Edit tour

Windows Analysis Report
https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107

Overview

General Information

Sample URL:	https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107
Analysis ID:	1426950
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected clear text password fields (password is not hidden)

Found iframes

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301	HTTP Parser: <input type="text"... for password input
Source: https://support.docusign.com/s/?language=en_US	HTTP Parser: <input type="text"... for password input

Source: https://support.docusign.com/s/?language=en_US	HTTP Parser: Iframe src: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint
Source: https://support.docusign.com/s/?language=en_US	HTTP Parser: Iframe src: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint
Source: https://support.docusign.com/s/?language=en_US	HTTP Parser: Iframe src: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint
Source: https://support.docusign.com/s/?language=en_US	HTTP Parser: Iframe src: https://support.docusign.com/apex/zoomin_app__ZoominGAPage

Source: https://support.docusign.com/s/?language=en_US

HTTP Parser: Title: Home does not match URL

Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744	HTTP Parser: No favicon
Source: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1	HTTP Parser: No favicon
Source: https://support.docusign.com/apex/zoomin_app__ZoominGAPage	HTTP Parser: No favicon
Source: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html	HTTP Parser: No favicon
Source: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8	HTTP Parser: No favicon
Source: https://apps.usw2.pure.cloud/messenger/messenger.html	HTTP Parser: No favicon
Source: https://apps.usw2.pure.cloud/messenger/messenger.html	HTTP Parser: No favicon
Source: https://apps.usw2.pure.cloud/messenger/messenger.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ	HTTP Parser: No favicon

Source: https://support.docusign.com/s/?language=en_US

HTTP Parser: No <meta name="author".. found

Source: https://support.docusign.com/s/?language=en_US

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49766 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49766 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICJFODQxQUUzMzNGOThDOEMzMkI3Njg3ODg2RUE4REZGODQ4MzJGRkIxIiwiJGluaXRpYWxfcmVmZXJyaW5nX2RvbWFpbiI6ICIkZGlyZWN0IiwibXBfcGFnZSI6ICJuYTMuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiMzA0Y2NiZGUyNGQzYjE1ZmZlMmQ1ZGUzMGMxMGRhYjIifX0%3D&ip=1&_=1713289378799 HTTP/1.1Host: api.mixpanel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://na3.docusign.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://na3.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICJFODQxQUUzMzNGOThDOEMzMkI3Njg3ODg2RUE4REZGODQ4MzJGRkIxIiwiJGluaXRpYWxfcmVmZXJyaW5nX2RvbWFpbiI6ICIkZGlyZWN0IiwibXBfcGFnZSI6ICJuYTMuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiMzA0Y2NiZGUyNGQzYjE1ZmZlMmQ1ZGUzMGMxMGRhYjIifX0%3D&ip=1&_=1713289378799 HTTP/1.1Host: api.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js?did=f9d8335b-1f5b-415d-923b-2daa2d0de9bd HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
Source: global traffic	HTTP traffic detected: GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&firstPartyCookieDomain=track.docusign.com HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
Source: global traffic	HTTP traffic detected: GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&elq1pcGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&elq1pcGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E
Source: global traffic	HTTP traffic detected: GET /f HTTP/1.1Host: a.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1IEYtQv1.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events.js HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=913125131.1713289393&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: s.ml-attr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/12BP4E/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/357123711145934?v=2.9.153&r=stable&domain=www.docusign.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sa.css HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /sa.jpeg HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/12BP4E/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFy
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en/contactSupport HTTP/1.1Host: support.docusign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289395.60.0.0; _ga=GA1.1.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CI6tHBoNCLXx-rAGEgUI6AcQAEIASgA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=UP63ShKle3cNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=LNfsnWknC_tisY5L0Ur6iRZ9zHX0QXkxmcdQ22DIS5DvZHTQTGO-WA==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&gjid=1577734252&_gid=379038570.1713289394&_u=YGBACEAABAAAACgAI~&z=476889903 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
Source: global traffic	HTTP traffic detected: GET /sa.jpeg HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aq
Source: global traffic	HTTP traffic detected: GET /s/contactSupport?language=en_US&rsc_301 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /conductor HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://chat.docusign.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; CMPS=5598; CMPRO=5598
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=b7e994aa1e9b4e8b98b325df14c61f39; tv_UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=LNfsnWknC_tisY5L0Ur6iRZ9zHX0QXkxmcdQ22DIS5DvZHTQTGO-WA==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1Host: attr.ml-api.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&_u=YGBACEAABAAAACgAI~&z=2121927031 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/cspcommunity/resources/scripts/jquery.min.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/runtimedownload/fonts.css?lastMod=1712837529000&brandSet=52bff5e6-866e-4e63-8c44-d79144c0db18 HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17132735990001672335788&rv=1713288537000 HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/RecaptchaHeader HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!Pdjt7LNp1DGDykDSTQD+//9ql1rJLxDYzwcEcm5qyynxMtN5oyG0OKc9E+emmh332PuUB1RfZ3qM3qY=
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=12BP4E HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/runtime~main.58de437c.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; CMPS=5598; CMPRO=5598
Source: global traffic	HTTP traffic detected: GET /core/assets/js/main~493df0b3.9e1d5232.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/123456789/RSC_ChatBotCookieCheckScript HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
Source: global traffic	HTTP traffic detected: GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1Host: attr.ml-api.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&_u=YGBACEAABAAAACgAI~&z=2121927031 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datalayer/v4/latest.js HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=1&ClientTime=1713289400187&PageStart=1713289396931&PrevBundleTime=0&LastActivity=2771&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/35.d0f1ccda.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit&onload=onloadCallback HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/1702515884138/DSC_GenesysChatbot HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
Source: global traffic	HTTP traffic detected: GET /core/assets/css/8.ab226b4a.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/3/DSC_HeadOverrides HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
Source: global traffic	HTTP traffic detected: GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/1709165610000/DSC_ZoominZMSetMetadata HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
Source: global traffic	HTTP traffic detected: GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/1710540190000/DSC_SetGoogleAnalyticsWindowVariables HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
Source: global traffic	HTTP traffic detected: GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A22+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&cons
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289402940&PageStart=1713289396931&PrevBundleTime=1713289401231&LastActivity=2023&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/o-19DFBM-na1/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/mixpanel-2-latest.min.js HTTP/1.1Host: cdn4.mxpnl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f HTTP/1.1Host: a.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/8.10f90e75.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/16.9ef4a519.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/24.f2a14bf3.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/17.aa20860d.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/settings/o-19DFBM-na1/v1/web HTTP/1.1Host: edge.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /core/assets/css/39.11d2b6a7.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/31.c043863a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=o-19DFBM-na1 HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289404216&PageStart=1713289396931&PrevBundleTime=1713289404017&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/27.b5e8f5e1.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/1.1bcc8082.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22c7651b2b-36b1-437e-8cfb-f67c34b7b347%22%2C%22routeType%22%3A%22custom-contact-supports%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22rsc_301%22%3A%22%22%2C%22viewid%22%3A%221d92fa59-064f-4fd0-bcea-a400d414b45f%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landi
Source: global traffic	HTTP traffic detected: GET /core/assets/js/27.42a90a1f.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Regular.woff HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.docusign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /core/assets/js/25.b8d3a33a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominGAPage HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /resource/1639079103000/zoomin_app__iepolyfills HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /core/assets/js/1.0ca46fe3.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/28.caa75eae.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%222153e4b9-0bdf-4540-bac2-51c1eddcf52a%22%2C%22publishedChangelistNum%22%3A193%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-SFDC-Page-Cache: d5b14152447ba219X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549X-SFDC-Request-Id: 9973390000bb31c6a5User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /static/111213/js/perf/stub.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominGAPageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /resource/1639078464000/zoomin_app__event_layer HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominGAPageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /resource/1639079103000/zoomin_app__iepolyfills HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /jslibrary/1698336664248/sfdc/NetworkTracking.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominGAPageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%222153e4b9-0bdf-4540-bac2-51c1eddcf52a%22%2C%22publishedChangelistNum%22%3A193%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22c7651b2b-36b1-437e-8cfb-f67c34b7b347%22%2C%22routeType%22%3A%22custom-contact-supports%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22rsc_301%22%3A%22%22%2C%22viewid%22%3A%221d92fa59-064f-4fd0-bcea-a400d414b45f%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637
Source: global traffic	HTTP traffic detected: GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=1&aura.Component.getComponentDef=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Bold.woff HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://support.docusign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=2&aura.ApexAction.execute=5&aura.Component.getComponent=1&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1&ui-force-components-controllers-hostConfig.HostConfig.getConfigData=1&zoomin_app.ZoominBaseComponent.obtainEventParams=1&zoomin_app.ZoominBaseComponent.obtainLanguageCodes=1&zoomin_app.ZoominBaseComponent.obtainPermission=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=5&other.CSP_AuraMethods.getAlertLocalized=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289406970&PageStart=1713289396931&PrevBundleTime=1713289405397&LastActivity=2752&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=4&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=6&aura.ApexAction.execute=2 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=1&ClientTime=1713289407037&PageStart=1713289404678&PrevBundleTime=0&LastActivity=2121&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398If-Modified-Since: Tue, 16 Apr 2024 17:43:28 GMT
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=7&aura.ApexAction.execute=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /genesys-bootstrap/genesys.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-componentsCompatible.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/elements.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/common.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1710411414000/Theme3/gc/dStandard.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom0.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom1.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom2.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom3.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTOk&operationContext=DELIVERY&contentId=05T8Z00002WJTrf&page=0&d=/a/8Z000000GYqW/XIhk.eaEqq45jwJH6U5I0GuVBBifKvGPF7KZfPoKJac&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLAa&operationContext=DELIVERY&contentId=05T8Z0000250azu&page=0&d=/a/8Z0000019R98/ofPnbj4wOZYBKpWeSGciEv2ng6eNiy.5nOQjk70.mf8&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/servlet.shepherd/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkSjr&operationContext=CHATTER&contentId=05T8Z00002WJRwY HTTP/1.1Host: docusign.file.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTTL&operationContext=DELIVERY&contentId=05T8Z00002WJU0Y&page=0&d=/a/8Z000000GYqS/LAWu8kNCayWAEvdGd0FtNaVbu5rBG.VBRGsbheRWGmo&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom4.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom5.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom6.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/domains.json HTTP/1.1Host: api-cdn.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom7.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom8.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom9.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289407933&PageStart=1713289396931&PrevBundleTime=1713289408147&LastActivity=3725&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=2&ClientTime=1713289408022&PageStart=1713289404678&PrevBundleTime=1713289408042&LastActivity=3153&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=9&zoomin_app.ZoominCommunitySearch.obtainSearchSourcesList=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=8&aura.ApexAction.execute=2 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=10&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=1&zoomin_app.ZoominCommunitySearch.obtainSearchPreference=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /content/session?url=https%3A%2F%2Fdocusign.file.force.com%2Fsfc%2Fservlet.shepherd%2Fversion%2FrenditionDownload%3Frendition%3DORIGINAL_Jpeg%26versionId%3D0688Z00000kkSjr%26operationContext%3DCHATTER%26contentId%3D05T8Z00002WJRwY HTTP/1.1Host: docusign.lightning.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BrowserId_sec=1p6lj_wYEe6wYz_x1C_cxA
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom10.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom11.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom12.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /identify HTTP/1.1Host: event.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=3&ClientTime=1713289409730&PageStart=1713289404678&PrevBundleTime=1713289409092&LastActivity=1697&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom13.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom14.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom15.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713289409326 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLAa&operationContext=DELIVERY&contentId=05T8Z0000250azu&page=0&d=/a/8Z0000019R98/ofPnbj4wOZYBKpWeSGciEv2ng6eNiy.5nOQjk70.mf8&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTTL&operationContext=DELIVERY&contentId=05T8Z00002WJU0Y&page=0&d=/a/8Z000000GYqS/LAWu8kNCayWAEvdGd0FtNaVbu5rBG.VBRGsbheRWGmo&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
Source: global traffic	HTTP traffic detected: GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTOk&operationContext=DELIVERY&contentId=05T8Z00002WJTrf&page=0&d=/a/8Z000000GYqW/XIhk.eaEqq45jwJH6U5I0GuVBBifKvGPF7KZfPoKJac&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1Host: docusign.file.force.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
Source: global traffic	HTTP traffic detected: GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/config.json HTTP/1.1Host: api-cdn.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/domains.json HTTP/1.1Host: api-cdn.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom16.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/extended.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Fdocusign.lightning.force.com%2Fcontent%2Fsession%3Furl%3Dhttps%253A%252F%252Fdocusign.file.force.com%252Fsfc%252Fservlet.shepherd%252Fversion%252FrenditionDownload%253Frendition%253DORIGINAL_Jpeg%2526versionId%253D0688Z00000kkSjr%2526operationContext%253DCHATTER%2526contentId%253D05T8Z00002WJRwY HTTP/1.1Host: docusign.my.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-headerOnly.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networks.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkModeration.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkReputation.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: i1w6FXU2xBdUt239XSvWvw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-appFooter.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/setup.css HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398If-Modified-Since: Tue, 16 Apr 2024 17:43:29 GMT
Source: global traffic	HTTP traffic detected: GET /jslibrary/1699262264248/ui-sfdc-javascript-impl/SfdcCore.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /journey/messenger-plugins/journey.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jslibrary/1699262264248/sfdc/main.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /jslibrary/jslabels/1712949258000/en_US.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/config.json HTTP/1.1Host: api-cdn.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /journey/messenger-plugins/offersHelper.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289410418&PageStart=1713289396931&PrevBundleTime=1713289409054&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visualforce/session?url=https%3A%2F%2Fdocusign.lightning.force.com%2Fcontent%2Fsession%3Furl%3Dhttps%253A%252F%252Fdocusign.file.force.com%252Fsfc%252Fservlet.shepherd%252Fversion%252FrenditionDownload%253Frendition%253DORIGINAL_Jpeg%2526versionId%253D0688Z00000kkSjr%2526operationContext%253DCHATTER%2526contentId%253D05T8Z00002WJRwY HTTP/1.1Host: docusign.my.salesforce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=13Gt6PwYEe6h5rerpX03ZQ
Source: global traffic	HTTP traffic detected: GET /messenger/messenger.html HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/messenger-renderer.html HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/1710974750000/zoomin_app__Zoomin_FP/fp.min.js HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /file-asset/DSHoriz_B_support?v=1 HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /messenger/newrelic/newrelic-agent.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cxbus/cxbus.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/s.gif HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrintAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: XqukjGxMCFdiuIp3irDBGg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=12&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /file-asset/DSHoriz_B_support?v=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=11&aura.Label.getLabel=4 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /messenger/messagingMiddleware.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/defaultVendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/vendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/messengerrenderer.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cxbus/cxbus.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "db8d92de3c253178a1b250bfc17106e6"If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=14&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289414000&PageStart=1713289396931&PrevBundleTime=1713289411710&LastActivity=3581&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=13&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /img/s.gif HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/messagingMiddleware.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "020a1227b513dcb833482e5f322a09b1"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/defaultVendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/main.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289415128&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&dt=Get%20Support HTTP/1.1Host: api.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=4&ClientTime=1713289414714&PageStart=1713289404678&PrevBundleTime=1713289410675&LastActivity=4539&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/vendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /messenger/engage.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289415128&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&dt=Get%20Support HTTP/1.1Host: api.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/1712837356000/DSicon_favicon HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /nr-spa.1097a448-1.238.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/1712837356000/DSicon_favicon HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: hEBTa8xsvkDBPcNiMVbcMg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/en-us.json HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&ref2=elqNone&tzo=-60&ms=260&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=70&siteid=566810826&ms=260&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&ref2=elqNone&tzo=-60&ms=260&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /s/ HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6134&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=912&fe=4463&dc=1762&perf=%7B%22timing%22:%7B%22of%22:1713289411306,%22n%22:0,%22f%22:3,%22dn%22:78,%22dne%22:200,%22c%22:200,%22s%22:202,%22ce%22:737,%22rq%22:737,%22rp%22:912,%22rpe%22:913,%22di%22:2674,%22ds%22:2674,%22de%22:2674,%22dc%22:5373,%22l%22:5373,%22le%22:5375%7D,%22navigation%22:%7B%7D%7D HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289417907&PageStart=1713289396931&PrevBundleTime=1713289415112&LastActivity=7494&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/?language=en_US HTTP/1.1Host: support.docusign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6773&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289418381&PageStart=1713289404678&PrevBundleTime=1713289415782&LastActivity=1132&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/en-us.json HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.171328940
