af2f044bd HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/forms2/js/forms2.min.js HTTP/1.1Host: lp.dropboxbusiness.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=0q9gzKwFamRfmsEjMrcVpuIHLX_ipZZg2TEDCUtTsIE-1729710525-1.0.1.1-Qeb5rA.O4xQWnznMbcoZ7mT38pBsMcxpEjMHWtFQCH1jBL35cXljQT75FYc5umeqC29RhhWL6DcIcevaVyMMtA
Source: global traffic	HTTP traffic detected: GET /pithos/ux_analytics,top_frame_marketing_tracker HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/644138c11bfb752ad2d8eace_AtlasGrotesk-Regular-Web.woff HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/64480a9b8d4d3b8674406303_sign-logo.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/6446be5a30d26aaa5ac3bc7d_icon-arrow-down.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/644138c163c83a3f4c483a89_AtlasGrotesk-Medium-Web.woff HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/644139b416400d680fd2ff17_SharpGroteskDBBook23.otf HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/644138c03f285f4f536151d6_AtlasGrotesk-Bold-Web.woff HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/644138c10ed5ec2f29677021_AtlasGrotesk-RegularItalic-Web.woff HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls/bundle.29b395f72a924d86eef4.js HTTP/1.1Host: mar-cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /2/pap_event_logging/log_events HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/64677dc4f9e99d297b17c2fe_arrow-right.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Asign.dropbox.com/ux_analytics%2Ctop_frame_marketing_tracker HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/js/dropbox-sign.e91304d72.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/6446be5a30d26aaa5ac3bc7d_icon-arrow-down.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/64480a9b8d4d3b8674406303_sign-logo.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /64412cfef2e5476af2f044bd/64677dc4f9e99d297b17c2fe_arrow-right.svg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=pytJucYMPPiBMPr8RlW8.xJvh.FPu.L6Y4graBeZrbE-1729710525-1.0.1.1-h3vu3O1HaFwbGLJb9pM6i7vXG2HxeT9j8sklEHrzzWdrreZ6x.Ig.8ZGywpMU.glaMqbNiuLwiieXc6ASlgVIQ
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Asign.dropbox.com/ux_analytics%2Ctop_frame_marketing_tracker HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Asign.dropbox.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1729710530453 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://sign.dropbox.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ls/bundle.29b395f72a924d86eef4.js HTTP/1.1Host: mar-cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vdC83Y2NmNTg3MjdiYzU3MzFmZGU5ZjUxMjJlN2UxYWFjNTY4YTdhY2YzP3V0bV9jYW1wYWlnbj1tdWx0aXNpZ25lcl9jb21wbGV0ZSZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PW9yaWdpbmFs; hs_puuid=d4b4eef78a2da154fa2e7cce231d1a0db7a4ebad; ambidex=eyJlNTIxZGRmMSI6ImUyYWE1YjliIn0=; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-23T19:08:33.595Z","expireDate":"2025-04-23T19:08:33.595Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Asign.dropbox.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712391; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1729710530453 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=85523823015705507162481611177535055133
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: dropbox.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=85523823015705507162481611177535055133
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712392
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fsign.dropbox.com&sandbox_redirect=false&uri_for_logging=sign.dropbox.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&csrf_origin=https%253A%252F%252Fsign.dropbox.com&default_non_ccpa=true&redesign_flag=true&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=dropboxinc&sessionId=c31d680098584c67a16079e76626d432&version=2.11.4 HTTP/1.1Host: dropboxinc.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZxlJxgAAAF8nKwOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=85523823015705507162481611177535055133
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?csrf_origin=https%253A%252F%252Fsign.dropbox.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fsign.dropbox.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=sign.dropbox.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZxlJxgAAAF8nKwOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=85523823015705507162481611177535055133; dpm=85523823015705507162481611177535055133
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CvVersion%7C5.5.0; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CMCSYNCSOP%7C411-20027%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=bfdd542a5f8e4d0ca5d4b66b1fa25135&time=1729710537 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?csrf_origin=https%253A%252F%252Fsign.dropbox.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fsign.dropbox.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=sign.dropbox.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CMCSYNCSOP%7C411-20027%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=bfdd542a5f8e4d0ca5d4b66b1fa25135&time=1729710537 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CMCSYNCSOP%7C411-20027%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://sign.dropbox.