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289419943&PageStart=1713289404678&PrevBundleTime=1713289419444&LastActivity=2695&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289420072&PageStart=1713289404678&PrevBundleTime=1713289415782 HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=o-19DFBM-na1 HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominGAPage HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=falseIf-Modified-Since: Tue, 16 Apr 2024 17:43:26 GMT
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=falseIf-Modified-Since: Tue, 16 Apr 2024 17:43:32 GMT
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5bsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289420558&PageStart=1713289404678&PrevBundleTime=1713289421160&DeltaT=2186 HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713289420951 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "5f4f7675750c433cd6fac71ba12dba62"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=falseIf-Modified-Since: Tue, 16 Apr 2024 17:43:28 GMT
Source: global traffic	HTTP traffic detected: GET /genesys-bootstrap/genesys.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c6c4edc52df95ad8891299284ff3efdb"If-Modified-Since: Thu, 28 Mar 2024 03:04:03 GMT
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: HvhGiDVkXoHI3/M2gdAzJA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1Host: support.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/s/?language=en_USAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=falseIf-Modified-Since: Tue, 16 Apr 2024 17:43:44 GMT
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=1&aura.ApexAction.execute=5&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=2 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=1&ClientTime=1713289422530&PageStart=1713289420652&PrevBundleTime=0&LastActivity=1593&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2C
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289423195&PageStart=1713289396931&PrevBundleTime=1713289418976&LastActivity=12695&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=7&ClientTime=1713289423147&PageStart=1713289404678&PrevBundleTime=1713289421026&LastActivity=5881&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=2&other.CSP_AuraMethods.getAlertLocalized=1&ui-communities-components-aura-components-forceCommunity-richText.RichText.getParsedRichTextValue=7 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /messenger/messenger.html HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "1404b75da8e2bb3dc0247b949a748afe"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /messenger/messenger-renderer.html HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "5e33c9db52cede671fbd6ced2fa68603"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=70&siteid=566810826&ms=121&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&ref2=elqNone&tzo=-60&ms=121&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713289425049 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=2&ClientTime=1713289425091&PageStart=1713289420652&PrevBundleTime=1713289423665&LastActivity=2543&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=8&ClientTime=1713289425097&PageStart=1713289404678&PrevBundleTime=1713289424681&LastActivity=7856&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=5&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=4&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=3&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /track/?verbose=1&ip=1&_=1713289425785 HTTP/1.1Host: api-js.mixpanel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/newrelic/newrelic-agent.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "bef52ea8bdb8c39fa5bc9bc09918e7ef"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&ref2=elqNone&tzo=-60&ms=121&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=9&ClientTime=1713289426590&PageStart=1713289404678&PrevBundleTime=1713289426428&LastActivity=0&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=3&ClientTime=1713289426572&PageStart=1713289420652&PrevBundleTime=1713289426426&LastActivity=1309&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cxbus/cxbus.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "db8d92de3c253178a1b250bfc17106e6"If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=10&ClientTime=1713289427167&PageStart=1713289404678&PrevBundleTime=1713289427655&LastActivity=18&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=4&ClientTime=1713289427153&PageStart=1713289420652&PrevBundleTime=1713289427647&LastActivity=507&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289428109&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&dt=Home HTTP/1.1Host: api.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://support.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://support.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cxbus/cxbus.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "db8d92de3c253178a1b250bfc17106e6"If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMT
Source: global traffic	HTTP traffic detected: GET /messenger/messagingMiddleware.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "020a1227b513dcb833482e5f322a09b1"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/defaultVendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/vendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289427913&PageStart=1713289396931&PrevBundleTime=1713289424682&LastActivity=17499&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/messengerrenderer.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "813595c713c9bbfa2821b3169e3b8523"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289428109&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&dt=Home HTTP/1.1Host: api.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=8&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1Host: support.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /messenger/messagingMiddleware.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "020a1227b513dcb833482e5f322a09b1"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/defaultVendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/vendors.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/main.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "59acf392aa2c87d95d6ef613d1006f16"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/engage.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "71718bec692e211bc3ea5fc2d18f4284"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/en-us.json HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c7a28573ad8e4e0572990059d433fae2"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=4167&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=748&fe=3408&dc=732&perf=%7B%22timing%22:%7B%22of%22:1713289425677,%22n%22:0,%22f%22:1,%22dn%22:43,%22dne%22:43,%22c%22:43,%22s%22:45,%22ce%22:406,%22rq%22:406,%22rp%22:748,%22rpe%22:749,%22di%22:1480,%22ds%22:1480,%22de%22:1480,%22dc%22:4154,%22l%22:4155,%22le%22:4156%7D,%22navigation%22:%7B%7D%7D HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "5f4f7675750c433cd6fac71ba12dba62"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=5&ClientTime=1713289430689&PageStart=1713289420652&PrevBundleTime=1713289428248&LastActivity=1249&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/en-us.json HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c7a28573ad8e4e0572990059d433fae2"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
Source: global traffic	HTTP traffic detected: GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1Host: apps.usw2.pure.cloudConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "5f4f7675750c433cd6fac71ba12dba62"If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6168&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289432911&PageStart=1713289396931&PrevBundleTime=1713289428983&LastActivity=22497&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: VXBtykR4GW4SW3+zV1RIvQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=6&ClientTime=1713289435690&PageStart=1713289420652&PrevBundleTime=1713289431757&LastActivity=939&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=7&ClientTime=1713289436386&PageStart=1713289420652&PrevBundleTime=1713289436762&LastActivity=222&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=181&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /events.js HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1479294654.1713289439&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4cIf-None-Match: "10c460a7d0b096d5b5072c73672e31b6-ssl"
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=S6zhNPsl4WsNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: s.ml-attr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=l4jlamlMYih2iJ0l-GEF-MYg8Xer8uL5E5pVy8qc6Gk2kMiLgbW0XQ==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
Source: global traffic	HTTP traffic detected: GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "38b66efda4b7a2f4a37d3065793a65e2-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "bd342ef2d4a80457fa21dbc3be6ee406-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&t=Privacy%20Notice%20%7C%20DocuSign&tip=ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffdb0043010909090c0b0c180d0d1832211c213232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a161718191a25262728292a3435363738393a434445464748494a535455565758595a636465666768696a737475767778797a838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae1e2e3e4e5e6e7e8e9eaf1f2f3f4f5f6f7f8f9faffc4001f0100030101010101010101010000000000000102030405060708090a0bffc400b51100020102040403040705040400010277000102031104052131061241510761711322328108144291a1b1c109233352f0156272d10a162434e125f11718191a262728292a35363738393a434445464748494a535455565758595a636465666768696a737475767778797a82838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae2e3e4e5e6e7e8e9eaf2f3f4f5f6f7f8f9faffda000c03010002110311003f00f7fa28a2803fffd9574b2083e64455af4eb8953600e21e5551b53934&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=181&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=b1zfexNfMztluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1Host: attr.ml-api.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=l4jlamlMYih2iJ0l-GEF-MYg8Xer8uL5E5pVy8qc6Gk2kMiLgbW0XQ==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "ab355fa9d59b4c79fe46574dec4d49e6-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "4fa4dcc133fddfc011cfda6e905ecf89-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=12BP4E HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /conductor HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://chat.docusign.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "d320e83a1b98d0793815b4e22b96825b"If-Modified-Since: Thu, 04 Apr 2024 20:13:54 GMT
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289441680&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&t=Privacy%20Notice%20%7C%20DocuSign&tip=ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffdb0043010909090c0b0c180d0d1832211c213232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a161718191a25262728292a3435363738393a434445464748494a535455565758595a636465666768696a737475767778797a838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae1e2e3e4e5e6e7e8e9eaf1f2f3f4f5f6f7f8f9faffc4001f0100030101010101010101010000000000000102030405060708090a0bffc400b51100020102040403040705040400010277000102031104052131061241510761711322328108144291a1b1c109233352f0156272d10a162434e125f11718191a262728292a35363738393a434445464748494a535455565758595a636465666768696a737475767778797a82838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae2e3e4e5e6e7e8e9eaf2f3f4f5f6f7f8f9faffda000c03010002110311003f00f7fa28a2803fffd9574b2083e64455af4eb8953600e21e5551b53934&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p6
Source: global traffic	HTTP traffic detected: GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1Host: attr.ml-api.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289442213&PageStart=1713289396931&PrevBundleTime=1713289442773&IsNewSession=true HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=14f18f21-5e5a-4d14-815f-84932f0d5f20&sessionStarted=1713289442.911&campaignRefreshToken=15fd7d8d-e8b8-432e-b6de-28db75075323&hideController=false&pageLoadStartTime=1713289441539&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289441539 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://chat.docusign.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289442710&PageStart=1713289396931&PrevBundleTime=1713289443290&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289443207&PageStart=1713289396931&PrevBundleTime=1713289443784&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289443715&PageStart=1713289396931&PrevBundleTime=1713289444328&IsNewSession=true&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289444208&PageStart=1713289396931&PrevBundleTime=1713289444791&IsNewSession=true&DeltaT=33794&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identify HTTP/1.1Host: event.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=1&ClientTime=1713289444802&PageStart=1713289442223&PrevBundleTime=0&LastActivity=2366&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 0dfH+CRUWSxQOisj5ESUzA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: R8rfybuC+pEIJsoCXcTbig==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/5njZgbUWn7OkNcxpuSgmD2/e3d0d77f6b7db47c01045121e5a13573/illo-agreement-trap.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1UD43hoOxdWkZZPcTG64KN/aebf586f98a5dff7c5132401db92ea13/Woman-working-remote-on-phone.png?fm=webp&q=50 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3DK107HA72YisXutlRAbk3/fe56a48aa0ae33bcaccb287e47715374/productUI-docusign-navigator.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3P8Il3939FVKkbMzMvQNTL/23a1dd0f90a8001ff30959f33336b5f1/productUI-docusign-maestro.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7lEyMAosQLMPNV3ciF9dmK/7cc6df4946379ff407d55727a5bc2f46/productUI-docusign-ai.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1tfVMQlUQ5vXChMqZ4Medl/cc629beb987d310b19d2657671ec6daf/productUI-docusign-clm.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7LrypGfM1BdddpRfwGZrze/3a9135c9a49064c815ad7289b052772a/woman-smiling-and-presenting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7hPNoVpK42WsofxMBKVelX/99d08eabfa85820f15fcf7c6cc7ed73c/two-people-meeting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=2&ClientTime=1713289446378&PageStart=1713289442223&PrevBundleTime=1713289445873&LastActivity=400&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: sBB+mTT3OxKfiYj5vmMhPw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/Dc0SziTJ1rmxyMSHdHWNP/c0da4fc6ab91424027973b8f9a557a81/woman-presenting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7h7Qts9Xjqh2gfBMqrxMBn/ee86b2d2bcb3bf0d93a8f3d2e6037e81/woman-holding-a-pen.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/2EtPn9bUkWstdeKU15nFXY/a121cb9bd5d40d3e539abf9bcb58e4da/man-typing-on-laptop.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7gMtFWydiMHrue6DhrLJQU/483100ca17c7d6f717bc2453fbfbeb0e/pictogram-capabilities__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1lBNWvcCorq4OkqECvYFZ2/68e3295cdee439f27e3bdbf90420ffdf/woman-smiling-holding-laptop__1_.png?fm=webp&q=50 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3LWVrC9oDrGbQmlAS6i7uN/9670d83c92fb7522216623add9fb430d/illo-docusignIAM.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4 HTTP/1.1Host: videos.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.docusign.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/5njZgbUWn7OkNcxpuSgmD2/e3d0d77f6b7db47c01045121e5a13573/illo-agreement-trap.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1UD43hoOxdWkZZPcTG64KN/aebf586f98a5dff7c5132401db92ea13/Woman-working-remote-on-phone.png?fm=webp&q=50 HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3DK107HA72YisXutlRAbk3/fe56a48aa0ae33bcaccb287e47715374/productUI-docusign-navigator.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3P8Il3939FVKkbMzMvQNTL/23a1dd0f90a8001ff30959f33336b5f1/productUI-docusign-maestro.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&ref2=elqNone&tzo=-60&ms=589&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
Source: global traffic	HTTP traffic detected: GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacymain-content&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 47616-16.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Bfz//+xnXWIIpo++OVpdJw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7lEyMAosQLMPNV3ciF9dmK/7cc6df4946379ff407d55727a5bc2f46/productUI-docusign-ai.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7LrypGfM1BdddpRfwGZrze/3a9135c9a49064c815ad7289b052772a/woman-smiling-and-presenting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7hPNoVpK42WsofxMBKVelX/99d08eabfa85820f15fcf7c6cc7ed73c/two-people-meeting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1tfVMQlUQ5vXChMqZ4Medl/cc629beb987d310b19d2657671ec6daf/productUI-docusign-clm.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/Dc0SziTJ1rmxyMSHdHWNP/c0da4fc6ab91424027973b8f9a557a81/woman-presenting.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7h7Qts9Xjqh2gfBMqrxMBn/ee86b2d2bcb3bf0d93a8f3d2e6037e81/woman-holding-a-pen.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events.js HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=vzXteGtxqXZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: s.ml-attr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453050&PageStart=1713289442223&PrevBundleTime=1713289447454&LastActivity=7078&ContentEncoding=gzip HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&ref2=elqNone&tzo=-60&ms=589&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1Host: track.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A44%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289453.2.0.0; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /country HTTP/1.1Host: geo.docusign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A44%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289453.2.0.0; _ga=GA1.2.426113818.1713289394
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4cIf-None-Match: "10c460a7d0b096d5b5072c73672e31b6-ssl"
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1596089733.1713289453&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmXhua7vb6SinSkvNx5UeKIgAUXTW5HprnUXPgmObKtVGn5cyCpLmazLXys
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/7gMtFWydiMHrue6DhrLJQU/483100ca17c7d6f717bc2453fbfbeb0e/pictogram-capabilities__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/2EtPn9bUkWstdeKU15nFXY/a121cb9bd5d40d3e539abf9bcb58e4da/man-typing-on-laptop.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/3LWVrC9oDrGbQmlAS6i7uN/9670d83c92fb7522216623add9fb430d/illo-docusignIAM.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rec/integrations?OrgId=12BP4E HTTP/1.1Host: rs.fullstory.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=Sup5EmQI1r9DUbzCVhYpRimQsvZXh5lizsqel2zeJEH2Vyl6mkiByw==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0jnmtsdzg6p5/1lBNWvcCorq4OkqECvYFZ2/68e3295cdee439f27e3bdbf90420ffdf/woman-smiling-holding-laptop__1_.png?fm=webp&q=50 HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&t=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign&tip=ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffdb0043010909090c0b0c180d0d1832211c213232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a161718191a25262728292a3435363738393a434445464748494a535455565758595a636465666768696a737475767778797a838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae1e2e3e4e5e6e7e8e9eaf1f2f3f4f5f6f7f8f9faffc4001f0100030101010101010101010000000000000102030405060708090a0bffc400b51100020102040403040705040400010277000102031104052131061241510761711322328108144291a1b1c109233352f0156272d10a162434e125f11718191a262728292a35363738393a434445464748494a535455565758595a636465666768696a737475767778797a82838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae2e3e4e5e6e7e8e9eaf2f3f4f5f6f7f8f9faffda000c03010002110311003f00f7fa28a2803fffd9574b2083e64455af4eb8953600e21e5551b53934&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.docusign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "bd342ef2d4a80457fa21dbc3be6ee406-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1Host: chat.docusign.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "38b66efda4b7a2f4a37d3065793a65e2-ssl"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
Source: global traffic	HTTP traffic detected: GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1Host: attr.ml-api.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.docusign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=3BHbUbG7UQZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
Source: global traffic	HTTP traffic detected: GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453654&PageStart=1713289442223&PrevBundleTime=1713289447454&DeltaT=590 HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&page_title=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289454\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /rec/page HTTP/1.1Host: rs.fullstory.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef

Source: chromecache_409.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Hj:function(){e=zb()},od:function(){d()}}};var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Sg:d,Qg:e,Rg:f,Ch:g,Dh:h,we:m,zb:b},p=D.YT,q=function(){yC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=G.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(BC(w,"iframe_api")\|\|BC(w,"player_api"))return b}for(var x=G.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!sC&&zC(x[B],n.we))return Lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_655.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Ez(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!kI(q, equals www.facebook.com (Facebook)
Source: chromecache_550.2.dr, chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: na3.docusign.net

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713289358052&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_503.2.dr	String found in binary or memory: http://blog.55minutes.com/2012/04/iphone-text-resizing/
Source: chromecache_441.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_441.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_441.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_441.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_439.2.dr, chromecache_610.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_441.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_410.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_410.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_410.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_410.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_410.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_410.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_441.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_407.2.dr, chromecache_504.2.dr	String found in binary or memory: http://www.mysite.com/myimage.jpg
Source: chromecache_508.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_504.2.dr	String found in binary or memory: http://www.recaptcha.net
Source: chromecache_504.2.dr	String found in binary or memory: http://www.salesforce.com/ui/accent/
Source: chromecache_447.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_630.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_431.2.dr	String found in binary or memory: https://api-cdn.usw2.pure.cloud/uploads/v1/publicassets/images/e414a0f1-5e69-4229-b949-0947db2b6a10/
Source: chromecache_460.2.dr	String found in binary or memory: https://api-js.mixpanel.com
Source: chromecache_557.2.dr, chromecache_431.2.dr	String found in binary or memory: https://api.usw2.pure.cloud
Source: chromecache_336.2.dr	String found in binary or memory: https://app.optimizely.com/js/innie.js
Source: chromecache_600.2.dr, chromecache_592.2.dr	String found in binary or memory: https://apps.inindca.com/cxbus/cxbus.min.js
Source: chromecache_492.2.dr	String found in binary or memory: https://apps.usw2.pure.cloud/genesys-bootstrap/genesys.min.js
Source: chromecache_550.2.dr, chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_460.2.dr	String found in binary or memory: https://cdn.mxpnl.com
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	String found in binary or memory: https://conversation.api.drift.com
Source: chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	String found in binary or memory: https://customer.api.drift.com
Source: chromecache_441.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_385.2.dr, chromecache_411.2.dr	String found in binary or memory: https://ecom.docusign.com/plans-and-pricing/esignature
Source: chromecache_385.2.dr, chromecache_411.2.dr	String found in binary or memory: https://ecom.docusign.com/plans-and-pricing/real-estate
Source: chromecache_610.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_508.2.dr	String found in binary or memory: https://fingerprintjs.com)
Source: chromecache_441.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_439.2.dr, chromecache_610.2.dr	String found in binary or memory: https://github.com/ReactTooltip/react-tooltip
Source: chromecache_441.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_508.2.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js)
Source: chromecache_655.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_655.2.dr	String found in binary or memory: https://google.com
Source: chromecache_655.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_504.2.dr	String found in binary or memory: https://help.salesforce.com/setSFXCookie?value
Source: chromecache_411.2.dr	String found in binary or memory: https://images.ctfassets.net/0jnmtsdzg6p5/4GSPcvcpIZpsXsZ7F0EXTW/48109b007c69fc72233c35234157ad0d/OG
Source: chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	String found in binary or memory: https://js.driftt.com
Source: chromecache_617.2.dr	String found in binary or memory: https://js.driftt.com/conductor
Source: chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	String found in binary or memory: https://metrics.api.drift.com
Source: chromecache_460.2.dr	String found in binary or memory: https://mixpanel.com
Source: chromecache_655.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_550.2.dr, chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_418.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_385.2.dr	String found in binary or memory: https://pref.docusign.com/preference-center
Source: chromecache_385.2.dr	String found in binary or memory: https://privacyportal.my.onetrust.com/webform/3506ce9e-320f-4c4a-adbb-5e48afbd595d/f11f42bc-d74a-420
Source: chromecache_342.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_418.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: https://s.adroll.com/j/roundtrip.js
Source: chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_630.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_499.2.dr	String found in binary or memory: https://support.docusign.com
Source: chromecache_385.2.dr	String found in binary or memory: https://support.docusign.com/en/articles/How-do-I-cancel-or-downgrade-my-account
Source: chromecache_385.2.dr	String found in binary or memory: https://support.docusign.com/en/guides/ndse-user-guide-manage-your-identity
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/?language=es&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=de&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=en_US&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=fr&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=it&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=ja&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=nl_NL&langSet=1&transfer=dc
Source: chromecache_617.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=pt_BR&langSet=1&transfer=dc
Source: chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_630.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	String found in binary or memory: https://targeting.api.drift.com
Source: chromecache_550.2.dr, chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_411.2.dr	String found in binary or memory: https://trial.docusign.com
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/agreement-trap
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/ai/innovation-principles
Source: chromecache_385.2.dr, chromecache_450.2.dr, chromecache_346.2.dr	String found in binary or memory: https://www.docusign.com/company/cookie-policy
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/company/privacy-policy
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/de-de/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/de-de/unternehmen/datenschutz
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-au/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/en-au/privacy
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-ca/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/en-ca/privacy
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-gb/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/en-gb/privacy
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-in/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-my/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-ph/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-sg/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/en-tw/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/es-es/empresa/politica-de-privacidad
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/es-es/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/es-mx/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/es-mx/privacidad
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/fr-ca/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/fr-fr/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/fr-fr/politique-de-confidentialite
Source: chromecache_336.2.dr	String found in binary or memory: https://www.docusign.com/free-account
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/it-it/intelligent-agreement-management
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/ja-jp/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/ja-jp/privacy
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/legal/law-enforcement
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/legal/law-enforcement.
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/nl-nl/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/nl-nl/privacy
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#1
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#11
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#3
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#5
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#8
Source: chromecache_411.2.dr	String found in binary or memory: https://www.docusign.com/pt-br/intelligent-agreement-management
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/pt-br/privacidade
Source: chromecache_336.2.dr	String found in binary or memory: https://www.docusign.com/trial/free/brand1
Source: chromecache_336.2.dr	String found in binary or memory: https://www.docusign.com/trial/free/signup1
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/trust/privacy/bcrc-csb-code
Source: chromecache_385.2.dr	String found in binary or memory: https://www.docusign.com/trust/privacy/bcrp-privacy-code
Source: chromecache_446.2.dr, chromecache_342.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_630.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_630.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_630.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_655.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_630.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_352.2.dr, chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_655.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_550.2.dr, chromecache_685.2.dr, chromecache_342.2.dr, chromecache_528.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_446.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id
Source: chromecache_630.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_499.2.dr, chromecache_385.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_385.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NXX2M47
Source: chromecache_388.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_352.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_446.2.dr	String found in binary or memory: https://www.lightningdesignsystem.com/resources/icons/
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_685.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_390.2.dr	String found in binary or memory: https://yarnpkg.com/en/docs/selective-version-resolutions

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50579
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50584
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50593
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50595
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: chromecache_647.2.dr

Binary or memory string: .VbPg

Source: classification engine

Classification label: clean2.win@27/624@234/76

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: chromecache_504.2.dr	Binary or memory string: SelectFilterElement.prototype.filter=function(){var a=document.getElementById(this.controllerName),b=document.getElementById(this.targetName),d=document.getElementById(this.getSearchElementId());this.useJsSearch&&(d&&0!=d.value.length)&&(d.value="");b.options.length=0;SelectFilterElement.prototype.NONE_LABEL&&(b.options[0]=new Option(SelectFilterElement.prototype.NONE_LABEL,"000000000000000"));var c=0,f=0,e=this.allOptions[a.value];if(e){var g=this.existingName;g&&this.initSelectedOptionsFromUi();
Source: chromecache_504.2.dr	Binary or memory string: SelectFilterElement.prototype.init=function(){this.filter();if(this.existingName){var a=document.getElementById(this.existingName);a&&(a.selectFilterEl=this,a.onchange=function(){this.selectFilterEl.initSelectedOptionsFromUi()})}if(this.controllerOption&&this.controllerName){var b=document.getElementById(this.controllerName);if(null!=b.options&&void 0!=b.options)for(a=0;a<b.options.length;a++)b.options[a].value==this.controllerOption&&(b.options[a].selected=!0)}if(this.targetOption){b=document.getElementById(this.targetName);
Source: chromecache_504.2.dr	Binary or memory string: SelectFilterElement.prototype.initSelectedOptionsFromUi=function(){if(this.existingName){this.selectedOptions=[];var a=document.getElementById(this.existingName);if(a)for(var b=0;b<a.options.length;b++)0<a.options[b].value.length&&(this.selectedOptions[a.options[b].value]=!0)}};

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://s.company-target.com/s/sync?exc=lr	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
http://dbj.org/dbj/?p=286	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s.ml-attr.com.pxlsrv.net	68.67.153.60	true	false	unknown
segments.company-target.com	3.161.193.119	true	false	unknown
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	34.234.212.207	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
platform.twitter.map.fastly.net	151.101.12.157	true	false	unknown
stats.g.doubleclick.net	64.233.177.154	true	false	high
t.co	104.244.42.197	true	false	high
www.google.com	64.233.176.106	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
logx.optimizely.com	34.111.140.246	true	false	high
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
s.twitter.com	104.244.42.67	true	false	high
api-js.mixpanel.com	107.178.240.159	true	false	high
edge.fullstory.com	35.201.112.186	true	false	high
videos.ctfassets.net	18.165.83.72	true	false	high
arya-1323461286.us-west-2.elb.amazonaws.com	35.163.210.43	true	false	high
docusign.netlifyglobalcdn.com	54.156.13.12	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
googleads.g.doubleclick.net	142.251.15.157	true	false	high
cdn4.mxpnl.com	35.186.235.23	true	false	high
api.mixpanel.com	35.190.25.25	true	false	high
na210-ia5.ia5.r.force.com	13.110.252.95	true	false	high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.239.87.50	true	false	high
nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com	52.32.27.207	true	false	high
cdn.cookielaw.org	104.19.178.52	true	false	high
d3orhvfyxudxxq.cloudfront.net	18.165.83.28	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	34.193.113.164	true	false	high
api.usw2.pure.cloud	3.161.150.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
dl7g9llrghqi1.cloudfront.net	18.160.18.33	true	false	high
na210-ia5.ia5.r.my.salesforce.com	13.110.40.235	true	false	high
scontent.xx.fbcdn.net	31.13.65.7	true	false	high
tag.demandbase.com	18.160.10.89	true	false	high
na210-ia5.ia5.r.salesforce.com	13.110.65.234	true	false	high
tag-logger.demandbase.com	18.245.124.24	true	false	high
d2qlomkzr3gd97.cloudfront.net	18.160.10.26	true	false	high
p01k.hs.eloqua.com	192.29.14.118	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
ia4.edge2.salesforce.com	13.109.180.8	true	false	high
rs.fullstory.com	35.186.194.58	true	false	high
api-cdn.usw2.pure.cloud	3.161.150.36	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	high
d1nie5ipy0d64w.cloudfront.net	13.32.151.55	true	false	high
analytics.google.com	142.250.105.102	true	false	high
api.company-target.com	3.161.150.40	true	false	unknown
tags.srv.stackadapt.com	52.200.95.225	true	false	high
geo-1040374038.us-west-2.elb.amazonaws.com	44.234.203.160	true	false	high
ib.anycast.adnxs.com	68.67.160.186	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
metrics.api.drift.com	unknown	unknown	false	high
track.docusign.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
docusign.lightning.force.com	unknown	unknown	false	high
js.driftt.com	unknown	unknown	false	high
bootstrap.driftapi.com	unknown	unknown	false	unknown
docusign.my.salesforce.com	unknown	unknown	false	high
conversation.api.drift.com	unknown	unknown	false	high
support.docusign.com	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	unknown
geo.docusign.com	unknown	unknown	false	high
chat.docusign.net	unknown	unknown	false	high
img.en25.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
www.docusign.com	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	unknown
cdn.optimizely.com	unknown	unknown	false	high
na3.docusign.net	unknown	unknown	false	high
a.docusign.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	unknown
attr.ml-api.io	unknown	unknown	false	unknown
docusign.file.force.com	unknown	unknown	false	high
customer.api.drift.com	unknown	unknown	false	high
event.api.drift.com	unknown	unknown	false	high
47616-16.chat.api.drift.com	unknown	unknown	false	high
apps.usw2.pure.cloud	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	high
log.api.drift.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
s.ml-attr.com	unknown	unknown	false	unknown
targeting.api.drift.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
docucdn-a.akamaihd.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289418377&PageStart=1713289404678&PrevBundleTime=1713289415782&SkipResponseBody=true	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289403062&PageStart=1713289396931&PrevBundleTime=1713289401231&IsNewSession=true&SkipResponseBody=true	false	high
https://tags.srv.stackadapt.com/saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM	false	high
https://geo.docusign.com/country	false	high
https://images.ctfassets.net/0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png	false	high
https://support.docusign.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true	false	high
https://js.driftt.com/core/assets/js/28.caa75eae.chunk.js	false	high
about:blank	false	low
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU	false	unknown
https://js.driftt.com/core/assets/js/runtime~main.58de437c.js	false	high
https://api.usw2.pure.cloud/api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/beacons?data=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%3D&type=pageview	false	unknown
https://a.docusign.com/f	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8	false	high
https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom4.css	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289417907&PageStart=1713289396931&PrevBundleTime=1713289415112&LastActivity=7494&IsNewSession=true&ContentEncoding=gzip	false	high
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=2&ClientTime=1713289425084&PageStart=1713289420652&PrevBundleTime=1713289423665&IsNewSession=true&SkipResponseBody=true	false	high
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1596089733.1713289453&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393	false	high
https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289454531	false	high
https://support.docusign.com/s/sfsites/aura?r=4&aura.NavigationMenu.getCommunityNavigationMenu=1	false	high
https://www.facebook.com/tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=GET	false	high
https://support.docusign.com/s/sfsites/aura?r=11&aura.Label.getLabel=4	false	high
https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css	false	high
https://support.docusign.com/en/contactSupport	false	high
https://47616-16.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0	false	high
https://rs.fullstory.com/rec/integrations?OrgId=o-19DFBM-na1	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true	false	high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-1TZ7S9D6BQ&cid=426113818.1713289394&gtm=45je44f0v879027428z8856130670za200&aip=1&dma=0&gcs=G111&gcd=13v3v3v3t5&npa=0	false	high
https://edge.fullstory.com/datalayer/v4/latest.js	false	high
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign	false	unknown
https://images.ctfassets.net/0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg	false	high
https://support.docusign.com/s/sfsites/c/resource/1702515884138/DSC_GenesysChatbot	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289404212&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289404209&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true	false	high
https://api.usw2.pure.cloud/api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289415128&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&dt=Get%20Support	false	unknown
https://www.google.com/js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js	false	high
https://apps.usw2.pure.cloud/messenger/messenger.html	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453050&PageStart=1713289442223&PrevBundleTime=1713289447454&LastActivity=7078&ContentEncoding=gzip	false	high
https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom16.css	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289404212&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true	false	high
https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289406967&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true	false	high
https://chat.docusign.net/_next/static/chunks/webpack-a0deeec5c85c92d3.js	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=4&ClientTime=1713289414714&PageStart=1713289404678&PrevBundleTime=1713289410675&LastActivity=4539&ContentEncoding=gzip	false	high
https://images.ctfassets.net/0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg	false	high
https://docusign.file.force.com/sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId=	false	high
https://bam.nr-data.net/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6134&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=912&fe=4463&dc=1762&perf=%7B%22timing%22:%7B%22of%22:1713289411306,%22n%22:0,%22f%22:3,%22dn%22:78,%22dne%22:200,%22c%22:200,%22s%22:202,%22ce%22:737,%22rq%22:737,%22rp%22:912,%22rpe%22:913,%22di%22:2674,%22ds%22:2674,%22de%22:2674,%22dc%22:5373,%22l%22:5373,%22le%22:5375%7D,%22navigation%22:%7B%7D%7D	false	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=3&ClientTime=1713289426565&PageStart=1713289420652&PrevBundleTime=1713289426426&IsNewSession=true&SkipResponseBody=true	false	high
https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-appFooter.css	false	high
https://s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID	false	unknown
https://47616-16.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0	false	high
https://docusign.file.force.com/sfc/servlet.shepherd/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkSjr&operationContext=CHATTER&contentId=05T8Z00002WJRwY	false	high
https://tags.srv.stackadapt.com/events.js	false	high
https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-headerOnly.css	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=2&ClientTime=1713289408022&PageStart=1713289404678&PrevBundleTime=1713289408042&LastActivity=3153&ContentEncoding=gzip	false	high
https://support.docusign.com/s/sfsites/aura?r=14&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1	false	high
https://apps.usw2.pure.cloud/messenger/main.min.js	false	unknown
https://images.ctfassets.net/0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289402940&PageStart=1713289396931&PrevBundleTime=1713289401231&LastActivity=2023&IsNewSession=true&ContentEncoding=gzip	false	high
https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom3.css	false	high
https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkReputation.css	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=2&ClientTime=1713289459367&PageStart=1713289454254&PrevBundleTime=1713289457993&LastActivity=3294&ContentEncoding=gzip	false	high
https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=1&ClientTime=1713289422530&PageStart=1713289420652&PrevBundleTime=0&LastActivity=1593&IsNewSession=true&ContentEncoding=gzip	false	high
https://support.docusign.com/static/111213/js/perf/stub.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ampcid.google.com/v1/publisher:getClientId	chromecache_630.2.dr	false		high
https://www.docusign.com/en-ca/intelligent-agreement-management	chromecache_411.2.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_342.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_410.2.dr	false	URL Reputation: safe	unknown
https://metrics.api.drift.com	chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	false		high
https://www.docusign.com/agreement-trap	chromecache_411.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_388.2.dr, chromecache_418.2.dr	false		high
https://yarnpkg.com/en/docs/selective-version-resolutions	chromecache_390.2.dr	false		high
http://dbj.org/dbj/?p=286	chromecache_441.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_418.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_410.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_410.2.dr	false	URL Reputation: safe	unknown
https://www.docusign.com/privacy/#3	chromecache_385.2.dr	false		high
https://www.docusign.com/privacy/#1	chromecache_385.2.dr	false		high
https://www.docusign.com/privacy/#5	chromecache_385.2.dr	false		high
https://ecom.docusign.com/plans-and-pricing/real-estate	chromecache_385.2.dr, chromecache_411.2.dr	false		high
https://www.docusign.com/privacy/#8	chromecache_385.2.dr	false		high
https://support.docusign.com/s/contactSupport?language=en_US&transfer=dc	chromecache_617.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_508.2.dr	false		high
http://blog.55minutes.com/2012/04/iphone-text-resizing/	chromecache_503.2.dr	false		unknown
https://customer.api.drift.com	chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	false		high
https://www.docusign.com/free-account	chromecache_336.2.dr	false		high
http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/	chromecache_441.2.dr	false		high
https://api-cdn.usw2.pure.cloud/uploads/v1/publicassets/images/e414a0f1-5e69-4229-b949-0947db2b6a10/	chromecache_431.2.dr	false		unknown
https://github.com/ReactTooltip/react-tooltip	chromecache_439.2.dr, chromecache_610.2.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_410.2.dr	false		high
https://privacyportal.my.onetrust.com/webform/3506ce9e-320f-4c4a-adbb-5e48afbd595d/f11f42bc-d74a-420	chromecache_385.2.dr	false		high
https://cloud.google.com/contact	chromecache_388.2.dr, chromecache_418.2.dr	false		high
https://conversation.api.drift.com	chromecache_498.2.dr, chromecache_511.2.dr, chromecache_425.2.dr, chromecache_547.2.dr, chromecache_601.2.dr, chromecache_549.2.dr	false		high
https://www.docusign.com/ai/innovation-principles	chromecache_385.2.dr	false		high
https://www.docusign.com/legal/law-enforcement.	chromecache_385.2.dr	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_410.2.dr	false	URL Reputation: safe	unknown
http://www.salesforce.com/ui/accent/	chromecache_504.2.dr	false		high
https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials	chromecache_441.2.dr	false		high
https://www.docusign.com/company/privacy-policy	chromecache_385.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.215.104	unknown	United States	15169	GOOGLEUS	false
172.217.215.103	unknown	United States	15169	GOOGLEUS	false
3.163.115.26	unknown	United States	16509	AMAZON-02US	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
50.16.7.188	unknown	United States	14618	AMAZON-AESUS	false
13.109.180.8	ia4.edge2.salesforce.com	United States	14340	SALESFORCEUS	false
13.109.180.6	unknown	United States	14340	SALESFORCEUS	false
3.161.150.28	api.usw2.pure.cloud	United States	16509	AMAZON-02US	false
13.32.151.55	d1nie5ipy0d64w.cloudfront.net	United States	16509	AMAZON-02US	false
35.84.94.41	unknown	United States	237	MERIT-AS-14US	false
52.200.95.225	tags.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
18.165.83.89	unknown	United States	3	MIT-GATEWAYSUS	false
3.161.150.40	api.company-target.com	United States	16509	AMAZON-02US	false
3.161.193.119	segments.company-target.com	United States	16509	AMAZON-02US	false
18.160.10.26	d2qlomkzr3gd97.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
108.138.106.48	unknown	United States	16509	AMAZON-02US	false
3.161.150.36	api-cdn.usw2.pure.cloud	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.160.18.33	dl7g9llrghqi1.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.110.65.234	na210-ia5.ia5.r.salesforce.com	United States	14340	SALESFORCEUS	false
142.251.15.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.24.171.147	unknown	United States	16509	AMAZON-02US	false
18.160.10.75	unknown	United States	3	MIT-GATEWAYSUS	false
13.110.40.235	na210-ia5.ia5.r.my.salesforce.com	United States	14340	SALESFORCEUS	false
64.233.177.157	unknown	United States	15169	GOOGLEUS	false
64.233.177.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
3.225.117.71	unknown	United States	14618	AMAZON-AESUS	false
35.186.235.23	cdn4.mxpnl.com	United States	15169	GOOGLEUS	false
18.160.10.89	tag.demandbase.com	United States	3	MIT-GATEWAYSUS	false
104.19.178.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
104.244.42.197	t.co	United States	13414	TWITTERUS	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
31.13.65.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
35.190.25.25	api.mixpanel.com	United States	15169	GOOGLEUS	false
34.239.87.50	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.230.31.105	unknown	United States	16509	AMAZON-02US	false
3.94.218.138	unknown	United States	14618	AMAZON-AESUS	false
64.233.176.106	www.google.com	United States	15169	GOOGLEUS	false
18.165.83.28	d3orhvfyxudxxq.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.156.13.12	docusign.netlifyglobalcdn.com	United States	14618	AMAZON-AESUS	false
3.161.150.72	unknown	United States	16509	AMAZON-02US	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
13.32.151.16	unknown	United States	16509	AMAZON-02US	false
68.67.153.60	s.ml-attr.com.pxlsrv.net	United States	29990	ASN-APPNEXUS	false
68.67.160.186	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
192.29.14.118	p01k.hs.eloqua.com	United States	31898	ORACLE-BMC-31898US	false
18.245.124.24	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
13.110.252.95	na210-ia5.ia5.r.force.com	United States	14340	SALESFORCEUS	false
172.217.215.138	unknown	United States	15169	GOOGLEUS	false
104.244.42.133	unknown	United States	13414	TWITTERUS	false
44.234.203.160	geo-1040374038.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
151.101.12.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
18.165.83.72	videos.ctfassets.net	United States	3	MIT-GATEWAYSUS	false
130.211.34.183	unknown	United States	15169	GOOGLEUS	false
31.13.65.36	unknown	Ireland	32934	FACEBOOKUS	false
35.163.210.43	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
3.212.91.35	unknown	United States	14618	AMAZON-AESUS	false
107.178.240.159	api-js.mixpanel.com	United States	15169	GOOGLEUS	false
34.197.111.80	unknown	United States	14618	AMAZON-AESUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
54.186.38.246	unknown	United States	16509	AMAZON-02US	false
52.32.27.207	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
34.193.113.164	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.111.140.246	logx.optimizely.com	United States	15169	GOOGLEUS	false
142.250.105.105	unknown	United States	15169	GOOGLEUS	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
34.234.212.207	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426950
Start date and time:	2024-04-16 19:42:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@27/624@234/76
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.docusign.com/company/privacy-policy Browse: https://www.docusign.com/support Browse: https://support.docusign.com/s/ Browse: https://www.docusign.com/privacy#main-content Browse: https://www.docusign.com/intelligent-agreement-management