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ingress?browser_url=https%3A%2F%2Fsign.dropbox.com%2Fabout%2Fprivacy&root_browser_url=https%3A%2F%2Fsign.dropbox.com%2Fabout%2Fprivacy&canonical_url=https%3A%2F%2Fsign.dropbox.com%2Fprivacy%2F&referrer_url=&account_id=4a897efb-0052-440f-82be-86256c8450d2&cs_render_id=73debfc5-0394-44f1-be39-e239615e97f3&cs_visitor_id=e2a84224-a526-41f6-bcf2-5156d1b0659c&time_stamp=1729710542716&session_time_stamp=1729710541098&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&ktag_version=v3.0.11&platform=Win32&language=en-US&color_depth=24&screen_resolution=1280x1024&time_zone=America%2FNew_York&privacy_mode=false&content_height=10152&content_width=1263&type=page_view&set_cookie=true HTTP/1.1Host: frontdoor.knotch.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTYyNzg2MTM4MjE1MDcxMzY3NTc0ODUzMjI5MjUyMjA2NjU4Mjkw; t=p3sziR4vRr5db-gYeNcdsOwx; __Host-js_csrf=p3sziR4vRr5db-gYeNcdsOwx; locale=en; __Host-logged-out-session=ChD6f5hdJ5vdZyaFyy5wX6lmEJST5bgGGi5BTFEtNk1KUk5mY0t5QlYyeUdNU1BpYlZKeDBYQWpCdnNKZFhFWUlaMFFiVExn; __Host-ss=bUYZZ0SEAU; at_check=true; _mkto_trk=id:077-ZJT-858&token:_mch-dropbox.com-1729710530657-83789; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; mbox=session#c31d680098584c67a16079e76626d432#1729712394|PC#c31d680098584c67a16079e76626d432.37_0#1792955334; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20020%7CMCMID%7C85366976364742557862501801367477688075%7CMCAAMLH-1730315331%7C6%7CMCAAMB-1730315331%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729717731s%7CNONE%7CMCSYNCSOP%7C411-20027%7CvVersion%7C5.5.0; _gcl_au=1.1.1156060579.1729710542
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ingress?browser_url=https%3A%2F%2Fsign.dropbox.com%2Fabout%2Fprivacy&root_browser_url=https%3A%2F%2Fsign.dropbox.com%2Fabout%2Fprivacy&canonical_url=https%3A%2F%2Fsign.dropbox.com%2Fprivacy%2F&referrer_url=&account_id=4a897efb-0052-440f-82be-86256c8450d2&cs_render_id=73debfc5-0394-44f1-be39-e239615e97f3&cs_visitor_id=e2a84224-a526-41f6-bcf2-5156d1b0659c&time_stamp=1729710542716&session_time_stamp=1729710541098&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36&ktag_version=v3.0.11&platform=Win32&language=en-US&color_depth=24&screen_resolution=1280x1024&time_zone=America%2FNew_York&privacy_mode=false&content_height=10152&content_width=1263&type=page_view&set_cookie=true HTTP/1.1Host: frontdoor.knotch.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor_id=; optout=1
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-5MZFBWHBBE&gacid=1866406663.1729710543&gtm=45je4ah0v9139038462za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101686685~101823847&z=681834988 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sign.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Found strings which match to known social media urls

Source: chromecache_249.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=SA(a,c,e);V(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return V(122),!0;if(d&&f){for(var m=Lb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},VA=function(){var a=[],b=function(c){return qb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_357.2.dr, chromecache_264.2.dr, chromecache_249.2.dr, chromecache_226.2.dr	String found in binary or memory: return b}jD.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr	String found in binary or memory: var yC=function(a,b,c,d,e){var f=pA("fsl",c?"nv.mwt":"mwt",0),g;g=c?pA("fsl","nv.ids",[]):pA("fsl","ids",[]);if(!g.length)return!0;var k=uA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);V(121);if(m==="https://www.facebook.com/tr/")return V(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!bz(k,dz(b, equals www.facebook.com (Facebook)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: app.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cdn.userleap.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: www.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: sign.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: lp.dropboxbusiness.com
Source: global traffic	DNS traffic detected: DNS query: mar-cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: 077-zjt-858.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: dropboxinc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: dropbox.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: www.knotch-cdn.com
Source: global traffic	DNS traffic detected: DNS query: frontdoor.knotch.it
Source: global traffic	DNS traffic detected: DNS query: configs.knotch.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.dropboxstatic.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /api/4505546831036416/envelope/?sentry_key=015d5ce7dd3142cd8fca094a50adbf69&sentry_version=7&sentry_client=sentry.javascript.browser%2F8.27.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 486sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Wed, 23 Oct 2024 19:08:54 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: deebcf65779041218fe3b6560dda9503Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Wed, 23 Oct 2024 19:08:55 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4307b1e7b8c5489495f78d31dcc3f002Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Wed, 23 Oct 2024 19:08:56 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c868bef008aa4a0ba6b023b0875a1febConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Wed, 23 Oct 2024 19:09:00 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 2c313a3437974b7e8c13b8ada353e466Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Wed, 23 Oct 2024 19:09:04 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4de676b72c0d4ee6afbcb98014b40fb5Connection: close

URLs found in memory or binary data

Source: chromecache_177.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: http://foundation.zurb.com
Source: chromecache_177.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: http://paulirish.com/2011/requestanimationframe-for-smart-animating/
Source: chromecache_282.2.dr	String found in binary or memory: http://sharptype.co/licensing/desktop/Alternate
Source: chromecache_282.2.dr	String found in binary or memory: http://sharptype.co/licensing/desktop/Sharp
Source: chromecache_282.2.dr	String found in binary or memory: http://sharptype.coSee
Source: chromecache_291.2.dr	String found in binary or memory: http://sign.dropbox.com/trust/security
Source: chromecache_267.2.dr, chromecache_346.2.dr, chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_291.2.dr	String found in binary or memory: http://www.aboutads.info/choices/
Source: chromecache_323.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_291.2.dr	String found in binary or memory: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_249.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_311.2.dr, chromecache_173.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/%
Source: chromecache_291.2.dr	String found in binary or memory: https://app.hellofax.com/account/logIn
Source: chromecache_186.2.dr	String found in binary or memory: https://app.hellosign.com/
Source: chromecache_291.2.dr	String found in binary or memory: https://app.hellosign.com/account/logIn
Source: chromecache_291.2.dr	String found in binary or memory: https://app.hellosign.com/account/signUp
Source: chromecache_186.2.dr	String found in binary or memory: https://app.hellosign.com/home/manage
Source: chromecache_291.2.dr	String found in binary or memory: https://app.hellosign.com/home/myAccount
Source: chromecache_172.2.dr	String found in binary or memory: https://assets-global.website-files.com/58065afcec27c89278ba59f7/5ee2946056e70e4cae6e8df8_Dropdown%2
Source: chromecache_235.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC08f3807101814ef48bb6f95ad6702da
Source: chromecache_317.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC38e3748e11e44fe5908c1b3fb654828
Source: chromecache_247.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC528b57cee6474d20b34a73ab2ba482d
Source: chromecache_272.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC75f862ded7da4e9e9c2921e9c0c6aa1
Source: chromecache_253.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC8f70d59289c2485499bbbc1b9310625
Source: chromecache_344.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCb9b4546e94a140cd989949773d569e2
Source: chromecache_255.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCc3eabeac283e44618e4d03f3960056b
Source: chromecache_328.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCe4009e5293e74815aab317b742d5185
Source: chromecache_291.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/launch-$
Source: chromecache_281.2.dr, chromecache_240.2.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/launch-89f34743f412.js
Source: chromecache_357.2.dr, chromecache_264.2.dr, chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6441320af2e547320ef091a6_favicon.png
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6441320df020d65e5a8250be_webclip.png
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c01bfb753c10d8eac3_AtlasGrotesk-Me
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c02ce2490e982c2138_AtlasGrotesk-Bl
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c03f285f4f536151d6_AtlasGrotesk-Bo
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c03fdd7efc11fe51fe_AtlasGrotesk-Li
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c091a2be536f81d588_AtlasGrotesk-Bo
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c091a2be77f681d589_AtlasGrotesk-Li
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c0bfe3b57538f7c8e9_AtlasGrotesk-Bl
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c10ed5ec2f29677021_AtlasGrotesk-Re
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c11bfb752ad2d8eace_AtlasGrotesk-Re
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c163c83a3f4c483a89_AtlasGrotesk-Me
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c1cf797b5fbdf2e9b8_AtlasGrotesk-Th
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138c1d455396f2e913ce5_AtlasGrotesk-Th
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fc152fa6de863294bc_SharpGroteskDBS
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fc220712618bab71a3_SharpGroteskDBS
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fc50f74b456346fb11_SharpGroteskDBM
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fc50f74ba57546fb12_SharpGroteskDBM
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fccf797b53a3f2f003_SharpGroteskDBB
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644138fcf2e547d565f1094c_SharpGroteskDBB
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644139a2781bd4133e93a3a9_SharpGroteskDBS
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644139a2e44d3e27c997d64a_SharpGroteskDBB
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644139a364e6d84e63b5235c_SharpGroteskDBM
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/644139b416400d680fd2ff17_SharpGroteskDBB
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6446ae8a82efbf59d518d244_GettyImages-131
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6446be5a30d26aaa5ac3bc7d_icon-arrow-down
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6448101782a121343bdd96e5_hamburger.svg
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6454f14948fc7b0ea085fd6c_ipad%20esignatu
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/646228aad14bc6744a979538_arrow-right.svg
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/64677dc4f9e99d297b17c2fe_arrow-right.svg
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/647a1413346d0d0b923b299c_62573a0c4a54d72
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/64917692ca584a06f5b631ae_6344c5eae153f83