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.138, 64.233.185.102, 64.233.185.100, 64.233.185.113, 64.233.185.139, 64.233.185.101, 172.253.124.94, 142.250.9.84, 34.104.35.123, 64.207.218.235, 23.50.120.145, 23.50.120.171, 64.207.218.237, 151.101.2.133, 151.101.66.133, 151.101.130.133, 151.101.194.133, 13.85.23.86, 23.47.204.58, 184.25.164.153, 173.194.219.97, 192.229.211.108, 23.47.204.46, 23.47.204.82, 23.47.204.52, 23.47.204.44, 23.47.204.70, 23.47.204.73, 23.2.81.247, 20.242.39.171, 96.7.224.9, 96.7.224.73, 64.233.176.102, 64.233.176.113, 64.233.176.100, 64.233.176.139, 64.233.176.138, 64.233.176.101, 204.79.197.237, 13.107.21.237, 20.150.84.228, 74.125.136.95, 142.250.105.95, 142.251.15.95, 64.233.185.95, 64.233.176.95, 64.233.177.95, 108.177.122.95, 142.250.9.95, 74.125.138.95, 173.194.219.95, 172.217.215.95, 172.253.124.95, 13.107.42.14, 142.250.105.139, 142.250.105.102, 142.250.105.100, 142.250.105.138, 142.250.105.113, 142.250.105.101, 69.173.151.100, 173.194.219.94, 13.85.23.206, 142.250.105.9
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, na3-da.docusign.net.akadns.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, blob.dub21prdstr08a.store.core.windows.net, wildcard.en25.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, e5048.dsca.akamaiedge.net, a1737.b.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, www.gstatic.com, na3.docusign.net.akadns.net, e5763.x.akamaiedge.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, www-alv.google-analytics.com, ctldl.windowsupdate.com, optanon.blob.core.windows.net, d.sni.global.fastly.net, docucdn-a.akamaihd.net.edgesuite.net, od.linkedin.edgesuite.net, wu-b
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 16:42:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9752210966841366
Encrypted:	false
SSDEEP:	48:8P7dtT1Z8HKidAKZdA19ehwiZUklqehjy+3:8PDv1oy
MD5:	1E1E7A4F0DF56019F30DEB71BE7972B6
SHA1:	F390EF727EE58111013074B73F759BFA0BDEEDBB
SHA-256:	9741BDBEEB26DA22735DFF7DE2D25708FE4F202417D0AA5032A2C29CA06A42F3
SHA-512:	9B3380E11F99E80A59881A1A6263F078F4ECE46BF19C41A7B1EC907D93758AFF67148FC020F5BA5E6383D729C66C277284E723342EE7A7860766905034BA6028
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l.%...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X\............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 16:42:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9935312587314966
Encrypted:	false
SSDEEP:	48:8jdtT1Z8HKidAKZdA1weh/iZUkAQkqehYy+2:8Lvv9Qpy
MD5:	6CC9DC83AD6ED9DE028C1F74C74D3399
SHA1:	CF6B5540E650173779CBAE4982555F9FFB4F3448
SHA-256:	B965CD330EF963E01CB0ECD2FAD2FF5E1372731C6E0BCE69A5E9ABC3DB881868
SHA-512:	DE50CB766F54DCD46A659309F536345C5A2AA48F0DB2335589DFFC58669DA5E685F51788469598723D6548170D8236DE42F22EFF22BE4286DA7DA4D88E89E69D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......%...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X\............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005405525705404
Encrypted:	false
SSDEEP:	48:8x6dtT1ZsHKidAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8xgv/n0y
MD5:	C1EB6802593D996AECB437760F4EA801
SHA1:	41EECA455DD93E331E2A49825FD4C250E5E13CD7
SHA-256:	BAB46D4860820E66438BCEBFE86C915368F41A34E453B4199E963B17AE974AFF
SHA-512:	4E6995F126A8120D9D95E635A9CD9F1D2F5FB28A1D3F0B9EC230ABA5119B2694A8667F05B207411B30833C233FD08757A03CA0F179EE1FC110365BF9FBBF4A0A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 16:42:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9906477027873257
Encrypted:	false
SSDEEP:	48:8GdtT1Z8HKidAKZdA1vehDiZUkwqehMy+R:8EvMuy
MD5:	B556CDA197F88EA830F8F09F76D2BC1B
SHA1:	36CFF8527879E95A8275FEBB442748753133B7A1
SHA-256:	0834A70048DE42EE6E2690D03439EF61C9143044DBA6A76F429FC215CF67E234
SHA-512:	959D175390660795B5D90FF386EFA3FE0A76198AB5E0CCDB0583D972D49F7B6E42CE3AC050E63A0CAA6C7A068BD6D26B8E429A971D14BE853BB782DDFE17F2C7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......%...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X\............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 16:42:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979092389942716
Encrypted:	false
SSDEEP:	48:8wdtT1Z8HKidAKZdA1hehBiZUk1W1qehCy+C:82v89iy
MD5:	13ADD28A58E48D4198E1DAC2D8246126
SHA1:	33A7AD74CE16C59C5BE091F412CDE739178B0F25
SHA-256:	9EE3DDC93B89AB1B1126A88B8AE43F7E724E744F0733C0D42DFC57E3DAF08E9C
SHA-512:	2BB10090C91E975C3880711CF622F1CDF6F8EA43F6ECF5086D873082493502C815DAF9C8DB581C0DB7A781F91EC45FF00FAFA59983BED2A2EE5F0EB3FEABA320
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=P.%...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X\............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 16:42:54 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9878880204798177
Encrypted:	false
SSDEEP:	48:8HCdtT1Z8HKidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb0y+yT+:8HovST/TbxWOvTb0y7T
MD5:	D2291E878EB18E6E3BA6B409393F6AE5
SHA1:	3F53EC407CAE33212BD2E7C422825032EB0B1E59
SHA-256:	9A59DBED04AF1A850F2A567FDDE46D0B39783C700C23381FDE6CB21D787BD70A
SHA-512:	2AC53F356DACAD4C1B6670E1E768B245F186BC68F7A98226DD91E63277E7C877BDD5D883D7ECAEF81085F8A61206D35156ABCD5C7CA2277967B1B71A3908D163
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o4..%...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X\............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............t.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34102)
Category:	downloaded
Size (bytes):	210602
Entropy (8bit):	5.29981192146341
Encrypted:	false
SSDEEP:	3072:4U3+tF7OMb1ibvJh4Aj+AhEJBjxP9UxtMaz5d1ruhpdPQ:4vzkkAj+AABZ9il5XoQ
MD5:	AC382439A1906EC25557036A918F08A6
SHA1:	1403A8B61F54C29FA9A56AE2310F30FFD7BA499E
SHA-256:	C378EDB7D69ADCBBF574853F9FF51988A8873846C97898DAA06C8C23EDC36C46
SHA-512:	0D272511BFBAA88486384EADB574A412FA6F1A18746B8EE4CAD9D9DFD1419F00BA39A47A10DC9B63A47B9885A672270A16033B923A344534520B93EA6CD6F408
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/framework-e9e659db89d286d1.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{1350:function(e,t,n){/*. @license React. * react-dom-server-legacy.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r=n(2784);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var l=Object.prototype.hasOwnProperty,o=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 152180
Category:	downloaded
Size (bytes):	49904
Entropy (8bit):	7.9954031771391225
Encrypted:	true
SSDEEP:	1536:wpgePh/yyQligAv9zCKNtY69GRck+31rLo3jf:wpzPh/Alizv95/3tLIf
MD5:	D3B727DA8B0BBFF49F1983A706C13DC9
SHA1:	212B6DF8454E687AB704042BD24504FF3ACF46EC
SHA-256:	0CD9DE87BA186D2B2D95EAD2AAF2877A6657E93268B14C63950D95F3A4694D49
SHA-512:	4BB45D65FB2C512557D81BCC12977CF8C806D1993B0B3C25CD76575056137AF16555870BCA245F30ECDC0755E09779DC79B026DEC3A8A812635D780BAB1CD2F3
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/vendors.min.js
Preview:	............W..(...+.N.W..cC.I.h\|....^.d2..a.v.. K.$........l...Z...e............G.....s..E.....Y..I..Y.SoRP..D..V....\|...D,z.v.vsH.....L...D..;+A1..tP.E<..O..E.W...I..5O.....5.7.>>^^y..4.....+....L.^..p._....LsQ.,..N[...$.<H.W..zs....z.34^.d......a....N.h0.!\|Yo..kn..L3.j..&.ZZ.DV..T..i.C.3..0....FV.$.m.1\|T..P.f?J.Gq..N.]...Z..aT...:..F.j......iw..qx..w\|..sg...U...^.n.=d..f......j..g.n...:99.....Y.......b.Z.).......Z;.A.A.....O..H1[G...+.._s....51..N...^Q.Eq..9.<>.@`.Y..........0S8.n4.A^..L.`Y...+.ez.q.+.6.]...p\J.d....3......j..4..K...o.x.}...8^.....+.`f.y.....72s....g0......`]y........p.f.8.L.q\|.i....$..1.o... .w..X.FI_&.=..j\]-...Lw=?....b.~...c...5q...!...S....ZI1.'y;..Y=...ar.kSp..L...*@.V.......U.._..B.+U.7`...R...,.)k...........7Q...I..SF....sDU........LPt.T......z..a6..pB....s.y;....m5C2.........K.p.yl.~.........{\..z!..M....u.F.Z..Q.. H..y\|,~.....b.A..@..4syl.~...#....+....]&W0=..?S...C1...f..!..2(.9H`.B....IQ+.Z>.D.%i.N..E-..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31339), with no line terminators
Category:	downloaded
Size (bytes):	31339
Entropy (8bit):	5.400276740986088
Encrypted:	false
SSDEEP:	192:KaHMD5DU8gZDYLY/j/KA5YotDREoqNF/DA0YttKREtqIpCMk2UOZhWUgeyDjAtLN:K9Ds0YEz5zR+h
MD5:	1E97F00F07B87F701D0BF06259F954E4
SHA1:	0FCEDFBE2C5B8AD22E9D69905A0317D81F4B7380
SHA-256:	FF8F406B684C6674DBD3705D3F6D2CD10B5EEDBC2C67A7773F235D69EF122D04
SHA-512:	7E73388B5152C2DBAC871D2C2EC20EFD3AE71836601D4E885F649C6024C0587A96E96959286B0C6A019FBACBD43BA07A22E39B6865D88957F0AB0D85922ACDE6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/8.ab226b4a.chunk.css
Preview:	.drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.drift-widget-avatar.drift-widget-avatar--small{width:28px;height:28px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-avatar.drift-widget-avatar--medium{width:46px;height:46px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-landingpage-layout .drift-widget-avatar.drift-widget-avatar--small{width:42px;height:42px}@font-face{font-family:Brandon;font-style:normal;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Regular.woff)}@font-face{font-family:Brandon;font-weight:700;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Bold.woff)}@font-face{font-family:Lato;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/ass

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5663)
Category:	downloaded
Size (bytes):	5819
Entropy (8bit):	5.167738668657575
Encrypted:	false
SSDEEP:	48:19Lrkrh6EhDj+2ca2UYuoH9iYDePsf3tYJrtYgW11FFeFIwyZbjedUBUmLTwUYOb:1le6Eo2TYu+Xftypu4IhQeFNb
MD5:	0998CDE4C34157FC47268E675AD32E4D
SHA1:	ED7AAF2D8B319052EE22C3FC55592D55D6303223
SHA-256:	E134C2614892D07A54BA15169EDB32FE1FE067351B78A0C1CE5489508EC10958
SHA-512:	22F09D3B94AE99384F15087412AD6C81D5DF5BF174F9DF85004C0038AFBD3D805AB02ED762E7315660E6E2F8A015FE762D73C5E6C00D9ADEBEE88EAE8C950E63
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-headerOnly.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..zen-headerTop #userNavButton #userNavLabel{font-size:1em}.zen-headerTop #tsidButton{padding:0 25px 0 15px}.zen .zen-headerTop{display:table;table-layout:fixed}.zen .zen-branding,.zen .zen-navViaSearch,.zen .zen-navViaMenus{display:table-cell;vertical-align:middle;white-space:nowrap;width:305px}.zen .zen-branding{vertical-align:top}.zen .zen-navViaMenus{width:100%;text-align:right}.zen .zen-hasMessages{vertical-align:top}.zen .zen-accessibleMode .zen-navViaMenus li{display:inline-block;margin:0 14px}.zen .zen-navMenus{margin-right:10px}.zen .zen-navViaMenus .zen-menu{display:inline-block}.zen .zen-menu a{display:none}.zen .zen-menu .zen-active a{display:inline-block}.zen .zen-menu .zen-duplicateOption{display:none}.zen .zen-bgdThemed{background-color:#1797c0}.zen .zen-headerTop,.zen .zen-branding{border-bottom-right-radius:7px;borde

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 34820, version 0.0
Category:	downloaded
Size (bytes):	34820
Entropy (8bit):	7.982902826695778
Encrypted:	false
SSDEEP:	768:f+vYQAKPEPXbeWpwNy/QyMmQHXbvwv53Cv9J1LOfITzE1SRSgyTAIW4iC:f+AZgULe7k/QyMmMX7oSvXlOfI8gyTAc
MD5:	FD117C9EB999E35D64BE1515D5B2192D
SHA1:	B0FAE4091AC17A28C47AF531A9D5B73B4C35F6BD
SHA-256:	553582BE8A5D2779D1A9E9C3A6698FD4D365E01353D8876A7204DB68FCD1D12D
SHA-512:	24D51DBAFDE7E5B7B1486BA3800BC8ECBAF369A2D28BBBF15096C723DC565247F9B956E8D0F28EDB535313E1B26934DFC30AF0AF700B8CB57F02926B889B2177
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.3.40-5/fonts/maven-pro/MavenPro-Regular.woff
Preview:	wOFFOTTO...........<........................CFF ......S....{..."FFTM............Z...GDEF..X4....... ....GPOS..Xt..-....DiP}7GSUB..XT... ... l.t.OS/2.......I...`.[.8cmap.......\|....#G..head...0...3...6.h..hhea...d.......$....hmtx.......Q...X.xm.maxp..............P.name.......=...1.E.Lpost........... .j.fx.c`d```d8R!.0...+.7.....\|Y...o.....v...``....MM...x.c`d``../.H.....1.F..............P.....x.c`b..8.....u..1...<.f........p...).,fp`P...._......u05..X.......,......x.m.1O.@....aP.......K.B.N..&.......^...\......G../.Dc....{....\.......c.....p...u.c.W..q....q...2...gY.g.k.8...w.u.c...9n.Vu.7q..1...[.H.`...6..p."@...L.&.X....Cfg.I}..+..[.4G.q..>..Yn.4Y..v.....[...L...~.I..Rh.......Q%..Qh...u...8.N....q.c......z.9.9.....&/O...h..mR=..........ljr.. ......T....Sw`....x.c```f.`..F..8..1..,..........P..a)........L..(.(H).)().)X).QTz..........@....1.AU.+H(.UZBU2.................n...}.`...V=X.`.I...Q8.z....#..A.L.,.l...\.<.\|...B.".b...R.2.r...J.*.j...Z.:.z...F.&.f...

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	5.105116557489179
Encrypted:	false
SSDEEP:	3:DPZOfaoxsquSYsmS6usbnaCf3ikw89bsLOikNisUqdWNOFKk18QNGpn/qhVSk:DPZOfaopuSbm4sbnaf5tCNisUqdWNOFZ
MD5:	C2344290F4DFA1A50714FDF4A2155FC0
SHA1:	DF34FAD2C116469349727F359331B45210F4FF84
SHA-256:	3F8797257241FD6102843BC2720599C6A4DF28E5ACC1DC1E273DB348BB74F283
SHA-512:	450BC13BA66826899EEFF2F31BF141AA6B7E8FFFEAD9BED7DE97CE2018ADF6D3CBA574126710C6EDB5BB655F35E2699A215BF435827C211A5A79EAD279723CA6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQmHAUCGsUdA9hIFDaWTNiQSBQ1TO2zrEgUN-7faHRIFDV3YqcASBQ212ChpEgUNsT-qPRIFDUYv_g0SBQ3Hd4xsEgUNchxSJxIFDb5mQaQSBQ0GYELZEgUNU1pHxQ==?alt=proto
Preview:	CnwKBw2lkzYkGgAKBw1TO2zrGgAKBw37t9odGgAKCw1d2KnAGgQIAxgBCgsNtdgoaRoECAUYAQoLDbE/qj0aBAgJGAEKCw1GL/4NGgQIDRgBCgcNx3eMbBoACgcNchxSJxoACgcNvmZBpBoACgcNBmBC2RoACgcNU1pHxRoA

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	379186
Entropy (8bit):	5.478914402188208
Encrypted:	false
SSDEEP:	6144:DjP0pQubB1ibrw1/JVXAfZtTDcHLq8K+0eCiNvuEiuuZQ8ZILokjtywMSZ:DyhB86wBRcHLq8KheCiNvuEiuuZQbywv
MD5:	30F19D41EA4C98E4E816666A9296D577
SHA1:	B6661E2A284A488A7A72B1980BDE9B1384E51790
SHA-256:	CA9EE955F4BA786540463AD12DB387935D4ED5FB83EB27FCC662DBC5C233BEF0
SHA-512:	79563C2F02D64EFD663E6E92F1CF059F68CD183FE9DB68E5D5EABF2420D56C3FC97ED6C49444BA6AEC7D94AF9B65AF875DED254EA9226E08D212A44AC65DE5F1
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/public/275532918/20917322951/7260_ca9ee955f4ba786540463ad12db387935d4ed5fb83eb27fcc662dbc5c233bef0_edge_helper.js
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={7584:function(n,t,e){var i;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",h="vendor",v="version",p="architecture",g="console",m="mobile",_="tablet",w="smarttv",y="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Firefox",R="Google",k="Huawei",N="LG",D="Microsoft",C="Motorola",O="Opera",x="Samsung",P="Sharp",M="Sony",L="Xiaomi",U="Zebra",V="Facebook",F=function(n){for(var t={},e=0;e<n.length;e++)t[n[e].toUpperCase()]=n[e];return t},z=function(n,t){return typeof n===s&&-1!==j(t).indexOf(j(n))},j=function(n){return n.toLowerCase()},G=function(n,t){if(typeof n===s)return n=n.replace(/^\s\s*/,""),typeof t===u?n:n.substring(0,350)},q=function(n,t){for(var e,i,r,u,s,f,l=0;l<t.length&&!s;){var d=t[l],h=t[l+1];for(e=i=0;e<d.length&&!s&&d[e];)if(s=d[e++].exec(n))for(r=0;r<h.length;r++)f=s[++i],typeof(u=h[r])==

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41495), with no line terminators
Category:	downloaded
Size (bytes):	41495
Entropy (8bit):	5.438392841199253
Encrypted:	false
SSDEEP:	384:LOxuPE9oBCBfonCRG8C+zNBwk88ivNcdRtg1jQjzJufN+kDY9IlFCFdtuhiVWVER:KiOmIw5O/w1DYqFCFdIiVpIBHtQFEW
MD5:	A013D30AD611B4379CE2CAA016620CBF
SHA1:	002827DF62207C310DBC2941B0AAAB04D44AB859
SHA-256:	04C07B8B81F862CA7992E57F80E16957CF50B245B2DB8BEABED85F8581BEE0FB
SHA-512:	DFB6AAF41DC71E4C3F8225724566687D4570E0B8087748C1C608D1407721F75957EAC15D8BAF8160C967F17B4AC133723BB9F4A3186DB969874D69ACE803459E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/17.aa20860d.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return T}),n.d(t,"q",function(){return N}),n.d(t,"g",function(){return forceFocus}),n.d(t,"r",function(){return j}),n.d(t,"s",function(){return I}),n.d(t,"e"

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.848241773312019
Encrypted:	false
SSDEEP:	96:LySLYC0Jd+4kjIs94lJFTofWUkyfwVMSUwT:10T+3sbLofWUkyfwVBTT
MD5:	0D26DF8D62B0515D1DBFC983FF628FA5
SHA1:	CC4EEF914638B5574314BD89338D34B4C4016CDB
SHA-256:	82213C7339A1E45DCE1CD6911CE68D652E22244E562F5F67FD5316118EB5BB0C
SHA-512:	A6B902CD8E14B6E355658006A2DBBBE0BE622CD24C86A44980D47918C011BE271503F5E29AAE677C872728C8A3147DE8590B528CE71C70D8A48972CA07A651C4
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png
Preview:	.PNG........IHDR.......T.....Z......,PLTE..............................................................................sss666...uuu...lllEEE...111 ...,,,...XXX.........[[[..................ppp```UUU......\|\|\|......xxx???................NNN.......eeeKKK(((...........bbbQQQ......hhhGGG..................AAA999.........;;;III$$$...ddd........tRNS....[.....ujP.+.{....IDATx...g_.P..q....... 4.0e..%X.QQ......~....b.C.J.B...HBr...'s.v.wo.=.3..{a.z..s..s..-..[...%.7..3.g/l.1..^c.....\{i....s......H..?`..g..E$.A....9@...N.....?.0....D..1. 'g!.>.E..EL..n.....e......".aX...f.`]!..I\...=N_..`.......3.v....E..y.v.....f04#.b.....D$x\|..f.......%.H.............I.T...$.d.....2..,M.eX.X..`n.t.....3~..)9 .)Q..GE...~...mp.a........dkC.+...N...a..A#..1..5......._C.2.Y...IP...X.C..L._3\..P.[.=..)I....`..U..%e...9....K....R;].G.....&Q.G.....e..R..qK.P...j'..8.72..i2}.t.\|T.`.*.....+<...R8.4.r......].m.(.3..H..T.....(....p.C.x..<Wt..h...6.H.P..b...?<..'aO.2.".H

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31960, version 1.0
Category:	downloaded
Size (bytes):	31960
Entropy (8bit):	7.993703164867211
Encrypted:	true
SSDEEP:	768:43Rf5I5ETDL2bPYCa24R4FjbSRGYd/I0G3yg4:4Bf5jeBU4leRG4Vz
MD5:	D61E721D966ECA8160C727020270189D
SHA1:	C9CD9EFAD8418BCC040A4C1041B7234CE74B79F4
SHA-256:	497FCE02B43169D701E1A1B331A39E7ADBCE12C9DCCC8081E292A15566A2763B
SHA-512:	86BB17F69934DE9277656819341E35C95413A3B0B90D67B25687EDE76073B5B4060E045763E886DC19046563C18FEA8CD56A30749590CD85DB9AD757ECCBF0F0
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-light.woff2
Preview:	wOF2......\|........x..\|o........................?FFTM..V........`.... ..e.....,..!..j..6.$..P. .....q..9[Aqq......6PO.?6.v....n....\|..v.b........o%...._.,.6g6av..?_(........= J.K...[t..J.1-K)..C#V.....`..3M.....=.J.m.....b....&l;<...w2e....s...$ZY..A3....+..'U....O.\|{y.Q^............?.......BG9[.d=.`......0#V....7.B,H....I.G.k...\>K.4....@8.H.;.'.....Dw..p<.....JBnFZ...2U..08.BN."...Y$K(.m........`...A. ...jk.....D.3......0e.......Y$....-...1....'l..=3{?...2VM...7...+...0@.....R..(....r.....e;...Z..2]..;...%[RY.U...N.r.)..E.......'.y.H...S...~n..R....0`.oo.....(JF.B.TA......j.2......T/.{u.6#....up..D...P4.r..g(.z4.2....uO_.k.$...G..".A......d.C...n.n......l..$Ej....ri.<Bb_.......=[c.?...S.K.l....CXz...4@@...gLv......f.V.E^.X5gJ{.!.;.6...vM..}78....(..(z.-+.L._.......W"FB.D..'...'..,..4l{$....R%.....=.`....I!...Y:@.R.p..K(................j... M...Niu......}..7.$m.B.I.._..y.../.$.n.........s.="...;"....\....}....*6......x..X...?....W....]....

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45529)
Category:	downloaded
Size (bytes):	479029
Entropy (8bit):	5.559131330925537
Encrypted:	false
SSDEEP:	6144:VDjlGFjKOePRgy7VX/q8yHC/f7tvH722v8pNHkyf1c:VDjlGF1e/qi/jtvKkn
MD5:	8E46E5871BCE11638CA1B465F497DD35
SHA1:	C0FDACA8F60C8C62D1C5C328D9D1DA9221E9C8A5
SHA-256:	8469E34D12A81C502A1797FF4F6DDE6E91A28024C319226D1567265C7C675F03
SHA-512:	98A0EE9C57A29A165863E581BBF9A1AB619776361F85F49DF27071438ACE47DE2FE83C1CBCBEB3C755C319277AD0986AB7C13F337726D017AC8740B693C396EF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NXX2M47
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"405",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return!1})();"]},{"function":"__smm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_defaultValue":["macro",2],"vtp_map":["list",["map","key","\/25dbafb5-b299-4118-868b-a6a7de82e2f4.html","value",["macro",2]]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",4],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"false","vtp_ignoreCase":true,"vtp_map":["list",["map","key",",C0002,","value","true"]]},{"function":"__

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713289439404&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content
Preview:	{}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	4.909955331109979
Encrypted:	false
SSDEEP:	3:k0WYL12Af5QpHJ5AIJTeW6QfpX/W6Qen:UYR2A2a46EpXO6h
MD5:	7C0FA96BB53AB758990A0AD2A09F8156
SHA1:	D805C5536D89E181F99858C32F8336223E1E5938
SHA-256:	3F4FBD67A48EDE7F6CF30928218BA937FD910491D82A8E1439E3D41E12AB4866
SHA-512:	7AE5A79EB2E9FC90165D3801F42D08E07EFA082CE4CBBD018B8C591D409B2FD3B71500DC1876301FD92FA5FCE44A78B72E27DB6862DE68F0DF5AC1C99141D631
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/35d1d58a1044879bd83c010cbbdbe30c4a199dcd/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set(["\u002F","\u002F404","\u002F[...page]"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	71663
Entropy (8bit):	5.438176761243166
Encrypted:	false
SSDEEP:	1536:gIXxlOtJCeX5whYXCkJkzkKIzYcc9uSlYRUMRn7B:XXxlcCrkJkzkIRYOMd7B
MD5:	489B1FF4B0D187650DC5B9899B9FA5B3
SHA1:	9FEFDA89D7E1BE195773CD2F2806A77D5C6A517D
SHA-256:	D7CCD77B205B05362BE85D33D9A12243E164501B4AE8908D7CFC391675991E08
SHA-512:	08142F936413EFD75A5942D9D9AC30A56E680709F1825AF8FEF393BCDFABB08B12F86588857151266907E27596BB7318E7ADDAA6347DE21AACC8FE642EB5107C
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5032583347756456
Encrypted:	false
SSDEEP:	3:YJK6Hmk4:YVE
MD5:	1F0C5750EBBE38CB64D732D89E864A9D
SHA1:	E6581E282A0CA5FF121481E17E0B05059688AB62
SHA-256:	02A353CE2AA6CBD20A3CBED11AD580344534C0C465EEA42403DA6D79BC1E8BAB
SHA-512:	F7CEEB9B09E2671954AFC5052F184E054C1B2ABC29292312ACB79E3223683E2282BC1BF4CC25A14E9EABE97DF65D4D54F069A1741E571BFCAD769621804B47AF
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US"}

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	downloaded
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3896
Entropy (8bit):	4.786686051422741
Encrypted:	false
SSDEEP:	96:JvfEcgJcu5leSCSvraBYw9o01tedRnCKEpyWgoY:5EcgJ0SDvraBc0EEp+
MD5:	855476199961A10981ADCA7432CEC048
SHA1:	7995725A0CAC73EB6A2A1B5A8D5B162DBF47988E
SHA-256:	6DD60FAA0E35F2DFE342C452ED414A084D384D11793BD0F0EB03C2B1C6F1405C
SHA-512:	A9E61582FA18BCC1DD57DE8A7C194BAB0D6F733897F541A6E13B94906ADC115D65004F5A2649919FA8B8545F0C67C9313A14EAEAF42C34F630DA13CD38E17994
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-logo-inverse.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path class="st0" d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4.....v48.8H1060v-125h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2.....C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path class="st0" d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9.....l0,0c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4.....c-4,10.2-13,19.7-31.1,19.7

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	5.477970273040246
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHmmsH9CsJihyaciixc6PiM:2dDATLf3z2GmsdCsJihiiixc65
MD5:	24243F4F86F04118E67AE86E361C85E7
SHA1:	954A00D8F9AE1116CD58DFEF59849D6A53257F90
SHA-256:	120EC871612984410DC1DB86B46AA9F2017F11E23976795BCB097CB27A1BA9DC
SHA-512:	1490BB025CCBF83544A173D7F099372A54FAC924FC2DDE8C471B8C188A5F7248A3A63391A9006D33D504DCB7C702F4B6C5BEDED61B50E34BAB74333C73125809
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#FF5252;}...st1{fill:#4C00FF;}...st2{fill:#CBC2FF;}.</style>.<path class="st0" d="M-0.1,6c9.9,0,18,8.1,18,18c0,9.9-8.1,18-18,18"/>.<path class="st1" d="M23.9,0c13.3,0,24,10.7,24,24s-10.7,24-24,24"/>.<path class="st2" d="M23.9,0c13.3,0,24,10.7,24,24h-24V0z"/>.<path class="st2" d="M-0.1,42c9.9,0,18-8.1,18-18h-18V42z"/>.</svg>.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1281), with no line terminators
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	5.801462592514182
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl36+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWUG:VKEcixKonR3evtTA8/1/OXLrwUnG
MD5:	CD62035617DE6D26FE79B53D4A6B2166
SHA1:	55EC1BF0EC6453D20ACD02FB04EF0F66A8BDDCD6
SHA-256:	B1050A876F44404473758CC73ABD7CC8318CD334D8C2B511CE6B645B99EB36EC
SHA-512:	1FF13C04496F0DFC7C0C92F4ED9FFB6C7F9BF2FE26C081D6D401D47E3486B31060EA2D3D59DB0521F989AE7D8A180FE001E61FBA99E718CB5D023E042BB3F5B3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=explicit&onload=onloadCallback
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('onloadCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50871), with NEL line terminators
Category:	downloaded
Size (bytes):	95065
Entropy (8bit):	5.282078867394296
Encrypted:	false
SSDEEP:	1536:QXgXaD3hMju30xBs2jpZxOf1aMuS6awPMhgpHc87igiU5AeaZzCU:H2hMjDhlVXV7gU5haZj
MD5:	7A4D50B4AC4FAC6A99C9BDC3E29A276A
SHA1:	C52936022C1FB6B3D119DB36BB5B7F3DD5838D51
SHA-256:	C9DA61B8AB0EC27809651ED3529F081B69460D6E8F7793901E80A046552B6A5C
SHA-512:	05FFF4860B38F8903AC2391608A895AE074A5044DE089842807379278D4A093A1F55F62DF7DE766ECD6EA8CBF0BF927292B2751CE4CE7022AA166A14F5BEE7A5
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/resource/1639078464000/zoomin_app__event_layer
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=121)}([function(t,n,r){var e=r(1),i=r(7),o=r(14),u=r(11),c=r(17),a=function(t,n,r){var f,s,l,