Source: chromecache_284.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/64b05069c489ae92ce15ccd9_GettyImages-131
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/6566373b4cd0c8abf08e8698_tech%20laptop.p
Source: chromecache_291.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/64412cfef2e5476af2f044bd/css/dropbox-sign.6ab4a7e6d.css
Source: chromecache_284.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/static/custom-checkbox-checkmark.589d534424.svg
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://da-7712612305f608b15.getsmartling.com
Source: chromecache_286.2.dr, chromecache_192.2.dr, chromecache_183.2.dr, chromecache_271.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_291.2.dr	String found in binary or memory: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adeq
Source: chromecache_291.2.dr	String found in binary or memory: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/stan
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://es-es-77126123006d07215.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://es-la-771261230d94c6c5f.getsmartling.com
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/id-id/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/ja-jp/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/ko-kr/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/nb-no/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/ru-ru/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/th-th/
Source: chromecache_208.2.dr	String found in binary or memory: https://experience.dropbox.com/zh-cn/
Source: chromecache_291.2.dr	String found in binary or memory: https://faq.hellosign.com/hc/en-us/articles/206571577?www_referrer=https%3A%2F%2Fwww.google.com%2F
Source: chromecache_291.2.dr	String found in binary or memory: https://faq.hellosign.com/hc/en-us/articles/206571587-How-to-delete-a-document
Source: chromecache_310.2.dr	String found in binary or memory: https://fr-7712612301e0c7231.getsmartling.com
Source: chromecache_267.2.dr, chromecache_346.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: https://github.com/gnarf37/jquery-requestAnimationFrame
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_194.2.dr, chromecache_306.2.dr	String found in binary or memory: https://github.com/paulirish/matchMedia.js
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.2/LICENSE
Source: chromecache_249.2.dr	String found in binary or memory: https://google.com
Source: chromecache_249.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_208.2.dr	String found in binary or memory: https://help.dropbox.com/es-es/
Source: chromecache_208.2.dr	String found in binary or memory: https://help.dropbox.com/fr-fr/
Source: chromecache_291.2.dr	String found in binary or memory: https://help.dropbox.com/security/cookies
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://id-7712612307fe6b773.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://it-it-771261230f46511fc.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ja-771261230aa2663ee.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ko-771261230be574aa2.getsmartling.com
Source: chromecache_311.2.dr, chromecache_173.2.dr	String found in binary or memory: https://maps-api-ssl.google.com/maps?jsapiRedirect=true&file=googleapi
Source: chromecache_311.2.dr, chromecache_173.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?jsapiRedirect=true
Source: chromecache_291.2.dr	String found in binary or memory: https://mar-cdn.hellosign.com/ls/bundle.29b395f72a924d86eef4.js
Source: chromecache_291.2.dr	String found in binary or memory: https://mar-cdn.hellosign.com/ls/main.29b395f72a924d86eef4.css
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ms-ms-7712612309b15c2d5.getsmartling.com
Source: chromecache_291.2.dr	String found in binary or memory: https://myadcenter.google.com/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://nb-771261230d91eb177.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://nl-7712612308436277f.getsmartling.com/
Source: chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_357.2.dr, chromecache_264.2.dr, chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://pl-pl-771261230c402870e.getsmartling.com
Source: chromecache_291.2.dr	String found in binary or memory: https://portal.helloworks.com/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://pt-771261230ab42e550.getsmartling.com
Source: chromecache_305.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://ru-7712612306da52175.getsmartling.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/da-DK
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/es-ES
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/es-LA
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/fr-CA
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/fr-FR
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/id-ID
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/it-IT
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/ja-JP
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/ko-KR
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/ms-MY
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/nb-NO
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/nl-NL
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/pl-PL
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/pt-BR
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/ru-RU
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/sv-SE
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/th-TH
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/uk-UA