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.985398774519972
Encrypted:	false
SSDEEP:	24576:OiiFgEShDQVe0gl+0by+S0JCy7WBSj7v9LT+/D/:OBKEShjy9XNBSjQD
MD5:	88D3C80F0DFDB6F6BB79C758A41F47EF
SHA1:	1607B601E6A1EF5C08E4E4443F56EECBC808816A
SHA-256:	8C32052CD60AC9621D641FD1E935241F6A7644D47A85F5D163897C05F49FEBCA
SHA-512:	F0A09A575057C821CAD37A826F159BF41331C2F9D93A0C03035BD08AB6F96E55217079A89F5DE713589F764AFF2CE178ADF37E3E3A01BDC1FECECC435FAB495B
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:5
Preview:	..H.e.Nc...u..t;1..P..}..._..x..As..r..d...%18./....y.:..D..z}...o..]..B...$.(...2.....W`Cz._>......,...........Y.c..m...EEj..o~.%.Z.! .p.......[..v.$;FMG.._..W..q\|)....H.E{.-l.$.I?Z.#(..0...c.D<I..m.`Kl....P}...?.I..A..Qx. ...v.y....]zTl{..........b\......S].(......./..#....7...p..\.u..ks....tH.....F.+....C.\|.8.....".Y.+...........tD..........................Z.C.vF3...Q.....;.......l.jHBpbB..j.Nr...x..h.lC..~x.cZ...]......A&.r.R&.\|#hW..T..>.oso.).(7w...p...........Qi..>m"..M......].L...1.M..M...+....Q@..\|.i.u..o.....W0....)..J&...98..]F.6..).i..\|"...A1f..?...H.u.Dy,..W...-.X..}..$.....w.G.@C......=>....7"X....JGT....G.iX\|..xOUB..U(....u.bV....(..K.........._-...&i..t&_..$....F..56b.NzF....6 W.fS..I..7..y...9..%3.&...u.Y...Y.<..k...A..j.NY1QFG.U......%..9.g...7.G.>..S......PcrY.K.cmX.(.I....13....I..,...F.q....i.]t7Nj[.6..z.fa...K..`.ZW...ObR.S=H..l..yY7Q.k...a..2......kV...v.V.X.d......-.2....0..KL.d.f.L=n.......0`.P....4..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAml2N3ZtRlm3BIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8000
Entropy (8bit):	7.956311720761714
Encrypted:	false
SSDEEP:	192:68Cr3eY3RaPZdWv6+CIJs0Lkddu/NDm0laAhQoegKcMl1F:Fk3eYhmofCIm0LSghuoegKcM9
MD5:	C102C6D1BF0DF972B011FD49F4E894E7
SHA1:	211AC57545ED65A7038560D6B1F8B29E7ADDF694
SHA-256:	688CE66342550D7DF482B1DEE22C10559AEC4B575C3E42DD86239F47D4B7290E
SHA-512:	891789A8C81926B070EF31D635F7351E8E1B0EC308BA1C6307843424346DFBB773923C784918DB6EDB56972CF45EF3502499483793BD1BA54C0D31663CE5627E
Malicious:	false
Reputation:	low
Preview:	RIFF8...WEBPVP8X..............ALPH.......m.G..lc....cu.\&.Yq..6...j...\|w....0..X.sa.\|.l.G..z.Kf..WR.....F...I.<...>[)..Nh.......j......e{4......n']2..//V....I9x..~..Lh...U.^..V.rq.Z._.%rYc..D....Cd.Z.nDv....r............?............?............?............?............?............?............?............?............?..........B-I?D.%./.-.D....w..b.br.%.e....(........y=...........H6......v.5c..7a..xDcBk?...\....3.YR..V.#]F...........C..n.!.VP8 Z............>.\.N.)...s.s...gn..>\...1.0......N....,.z..a<.../9.}................ao../.Vbl...[..{.h.~DG......1...X.8....x........./...@U..IZt.....DDDDHu^...!..P{...N...agP$.fs..t.ffffg..."...Vxx7......T..6..R._.kN..........).J..j...q06z....u...B.\.]........\|..ZU...9I.~...s..@HF..&[..7..Mo....-^...)...6......P~....J..f....B.9................7vS.:...N.x.......(.9.@CR11.?.....i8&...T...}...22...t.fffffp0."!D3....c.L...R.&.Ns._m\|tY#Hn.qj..r....~r.&c.....%i.4Z.........~pc...#.d.8......Z9. ./

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/14.e24a6190.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15387), with no line terminators
Category:	downloaded
Size (bytes):	15387
Entropy (8bit):	5.345386519288367
Encrypted:	false
SSDEEP:	192:ebUAsQWfVA1RsJiRsCS1XXe3euvUkJZJqul9B5U2e2qSSflggnIBOdveSp:8ZRsQRsCwYeuMkFBa2e2VOGBOdz
MD5:	3305C113ACC7BE7B8411ABD6ABFA37BA
SHA1:	A186937D8522085D26F50BA351886021919F88A4
SHA-256:	B781A271D23F8FCB33421408A4AB099770B32368548F88C651C0FD1C15CB2A0E
SHA-512:	6E9DC6D35ACEC635CFB495E8CB705FA0DD981B92A1A0F1E734DA3BB44ED61F205ACD784B5F6CFC186186081A239E4072616D58ADC7A30DB3C1DC62B8BD7BF03C
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/27.42a90a1f.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex:0})}},"3y+j":function(e,t,n){},"BA/U":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var c=function onKeyDownSubmit(e){var t=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1];return function(n){(function isEnter(e){return"Enter"===e.key\|\|13===e.keyCode}(n)\|\|t&&function isSpace(e){return"Space"===e.key\|\|32===e.keyCode}(n))&&(n.preventDefault(),e())}}},BY8A:function(e,t,n){"use strict";var c=n("s8DI"),o=n("QtlZ"),a=n("Hvhg"),i=n("ERkP"),r=n.n(i),s=n("rTkt");n("zoZM");t.a=function ThemeStyleSheets(){var e=Object(i.useState)(!1),t=Object(c.a)(e,2),n=t[0],l=t[1],d=Object(a.b)(Object(o.b)());return Object(i.useEffect)(function(){n\|\|(Object(s.a)(d),Object(s.b)(d),l(!0))},[d,n]),r.a.createElement("div",{className:"drift

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 52521
Category:	downloaded
Size (bytes):	17278
Entropy (8bit):	7.986138885355024
Encrypted:	false
SSDEEP:	384:mDLpE1NH4uv1h4Gdk+SSqIfcWhVpDCF/FakZ56NVmMPCh57V2q:mpEnH1h41dOjipeNVmMw57N
MD5:	BEF52EA8BDB8C39FA5BC9BC09918E7EF
SHA1:	913F152947E3CD0EC97F6832EC06A5C748D6EC5A
SHA-256:	068A5830723769B086AA15106BDD7896BDC847BF3837CDCA22D9DBA8CBF804D6
SHA-512:	72921EC7D330FA37C1D2EE42E1E61F0D7813196EAD7053DE01F34505623E4C7D848E73AA782FC4896CECAD8503ACF5C2345D4EF0A05F5116A27FEBB0CC071AC6
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/newrelic/newrelic-agent.js
Preview:	...........}.W..._1:],.0(.GB..H.iB(....?.l...\I.Q.....<.0...{.Z#..={.{..DY.'.`...)...pe.._..Do~.'...?>=......_...c...I\..i..D..`>L.1./De.`..`.....xr.1..".9.h.>..d.....N..`..?.Y.[y......`.Y..p....V...fK..[...E..........=....=.O'.p..o...{F.......l.Wz..w..0`.gz.Xx.,L..[........W^g.&y.J...G..d.....,K.7V...`.y....}p......SH..8M..Tb...?f\|....o.o'..Y<Ro0...0....P..,.......n.K.W...f......RT.E...p.GC..qd.._N.Q.........,........o.{.u...~.:.r....'.i+.\|.."oe..Y..V...+......./c..8...J...zMGX.e....&.&...i.F9d..Y+...N.Y.uC....!B...G.;t7X..x.....%..............r3..W.;/...B. ......3>...,pz...aSQz.a.(.z.Lg.)...r...m....X,...x..^........\|?o...\jj."N..%..k1..u...@@=...Q....Q.K..].......b.0..._..g....y42P=L.......X?6]...<..q...i._.I.a5.y....M'...KSX..c.............(..U.tp9....Z..r3...3..KY.l.`u!v.Sul..71...H.._..>..4..d.4..(..........!..`^...(.?.......G..K3....b....T.K......m.u.JI...a..F.....yiw...+^.....G\o.6......,.U.f..G..L..z6."3.6.....a......tT..:L..3..w

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (473)
Category:	downloaded
Size (bytes):	629
Entropy (8bit):	5.1500943821704315
Encrypted:	false
SSDEEP:	12:UxMKzWRrnjyS5WPEmoHCmVln+njYEQsRKcWNdBppeW:IMhjf5UjMVlyjYKRAN3+W
MD5:	B9EECD4347599741D5831AD82F3D02CA
SHA1:	7E707A9294E65D822177BF9BCD859BD4B7020A96
SHA-256:	F1FA2C0093CB8A7675F681C951C9FA45CF2EEC3D530EEC8C4D111B96F4BD20D8
SHA-512:	3AAB9D616B0ED31E17747C733A40CE6CD85F150491655579F9D1F62723DDEEA6CAC309523DB3A24F690604E30EC3D300B46B01696A33E7F278C76441222F2218
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkModeration.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..net-flagIcon{background-image:url(/img/chatter/sprites/sprite_images/chattersupersprite.png?v=194-2);background-position:0 -1967px;width:8px;height:8px;}.net-flag .net-flagIcon{display:inline-block}.net-flag{color:#222}.setupV2 input[type="text"].feedSearchTerm,.setupV2 .FileListView .zen-searchBox input[type="text"]{padding:8px 35px 7px 25px}.feedsupermenu img.feedSearchClearIcon{top:7px}div.zen span.feedDropDown .comboMenu .zen-select .zen-options a{padding-top:6px}

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (332), with no line terminators
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	5.442162628663617
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3WqmdGZnySywIsrBJ+YRo5d6EpXjd6I:ZaiGmFMZqqHpsrB0SqFXjV
MD5:	E0656C0AC17E4D47D856108142D1F06B
SHA1:	054C365772DD70CBD7B8F2927AB48C5EC4AAA191
SHA-256:	E94E595BB65A0D717E8DC7781D4B97855DAFDA5BAAF27982EEF362E041A322CB
SHA-512:	CDB82CB185637DE760D75F8A5D70CB6B72F1DA38C99F2A054C2DBC080037018242AB7A945941F0D281FE696065E995F2EA6444C07D9B4FE803F31A3CA1F5B557
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-c829feec71ce8a09.js"],"/drift":["static/chunks/885-d6ecc87b4abc63e3.js","static/chunks/pages/drift-70616663443cb372.js"],sortedPages:["/_app","/_error","/drift"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1008
Entropy (8bit):	5.341741351033008
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHEHuKw2cUnPob2cUl1XnD2nwUg4gjioghn:2dDATLf3z2kOKOD9uXLd4fomn
MD5:	093C01E5C7BF8CA66DBD361F32EC07BA
SHA1:	BEC514FE7BCD36217F21ABF0151973C3BB8B8D52
SHA-256:	AEA8498CA007031B5969504BC680AA6D9832D984CB495EC8FF0D2B60E88FA7D7
SHA-512:	651870571E0C65F18A0954DEE5241FADA70FAC25B5969FFC427B126F1AEF06E81E43B6B404AE89FEB7B5014BB72430F8D980B75690FDF3E6A6B62CC8379D7ED7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#CBC2FF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<path class="st0" d="M46.3,48H28.8c-1,0-1.8-0.8-1.8-1.8V28.7c0-1,0.8-1.8,1.8-1.8h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C48,47.2,47.2,48,46.3,48z"/>..<path class="st1" d="M19.3,48H1.8c-1,0-1.8-0.8-1.8-1.8V28.7c0-1,0.8-1.8,1.8-1.8h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C21,47.2,20.3,48,19.3,48L19.3,48z"/>..<path class="st0" d="M19.3,21H1.8c-1,0-1.8-0.8-1.8-1.8V1.7C0,0.8,0.8,0,1.8,0h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C21,20.2,20.3,21,19.3,21L19.3,21z"/>..<path class="st2" d="M48,10.5C48,16.3,43.3,21,37.5,21S27,16.3,27,10.5C27,4.7,31.7,0,37.5,0S48,4.7,48,10.5z"/>.</g>

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	664
Entropy (8bit):	7.372454032832544
Encrypted:	false
SSDEEP:	12:6v/7VENaMJ/j8B/p1Nj9HCyQB7DydcSbywhiyB9F1An1KL6gbFzBwoS4/1Kxnrrv:DNnoB/prjAySDy8whvBdL6gbFzVKVrrv
MD5:	C2607F54138ADAA863040C7AAF919ED8
SHA1:	DB12AA38A7E7D7C2E0153E9A2D08A2D38732E456
SHA-256:	3D41BDA6BBDB76A117B7B6F0C41CDAEA79F96140AF54B2B8BDF0024D8E8B850E
SHA-512:	A01089A065BB1561E56D68DACACD9218637A6F88E1DDFE0563B677ECA8120422C71329BE83C2F81C30CA50F4123F34B24DF8F13D98E36E3FA7AEEA11241E9DC9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs...........~....JIDATx..1r.@...eL...K..D..G.. {....'.s..'..l.Lz.4)-..4..9-.P...A.+..........=1;.p.....]..I.$.=.+c.C.(.)...p.........Y.=.SX......d..X..<'5I.:#2..}...._.W....IM....j=y....#....R..\|...$...X.........n.i.......2..\.^H..Y.C.+.....0.....d........S..q...k.$......;5........$.OO.;?'.v...C..e..$//..s.......PI.P.....r$TZ../....X.....I...(FB..._....N.d...g...Z.p.t......K.0S....P..#V.)......H..........{...H.1.........$...dsP...e.t...H...}yh....+cf.&....T.d.e.y&;......K........w.7q".K......M.0.~<^F.y......`..P%.....-..&..V....i.....V....i.....V....i.....V.....@....H\........../......IEND.B`.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94897
Entropy (8bit):	5.313063961878945
Encrypted:	false
SSDEEP:	768:QlKHUAjOZ0yeI11yGbqtOZ8uH/CUU6Yn/ATdTGBNx+Jy/t58u9wVXVKGHZKA+3ai:Ql0xCVG5t3wVaTIDDAwQPOeH5cBe1+8X
MD5:	B32CCC4557EBAEAEBC835C96712693C2
SHA1:	5747BD14940CC3A54AF65924CC5421B9C92211D5
SHA-256:	D55ABB3750D355B96BB3D095FD440B8F439A83253D66243737F67836077BE254
SHA-512:	BB85ED395A9E8CB96456F46904BE92BB0B05596EAE5B40A4BEFF1081DCDEB6E7BE1201907E3D178BA0F556B30FFC5C0D0A54ADF8F08B69CCD9D7AC77E070DD44
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/16.9ef4a519.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),y=n("K7i0"),A=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16436), with no line terminators
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	5.046420217723836
Encrypted:	false
SSDEEP:	192:iQ0dizaqHG3uoRQIsWUq0+DfyvRMRpiyhVAh/qP5SM9/:aj3uoqH9fvRMRpiyhVAh/s571
MD5:	6F779260053E30787F84DFA7BA6743E5
SHA1:	95E6B54A6B0D402191A7D4656D06A5696EDBBDB8
SHA-256:	A03B854D10519FD5BE9CDCBC78FAD3927C1A3DE9E84FA74353C8A19CC20D0501
SHA-512:	4900847584724D9D4880B011038AAFD6D1293290A9A3ADC345E177DB22B3BA3168FB5EB065FE963AEEB1C9E28C51079D400606BE63BEBD6863EA5BBC81D427AC
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css
Preview:	.drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-widget-header{color:#fff}.drift-widget-header:not(.drift-widget-header--collapsed){z-index:1}.drift-widget-close{position:absolute;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;top:8px;right:8px;height:16px;width:16px;padding:8px;cursor:pointer;display:none;visibility:hidden}.drift-widget-close svg path{fill:currentColor}.drift-widget-header--collapsed .drift-widget-close svg path{fill:#687882}.drift-widget-close line{stroke:#fff;stroke-width:2px}.drift-widget-chat-wrapper:not(.drift-widget-chat-wrapper__active-conversation) .drift-widget-close line{stroke:#687882}.drift-widget-chat-layout.widget--xs .drift-widget-close,.drift-widget-chat-layout__takeover .drift-widget-header--gdpr-consent .drift-widg

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2645
Entropy (8bit):	5.292523317005614
Encrypted:	false
SSDEEP:	48:Ys/CNxvf5XkIIFvk5Xkt+IhBbwqTrfud76fpA+c/fpdieti0Ns2si/9liv:sx0T5A0zBFfWWfQf464
MD5:	D288F7EBC98B19F867BE4C193876F0F9
SHA1:	ACBDE97FF22838E171DBD0D537F623FF7CFF5A98
SHA-256:	8AFE5B31629B3C81DB3A3F55F1078D71DF264A91497E91E6BDF6317F99339821
SHA-512:	CFD968BDE035910840F530C2DAD7169EA9B62AC8EF6A11CBA53BC84B802BC2F4A8734517E76B7C2E5E8FAEC47BEF90AE08ABF06C552739D26896BFF1CEA6EB6E
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%222153e4b9-0bdf-4540-bac2-51c1eddcf52a%22%2C%22publishedChangelistNum%22%3A193%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"132fa8d7-54a5-49e7-bf4b-7f7f0b8e845a":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 0, 0, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientationSetting\":\"right\"}","customizableUserProfileMenuEditor":"RSC_User_Profile_Menu","buttonTextColor":"","buttonTextHoverColor":"","buttonBorderRadius":2,"commThemeGroupId":"jepsonInnerHeader","buttonBackgroundHoverColor":"rgba(0, 105, 236, 0.8)"},"componentName":"forceCommunity:customizableUserProfileMenu","priority":0},"cad6600a-2401-4080-99e7-2c2387520fc8":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 105, 236, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrie

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 657 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	117430
Entropy (8bit):	7.930590033178204
Encrypted:	false
SSDEEP:	3072:l5A2+hmapXEKFHWmaHp1E/e92Em3bxmaDIgUt/189JnAG75skM0:Mp112DpaEmPDxkG9Ft+kM0
MD5:	F82E873EEC69DCE505D23959A459CD4D
SHA1:	1D354D166E135DC9A222DFE91E79DD40780A49B0
SHA-256:	EDC202315EFDC193E09A7A4EA67903780C71A992EF705001F39A2E6BD6D48847
SHA-512:	82F0F46B9550DEAAF2C7925F1C5E0B4D037142B22E1A3D744567F2184D11362805A191A1C95ED9DF331BF823087A143F48ECADAEC87B2754E532C49C99D62367
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png
Preview:	.PNG........IHDR................{....PLTE...........'...w... /.....................{...'9.......... ...../.zo..&.#7''0.y`....."!(&2E....,B........r.....#..&,<......\|h}..":U..n.....}...}uj........s..................wb.qZ.wX/9L........r..............{...& .....q.4M.......gP.f?..w..........{.....}..........w.\|_4CW4("n........eQ4v....y.pU..~\|\D....u...pZ:...zo_..f1-10 .?2,.^3..........lH\|iRq~...k...v..33<b^=...}....x.....j.....s..~........&B`...qg@...6Mf.....~...Vm..wMyuM?;=`~...W[E0.....e..lmw.8".......\I%.Zu.>2.O0 ...u..c...]&PbrV}....iF........VKC......iikUQ1DCIuK7MNV.rSiiLywu.uMDd....JC%....m..t^7$l?.eGM;2......p.~]..W..\|.z...v~`..k..how.......}.ha[P.U6..]]`.d..IVd..^ldZ~F..R ..l..Kq....<Wt......n...mtX...].......J/v.................g.........G.............[y..t.....tRNS.@..f...dIDATx..OK\W..[.F.*...c..,.].,.m5.&$C.7........p.U)...e.Ah.nb..B...Mw..E.......>..wl.s.;......=.{.....D.kkk.Dk....h..lX....D........y......\|.....'..xrq.....Y...u

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.993663798074861
Encrypted:	true
SSDEEP:	24576:6pCspiHswPLHRI/E5PozphY7dy7LqDSSkPMWFzs7caWSZfET8MU/:6pC88Hu/E5Po8dyyGMWZecapGTA
MD5:	EC1F4AD1C37E17F5DC92E76EE66B5C4E
SHA1:	A53D7E96B7F7C84F757F1D393E02D89D6C006A6C
SHA-256:	07A76A84EEAABB8EDE4BC95124D82977863E2A02276FE76E9F83556273186D19
SHA-512:	57FC96F6AFC92F84AE344AD6F1C855DFEE80B660958AA2DB8E3E13C0166934276E419FD1B1D46EC797A5DE37AF42610A39E8EB053A950C57F14522023A975EA4
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:2
Preview:	..@...W....Ij...f.. ~...5...`...l.@....@.....D.2v........+...no..f%..Q-*..a...._.F.X.K..9O'....\.;.s.K....Q.D..x.....vQR.>.....w$^.B..U'M..koM.\.._tcp.I...o.GF..n.l..cYX.............g...h./o#.;.+...tiC.C..#n@P... i.CC..:"2..M...a..H.8.\|.O.W....`LG0....^.a.../X..:..]7.3...(......,.u..^.)Zs...(!..?.]D(A...gH.@.#0...Q...'V...U.j3Y:.S.5...[.]<..].........G..g.[.u....=......y{.%.4.$..K.S..j0.U.F.8..g.x..2;........7.~z....d;0.P?}k .Sz..T:......z.@..l6[L9fk.. ih.Z...s...'...9..,.T.E-O.g.8+..y'..fh..y )-%.._.24c...x.F..5..+..N..O.f.wQ...<L....:w.......y..F...C...,.e.A..{...T.7as.<.t..,.$..7.qO.!.hRRo.9=.......... .\|....[$..+k!.F...[.{.+...5.....1..6..e.Q..-%o.[.L.............p..p.g....$.z.....&.V\wK.....;.?.0x...J...%.......{Z.3.;...e..8.g3qt..S.hex1O,.4.$..=..O....._{.....].K..-.v..........{..Y... .oB;...N/.!."vuX.{v4...a<......=........WZ.p..B.wK...gG.h%.)..W.Fk...>..".v.:...i.y..#g..$...hqU...$.4..H._..q....G.........Ks....u/..s..7.._.Q... ....8

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4167), with no line terminators
Category:	downloaded
Size (bytes):	4167
Entropy (8bit):	5.342497950086159
Encrypted:	false
SSDEEP:	96:B2HkTE9qkuWlRvkNJUgE8jNVCzLBYVDW5Sc2W55SL3bo3:B2Ew9+WllkrUcjN8mwH54Q3
MD5:	408CBF58AC50E304CA9DA35C3EF06C40
SHA1:	0EDD9FFCE9381D007B72B652A722FDE9F6057A46
SHA-256:	0C975905FD30E2A636810B231A627905BD8BDF88ADE9449AEF6D46AD6BD12DF7
SHA-512:	BD8B6C33DFAD48320D82A05520941237E21E596FA8886E25D4F1B0357D0F58A231ED2EA881CA939CF3168E2981F129485A9DD1C2461F4A2B570BD6621ED39A02
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/webpack-d201a4b30a0ceca4.js
Preview:	!function(){"use strict";var e,t,n,r,o,u,i,c,a,f={},d={};function l(e){var t=d[e];if(void 0!==t)return t.exports;var n=d[e]={id:e,loaded:!1,exports:{}},r=!0;try{f[e].call(n.exports,n,n.exports,l),r=!1}finally{r&&delete d[e]}return n.loaded=!0,n.exports}l.m=f,e=[],l.O=function(t,n,r,o){if(n){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[n,r,o];return}for(var i=1/0,u=0;u<e.length;u++){for(var n=e[u][0],r=e[u][1],o=e[u][2],c=!0,a=0;a<n.length;a++)i>=o&&Object.keys(l.O).every(function(e){return l.O[e](n[a])})?n.splice(a--,1):(c=!1,o<i&&(i=o));if(c){e.splice(u--,1);var f=r();void 0!==f&&(t=f)}}return t},l.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return l.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},l.t=function(e,r){if(1&r&&(e=this(e)),8&r\|\|"object"==typeof e&&e&&(4&r&&e.__esModule\|\|16&r&&"function"==typeof e.then))return e;var o=Object.create(null);l.r(o);va

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.5032583347756456
Encrypted:	false
SSDEEP:	3:YJK6Hmk4:YVE
MD5:	1F0C5750EBBE38CB64D732D89E864A9D
SHA1:	E6581E282A0CA5FF121481E17E0B05059688AB62
SHA-256:	02A353CE2AA6CBD20A3CBED11AD580344534C0C465EEA42403DA6D79BC1E8BAB
SHA-512:	F7CEEB9B09E2671954AFC5052F184E054C1B2ABC29292312ACB79E3223683E2282BC1BF4CC25A14E9EABE97DF65D4D54F069A1741E571BFCAD769621804B47AF
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/.netlify/functions/locale-detect
Preview:	{"locale":"en-US"}

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:	768:1yzfdQMQzGg04WTWcg8awnHWLEB6B9xN/F7iGDXCt6R9HlDw90XamA4er:1qeAqcgI2gsN7jXfHls90Xab
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.3.40-5/fonts/helvetica-neue/HelveticaNeue.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33778)
Category:	downloaded
Size (bytes):	33934
Entropy (8bit):	5.168189179091688
Encrypted:	false
SSDEEP:	768:ittRUWYGfm71NCVwHLFp+h1/9HOdt58nSZNT9Xwmb:LNCVw3Amb
MD5:	F2249233963C4BC60854B97F5059B14F
SHA1:	D746DC255417B7B0A382CC18BBD4EFF89889B22C
SHA-256:	724B779F5A6B56F9CBB1762CB5C55662117C3E58FF44A51B4F96288415D6A699
SHA-512:	55457B5A8BB83F74C4BF33578DB06D25C4A992FFD3BEDFFAFA232F7760CE0DA7322315EEF17F9649506590F68EDE4C77CF3FA2DCADE86E3D2C03C0AE62E71C21
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/elements.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..userDefinedMRU img.userDefinedImage{background-image:none}.userDefinedMotif img.userDefinedImage,.userDefinedMotif img.relatedListIcon.userDefinedImage{background-image:none}.userDefinedRL img.userDefinedImage{background-image:none}.userDefinedRL .pbHeader .pbTitle h3{margin-left:4px}.motifElement{border:1px solid black;width:150px;margin-right:.3em;text-decoration:none;padding:0;overflow:hidden;height:1.5em;display:block;text-decoration:none;cursor:default;background-color:#fff}a.motifElement:hover{text-decoration:none}.motifElement .iconChoice,.motifElement .iconChoice img{width:19px;height:100%;background-color:#fff;float:left}.motifElement .colorChoice{margin:0;width:128px;height:100%;float:right;text-align:center;overflow:hidden}.motifColorElement,.motifColorElement .colorChoice{width:48px}.motifColorElement .iconChoice{displa

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	6.830673513981089
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcf2:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHene
MD5:	C5D9EC48029FD19025B899713F1E8CBE
SHA1:	6925D92BB7EE4277973D6B6E7469F5B59547D4E6
SHA-256:	17A3AF3C93FAA955B12BB5E28E8D802092DEEAC54C0090E9DDC9203268C786A2
SHA-512:	0685D00B0309F8B3B19183B9F0C2C9D1175807E0D91BB45C96B1482DB3B665ECD5CE3E11F99FB7C7536ADAD815C00A72E28267ED27B3FC8FA366E47D32575DF1
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..WK ..DU.N..6...UQ.94

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	downloaded
Size (bytes):	23897
Entropy (8bit):	5.309124558333512
Encrypted:	false
SSDEEP:	384:qiH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:XuGGhaXXY5TcgnCXg9
MD5:	CD29B9BC973E48A7FCD0EE7153BDF03B
SHA1:	AC3E5CF1C0D4183B2DF14C34BEBB84B3EE657799
SHA-256:	7CB58278C8F54A62C0AFA6DA0C67B3A45AAD637A0BF614E9C0DD42B73CEE266B
SHA-512:	253356199738322AE0D761A162136D91BA00018B180FF54C4D014C0B8AE4A93F5DD4D21664E8C582A4DB73F0F4265D34604D2B4C03CEF02A67882815ED328C2D
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/52.b1edaf4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.273117654663556
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HH4yOE9HEEpGlyRHfHyI:x2pHDIiEltDyI
MD5:	9C96EB3A1A2B6FBD8C9F23363579B2D7
SHA1:	D86A36124C5389D77E44271F231834342A6B7706
SHA-256:	CC794D966E83D0ACB613258C28876A513C4148E6D0A607D97A4B09A9F8C1C6D5
SHA-512:	2C2640B5B09BA2EAB5214D3ADF4563C45236A656E8D9A9A6A9E192D3FD85CE3F1CD01EFF2B00A97E99F0F4022202776AD6106EEAD83A9A33D1AC70F8D5763130
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (60187)
Category:	downloaded
Size (bytes):	730454
Entropy (8bit):	5.266840585673049
Encrypted:	false
SSDEEP:	6144:OshOlnFmwiB5fbzIWvKbBlISFKech3k/0OSRHn7HczP2pgHsCQjV0OSRHn7u6Mt:4FmwiPvmg4zP2pgHsCQjVgi6Mt
MD5:	CF2159BBE0383B2DCC10C1A29D836595
SHA1:	8AE08018DC37A68DBEC7D63503A76E674BFA4D9D
SHA-256:	1987E29DE92272D5157EED273EEA3688482CAEAD56EEC29BF754238F4694F4C8
SHA-512:	359D92534914982AC3B105CD602C0DA365066559FFD0D143C2C0006AF9282FFCF2062BBA3DC3B7F93240549BFC7F83522A9805714CCA943A105AB13316419FC5
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/privacy
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><script type="text/javascript" src="/optimizely-edge/20917322951" referrerPolicy="no-referrer-when-downgrade"></script><script> Google Tag Manager -->.(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':.new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],.j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=.'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);.})(window,document,'script','dataLayer','GTM-NXX2M47');. End Google Tag Manager --></script><title>Privacy Notice \| DocuSign</title><meta name="google-site-verification" content="io0A5nFy9g127SL6JozTz0jBKahXJ32iW2WMjRKowWg"/><meta name="title" property="og:title" content="Privacy Notice"/><meta name="description" property="og:description"/><meta name="twitter:title" content="Privacy Notice"/><meta name="twitter:description"/><link rel="can

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 8123
Category:	dropped
Size (bytes):	2477
Entropy (8bit):	7.917718966947685
Encrypted:	false
SSDEEP:	48:XGEw7dhoNHAxiTrOOSeHCvc2XkvrpFMEcZH6kdvcDge0MsUbzyl7Ct:vDNHAUrLkvyDn8akiDl0UbBt
MD5:	C7A28573AD8E4E0572990059D433FAE2
SHA1:	71002FD665C268A6B8806135FDA5322C4585232C
SHA-256:	8009907ED257E18D1199A86CF2B1E4D5AF541A50C9E31CD834F74FEECBFE4D62
SHA-512:	47EC653A1D88377A655865F385C24ED5C67E41AB8252084667C3D5784A536D94B32E33E7B4C7953299E782E48679D8FAB6FC2ED54FACB74C2AC871FB32006757
Malicious:	false
Reputation:	low
Preview:	.............n....`... . ..0.G...-k5r......l.&......s..........h.E.A.d=X.....^.qRI.m..N..'._...w.....F K.w.W......g9t.3..,...?o.j:\i.\|.........WE.~^('..<A..Y.....Nze.;..p.w#>.nE.....J..3.R...t)...p.Xt4.K......v(.....5l..Jo...i...{.w.u.qS.t .`=R.....L.....W..z.._.F....l.s....f.~c..h.G......&.......M.%...2.2 ..j<.M..&..F..-<A..(........y.a......?*.R.2...r`..60 ..gK.q ....2..D..7..H....6Ig..............+..PJ...e.v.grs\iT.\g.4...t,.\w.....K.uS.."(...........-Xqsq)"......8..b..c.R9...gQ:Q..I'0.@y......k......B].nb..=...{..pC...Q.PJ..i......T\.........p KO.SN.:.o....K@.?..U...w^v.,B......37.fx.d....{Y.z.0.......j.1...........Yf.t\|. ...'.$;G........,..Q.}...\.a.c........7`.\..#..hM..6M...&W../.fp.s....SS.R.A...Az.....<G2.\|..0..y..H..a.N..q..IE.de.3.W5U&...9`&$.q"..K.;>.h..K...xOF.OJ...SQ...1.lHw...rG.........(.S..c.8C.......X8..=.uJc.w8.x...Q.....L.....3(W...D?._t.5.l-.<.......W....)3;t............h.5Q.wy..e..S.&G.Q....~.Mu.$yK3.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7951)
Category:	downloaded
Size (bytes):	8285
Entropy (8bit):	5.244135284520358
Encrypted:	false
SSDEEP:	192:oyCmhZ5RDGwnmL1Q2oVgdTlK92bHMhgsF3F7gj0ea:ZhPRDGwnYndA8MVF3F7AA
MD5:	A59CAAE29D0AD8C65398377F51B21BDD
SHA1:	158C3C7AF006C2F3FAFFF3F55A09384A23D0CF2B
SHA-256:	AB5961246DDCDA5ACF22A32E165ED8D15758CEC5EC566F3039B1D395A68F1A05
SHA-512:	7053F106088EB0BD6A599F5AD0C5AC04345A5CCA4995EFBB04061F20CD714539F133A641EC68DC6D8E069A6C0AF8780A4CD56B2BB3DE517B3C2B2FBFC2B5603F
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/349f80dd-8f4d13fff1aeee64.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{16060:function(e,t,n){var a,r,l,i;/*. @remix-run/router v1.15.1. . Copyright (c) Remix Software Inc.. . This source code is licensed under the MIT license found in the. * LICENSE.md file in the root directory of this source tree.. . @license MIT. */function s(){return(s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a])}return e}).apply(this,arguments)}function h(e){let t;void 0===e&&(e={});let{initialEntries:n=["/"],initialIndex:r,v5Compat:l=!1}=e;t=n.map((e,t)=>d(e,"string"==typeof e?null:e.state,0===t?"default":void 0));let i=f(null==r?t.length-1:r),h=a.Pop,o=null;function f(e){return Math.min(Math.max(e,0),t.length-1)}function d(e,n,a){var r,l;void 0===n&&(n=null);let h=(r=t?t[i].pathname:"/",void 0===(l=n)&&(l=null),s({pathname:"string"==typeof r?r:r.pathname,search:"",hash:"

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4122
Entropy (8bit):	7.906100259481781
Encrypted:	false
SSDEEP:	96:L6dUUUoz8b4lDAqZUzvEXpeXcV/hPN2L0hXKdE:2SxclBpesN32L0t
MD5:	3C5F851C455BADA111C434545ABF9263
SHA1:	F65580803EC30072F0D9D562687AB4D2A88B2509
SHA-256:	DE57FF946D44291CFF4122EF129D6954911C749F52CD897859401322839C88D2
SHA-512:	11723B1C0395A9FC205ECBC9CC9F13E8355CEDB7C7BEB56FEA2054C86ADB2939B2B8871E8DD1E8864E1D95EDF6AE9C744E95815D309481FC7DA349BF69483501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....Z.......PLTE......................................................nnn......>>>.........................3........N.......TTT............S..FFF......V..!!!...............E.....$.....:::......^..Y.....P..J..@..7..)...{.......H.....vvv..f[[[o....hJJK...a..}}}'''...f.....B../..fffOOO. 6444......k..[......u......e..c```BBB+++c.....:.....-........001. 0h........<......miii..a..%.....o.sss..b."T. ;666.55{.....s........yyy..i.$a.!N. D. @.12.%,w..b.............$i.$ZLLL.!I.....cdbXXX.)9.,/U.o.=.......ppp.!+}.x.....$rkkk.._.4X.&$......o..R..h..)..Bu..m.b:..I..y.....y.Zn.fH`P..._..R..B...t...}]^\|.fx..p.Mg"A;p..h..6..i.....h}..x..rsXrZVha.`ALVrGV.}Q%VJ.pH.>Da=7BN5xJ.I).m."....=..\..n....m.....@...}.}.\|..{..uk.u?.t.ytz\|h>xe.faVNZ.iO.c>.S2....;......tRNS....[.....ujPO.+.....IDATx...klKa..._....V..U[.f..%e.sYL.0Y%.bl...K....q}...A..!. "q.#A...K.....3+9..4.}..mr...}z....U.1.h.S..).M......m...5....:.X.(RV.+..; .uhgh......)...=RZ{.R\K..

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24729)
Category:	downloaded
Size (bytes):	80608
Entropy (8bit):	5.444861898317696
Encrypted:	false
SSDEEP:	1536:vZ4wOIjgPCdL6kawNXDmj/9ELwVFewfNgNWDQoA/RguCdLyzr8gjd+yz:v76kaF/9ELwVFGDOkN
MD5:	1AAA06A8DD1D0167D5ED75932EBF2D69
SHA1:	708DBBAFC4C08F6CE29F2D8C5615FAD52F069FD1
SHA-256:	0E4067CBDC5882F5C2DDF680B08B96DB0774ED1692A1AC4414B8324AA6EEFC4F
SHA-512:	E78C1C91A0DFCCFAC55E765611912D8774AB096632C42816E47DC59FBD7E4B111E01C788CECBC0CE581FCEB0E814285D252DB9B32F6B98BCB326EE40A0E3EC7C
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/399-11944819542c0ab4.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[399],{94438:function(){},51501:function(e,t,r){"use strict";r.d(t,{Dk:function(){return tU},pc:function(){return tj}});var n,i,s,a,o,l,c,u,d,p,h,E,f,y,_,v,T,m,g,N,I,O,A,S,L,D,b,C,R,w,M,k=r(2784),P=Object.defineProperty,x=(e,t,r)=>t in e?P(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r,B=(e,t,r)=>(x(e,"symbol"!=typeof t?t+"":t,r),r);let F=!1,K=e=>(...t)=>{F&&console[e](...t)},U={error:K("error"),warn:K("warn"),log:K("log")},j=new Set(["Symbol","Text","Integer","Number","Boolean","Date","Location","Object"]);function G({dataFromPreviewApp:e,updateFromEntryEditor:t,name:r}){var n;e[r]=(null==(n=t.fields)?void 0:n[r])??null}function V(e){var t;return!!(j.has(e.type)\|\|"Array"===e.type&&(null==(t=e.items)?void 0:t.type)==="Symbol")}function Y(e,t,r){let n={...t,method:e,from:"live-preview",source:"live-preview-sdk",location:window.location.href,version:"2.17.3"};U.log("Send message",n),r.forEach(e=>{var t;null==(t=wind

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47358), with no line terminators
Category:	downloaded
Size (bytes):	47358
Entropy (8bit):	5.255490031239481
Encrypted:	false
SSDEEP:	768:QHLc09BEYZldc0ydPmDLy9IlyaJkhtgcHB5qEeaLE0P8lBSAfZ:QHLcvccq0NBEh
MD5:	2D79B64B95D2AA829A460E0D02CCA148
SHA1:	112031F4E0EB04F10227A437E3A52570C5348680
SHA-256:	257CBDCB36FEB3EF9BC1C5BDB9C777AF5AE08F0834ECE8A4CE5D74FBFEB7EA0D
SHA-512:	C114D93BFEDDA3536658D0E4BBE3D3AC4F8B30AE8E9259CA29A5517E79E0140ED93BDE608C17F04107E6E3B64E9780394D214E665C057652F4631F1112698CF1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/3.2a4c7561.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",n({style:i},r))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",n({style

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&t=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign&tip=ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	706
Entropy (8bit):	5.477970273040246
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHmmsH9CsJihyaciixc6PiM:2dDATLf3z2GmsdCsJihiiixc65
MD5:	24243F4F86F04118E67AE86E361C85E7
SHA1:	954A00D8F9AE1116CD58DFEF59849D6A53257F90
SHA-256:	120EC871612984410DC1DB86B46AA9F2017F11E23976795BCB097CB27A1BA9DC
SHA-512:	1490BB025CCBF83544A173D7F099372A54FAC924FC2DDE8C471B8C188A5F7248A3A63391A9006D33D504DCB7C702F4B6C5BEDED61B50E34BAB74333C73125809
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#FF5252;}...st1{fill:#4C00FF;}...st2{fill:#CBC2FF;}.</style>.<path class="st0" d="M-0.1,6c9.9,0,18,8.1,18,18c0,9.9-8.1,18-18,18"/>.<path class="st1" d="M23.9,0c13.3,0,24,10.7,24,24s-10.7,24-24,24"/>.<path class="st2" d="M23.9,0c13.3,0,24,10.7,24,24h-24V0z"/>.<path class="st2" d="M-0.1,42c9.9,0,18-8.1,18-18h-18V42z"/>.</svg>.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 29496, version 1.200
Category:	downloaded
Size (bytes):	29496
Entropy (8bit):	7.989298987995853
Encrypted:	false
SSDEEP:	768:sZIsPEdLkp2rQfYkiXS/KOTXm+5LGuv4r1rW5vZaM5Yi7FDR8CZ:mPAa2rQ3iGTXm+lFSr0ZaM5YEFDR8CZ
MD5:	37F2C850A3B1903DF3FD75D7B322990E
SHA1:	2AE994C32BEC3E913C30E70B7E68D99FA5B8932F
SHA-256:	66BF8BF94FE425B7150A1F8C22211F2FED20F730F69E3C7FAC4CA9ACE0101CA3
SHA-512:	D9015035FDE50281DE82B1F078F9BE1025911402407059C052A363F1C8089659EB4F124EDA5BD4953D2805CD0F6E242C34F568790CDCF289B90C0DD1971060C1
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Regular.woff
Preview:	wOFFOTTO..s8.......H........................CFF ......C...c8...FFTM..p,..........U.GDEF..L0...5...6...!GPOS..N...!...O....~GSUB..Lh...0.....y .OS/2.......N...`k.\|.cmap.......~....s.._head...0...2...6.#2ahhea...d...!...$....hmtx..pH.........@6.maxp.............xP.name.......3....k..,post........... ...2x.c`d```46..s}Q<..W.n..@....w/...f.v....s00.D.......x.c`d``~.o......f..X.0.E..c...q.......P..x..x.c`f.e....................%.\|....3 ...H......L./..f``~....0.$....4...........x..U.n.F......[Fb.M.....K....d!@.+.TY....e.....rh.p).t..H.M..)R.H.2_.:@. g.g...........{g.H..)..oD...m.....I.z.F.......W.o.(.........-....o.Z....^.=............r.s.q@.{.z...}...}...Y..[.L8C...G.z..]...5..<^....<.$8...N......?..;......C.....x;\|?...H.....=...qH_...x..6........hFs.$....j......kL..F4.!.Q...r..+.......%....T.m...V..d.B...#1...".$....Q)...J`s..]...k.&0K...1\.bN...X..\....8.}:..S..g_W=...F..`.hr*..&]....3.o._d&...f..,4Sx5.9d.........b....^.`.R...8.#....:......d..].smc],.5......<S..\.Q4.v

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1133000
Entropy (8bit):	5.073080995581343
Encrypted:	false
SSDEEP:	12288:jPu/b6GGn95mBzvULyzMESGU4xnA+MThnJsj2B:zu/b85mBzvUeN3Q
MD5:	B65A28029BDB7E84D3D4FDB6363EA4FC
SHA1:	56942F317BEAADB6EA500470AB32B53CCB5083E9
SHA-256:	EFEBB85C09C7F4A26E81C21C76085D86CDACDF594C5E596F2306B81ABC959BF5
SHA-512:	4F0A59A234A6FB3C7D39A917DC195C9A23BC2A6B67C574F2B5A17202F41813C64CA566247A7362E6DD7D3686AFD1E555952126645F2FC618A51AA5678AF7A081
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--lwc-mqHighRes:only screen and (-webkit-min-device-pixel-ratio: 2), screen and (min-device-pixel-ratio: 2),screen and (min-resolution: 192dpi),screen and (min-resolution: 2dppx);--lwc-mqSmall:only screen and (max-width: 47.9375em);--lwc-paletteIndigo10:rgb(32, 6, 71);--lwc-popoverWalkthroughHeaderImage:;--lwc-zIndexDialog:6000;--lwc-colorPickerSelectorWidth:14rem;--lwc-nubbinSizeDefault:1rem;--lwc-navigationItemVerticalPadding:var(--lwc-spacingXSmall);--lwc-paletteCloudBlue40:rgb(5, 98, 138);--lwc-brandNavigationColorText:var(--lwc-colorTextInverse);--lwc-colorBackgroundContextBarInverseItemHover:rgba(255, 255, 255, 0.2);--lwc-dropZoneSlotHeight:0.25rem;--lwc-colorTextTabLabelSelected:rgb(0, 95, 215);--lwc-colorStrokeBrandActive:rgb(3, 45, 96)

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64827)
Category:	downloaded
Size (bytes):	117480
Entropy (8bit):	5.299264180876995
Encrypted:	false
SSDEEP:	768:LovTnwT8UDVUSyF+GFW9vwiZcxRCIxKenvGvhYl7mPqvVWNRG8z+7QPdxWRSyNLh:+aqIm1RroSWd6HP
MD5:	FE803D95CB67931EFC2C6F50AF4B89FF
SHA1:	4330EFD4408C2239F08E0EA14D9AFE5041FB3718
SHA-256:	720ED245E4E6256BED63C97767A9F7818035793F86498AF38D74B5AA4A85AD73
SHA-512:	CE98E9AD530AF736870BDA5E7B43AC5DDD4D2545FD993CF6DD559523687F3A2235491616C7799C4CA9D8504DD3362A29F8606593E4F466735A58AFF342DF29EC
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17132735990001672335788&rv=1713288537000
Preview:	'undefined'===typeof Aura&&(Aura={});.(function() { .. function initAccessResources() {.... $A.componentService.addModule('markup://force:customPerms', 'force/customPerms', ['exports'], null, {}); .... $A.componentService.addModule('markup://force:userPerms', 'force/userPerms', ['exports'], null, {UseWebLink: true,IsSsoEnabled: true,EmailAdministration: true,EmailTemplateManagement: true,EnableNotifications: true,AllowUniversalSearch: true,ShowCompanyNameAsUserBadge: true,ActivitiesAccess: true,SelectFilesFromSalesforce: true,}); .. };.. if(Aura.frameworkJsReady)initAccessResources();else{Aura.beforeFrameworkInit=Aura.beforeFrameworkInit\|\|[],Aura.beforeFrameworkInit.push(initAccessResources)}.})(); .Aura.StaticResourceMap = {"ServiceNow":{"Simpplr":1696831390000},"MessageIconPNG":{"dsfs":1452052762000},"jquery360":{"ambition":1628284293000},"SettingDataServer_fr_CA":{"Simpplr":1696831396000},"Button_Regenerate":{"Apttus":1438449408000},"LMSSource":{"lmscons":1431074003000},"TopicDataSe

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (365), with no line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.983341365130917
Encrypted:	false
SSDEEP:	6:5zQ4MtMXRSNIQPELV0H0e66GIKELV0H0e3LV0H0e+nOtaLVeVEy0zmAUSrzmczgn:58Bt4RSCQPU+0eeU+0eR+0esOta5eVAy
MD5:	06B2963B029C0824382815165BFEA73E
SHA1:	DE23FB128E2589CF384603CFBB7F6B7BEF969B05
SHA-256:	EC3A84E593065A50CD77CE9FBA273B4196936940C0813CA248B045DF2E2C8EFF
SHA-512:	1CD97E2DB15DD10C65D22E7EF911E6A6DB742F34574F91743A9C6CC7922C7FE0CBCED0AE837EB6C43617D23FAF959FF3C9D1B3ED49F44FE000FC191FFD60C002
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/25.c695453b.chunk.css
Preview:	.drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12px;border:none;padding:0;-webkit-transform:translateZ(0);-moz-transform:translateZ(0);transform:translateZ(0)}

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999064543784177
Encrypted:	true
SSDEEP:	24576:u1kMrp4MP+JGYLc0VUP50bR9TRVjZ/a374UPCzN:u77+JGYooUB0bXRVjZ/a3dCx
MD5:	A7C31DFCC56DE50DC8A217F925B96886
SHA1:	8D40520D0A88DDD08FB1D54AFD6E6AFC462D44F7
SHA-256:	6E9FD3A93F777CA2EB12C1F17B1438372DF8A27C89BE654C4A32440AA28D22A5
SHA-512:	A442DCFB6BE0FE77B23BEB5787B359083403D0EE602216A0CEC8F75BA6C8B3A2452A3FA8533BBA7BFDE34B9D4A02995CCD255C2BF645E38FC00EC17F62D4DA1D
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:1
Preview:	`.P.(....w.i.l..k...;...UT...#y=....j......x]!.&....._..<..u..&7....C(....?G.x.......(.......m..~.....02....I}z>6E.w.!..EM!+..-o..Lc......u)<..~....O].B..t...w...L..E".....+..].3J...M.$...8.....I.. u1pk2....+kgD"..ig.D~.2pQ.uM?.p.7_u.:.,.H...u;..!.=......d:qWf.K.?\.:.0...h...UPY..k.Y.m......>%`....G.c.....G?7.H.x..B.j8i........m]@Vm...bC....g.e.%\|.VM..I.g........6...q._...U....ux.tD5a..p.Q...)nUs.D...\....>[....#/gh..P..Yv...h(..:IS..k$h.vI..VY..8..w)..}....)......\....+.]M. Y.0u.2.G..DW..im......b{!...q.Cy.>...b.oe..0Y.j...S=.>..A}......rK...{.O'..-.....!e..f....eq<.f9..$.$K!=.......)..o.....[{.....;.QN..P.....n[..6....0..6.v7G....K.a.....D..P..>..2!....t[?.`\|y....H.........^5%...sJ.v...C;].o....i.v.N.f..g.[.y.a....j]...t/..'.........;..\|.....S5d..O..Z...(.mw.P..D.E\..x.1S....2...Pz.K..4......[...M.H.....m.y..;.<^.q..=n;.?.......B..!A.I..W.m...=8.<.'.....&...Go....Q...M..6O.o..\|..MF....o..p.c..~.ub...i.b.Y..`.Q.$.Mt..z.0l..L...0.s.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24735
Entropy (8bit):	7.60306613036859
Encrypted:	false
SSDEEP:	384:n2LQE3dzJl5AoZ4HtsQzqBV4ACzY8/29CkvDfld3osYk:n20EPAoZ4HDzqB/V8/0ffl1v5
MD5:	7A6C6802AA3C2D92E0F951DE9E9154A1
SHA1:	F62F56AEE69CD4F32A6FA10E7A5619D69AB59E92
SHA-256:	9C04585BE058846C0121C04C744191476317105FD6167ACFA54A4DF64242CDEF
SHA-512:	DF7CB63A02DB8FC97BA887B7634A80485BC95D818C06017FC28EC9355C5F0BB6EA2FBF04D96D1099AA5120A8568D2C3F9F06ECD3C7AF338C6F61C9D798DB3F1E
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3P8Il3939FVKkbMzMvQNTL/23a1dd0f90a8001ff30959f33336b5f1/productUI-docusign-maestro.png
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a...`4IDATx.....\w]'..'..P.....().(......VE...a...&E\..)(.....*4..W$......t........6..e......._........\|nN&3w...w.....;s.33..9....................................................................................................................................................................................................................................................................................................................................0^...`j.?vxo..g.......X..........L.fl.......6..L...`.5...'O..~.....hA..0....d....F.....`.....S.C.6..F...`.............v..f3..=...N>....L.1....T...6..k.q..#q.Q............L....ULp...`..........`.....S..lfw.....7......a....).<th}......U.;..7.....`.....S..1.6#............I@..0.......?.......~..............L.f47.h6o.........hl...3.....y...UB..Q.^P4.....[.....V...=...c....[.Px..[u.@..........P..73$.............']....H..?O>\|rG..D..n.......

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71782
Entropy (8bit):	7.872762967665871
Encrypted:	false
SSDEEP:	1536:wmZn9q57N+t1L6i7yXY/1z+weeN8+pBdADbp6n:wE987QLGip1z+we+8odAD1A
MD5:	D45931E558F345E8CE7C252B7AEA0CF2
SHA1:	C46FEA1E10741455A8F56E9F83D4BA045894AD4E
SHA-256:	354C32B42B1F8584