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign-staging.dropbox.com/zh-CN
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/da-DK
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/da-DK/privacy/
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/de-DE/privacy/
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/en-GB/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/es-ES
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/es-ES/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/es-LA
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/es-LA/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/fr-CA
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/fr-CA/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/fr-FR
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/fr-FR/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/id-ID
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/id-ID/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/it-IT
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/it-IT/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/ja-JP
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/ja-JP/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/ko-KR
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/ko-KR/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/ms-MY
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/ms-MY/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/nb-NO
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/nb-NO/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/nl-NL
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/nl-NL/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/pl-PL
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/pl-PL/privacy/
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/pt-BR
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/pt-BR/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/ru-RU
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/ru-RU/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/sv-SE
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/sv-SE/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/th-TH
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/th-TH/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/uk-UA
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/uk-UA/privacy/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sign.dropbox.com/zh-CN
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/zh-CN/privacy/
Source: chromecache_291.2.dr	String found in binary or memory: https://sign.dropbox.com/zh-TW/privacy/
Source: chromecache_207.2.dr, chromecache_316.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://sv-771261230b07c6a73.getsmartling.com
Source: chromecache_357.2.dr, chromecache_264.2.dr, chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://th-th-771261230d99744cd.getsmartling.com
Source: chromecache_177.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_177.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://uk-7712612305dc5898b.getsmartling.com
Source: chromecache_291.2.dr	String found in binary or memory: https://www.dataprivacyframework.gov
Source: chromecache_291.2.dr	String found in binary or memory: https://www.dataprivacyframework.gov/
Source: chromecache_291.2.dr	String found in binary or memory: https://www.dropbox.com/pithos/privacy_consent
Source: chromecache_291.2.dr	String found in binary or memory: https://www.dropbox.com/pithos/ux_analytics
Source: chromecache_291.2.dr	String found in binary or memory: https://www.dropbox.com/pithos/zoom_chat_client
Source: chromecache_186.2.dr	String found in binary or memory: https://www.dropbox.com/signatures?
Source: chromecache_264.2.dr, chromecache_226.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_249.2.dr, chromecache_283.2.dr, chromecache_226.2.dr, chromecache_340.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_340.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_357.2.dr, chromecache_249.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_357.2.dr, chromecache_249.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/%
Source: chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/debug/%
Source: chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.com/charts/%
Source: chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.com/charts/debug/%
Source: chromecache_311.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.gstatic.com/inputtools/js/ita/inputtools_3.js
Source: chromecache_291.2.dr	String found in binary or memory: https://www.jamsadr.com/dpf-dispute-resolution
Source: chromecache_330.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.knotch-cdn.com/ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2
Source: chromecache_291.2.dr	String found in binary or memory: https://youronlinechoices.eu/
Source: chromecache_257.2.dr, chromecache_310.2.dr	String found in binary or memory: https://zh-cn-771261230ecd85688.getsmartling.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:50168 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: clean0.win@21/296@110/42

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1788 --field-trial-handle=2028,i,15797720401052033011,14623995909595962748,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.hellosign.com/t/7ccf58727bc5731fde9f5122e7e1aac568a7acf3?utm_campaign=multisigner_complete&utm_source=default&utm_channel=product_promo&utm_medium=email&utm_content=original"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1788 --field-trial-handle=2028,i,15797720401052033011,14623995909595962748,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected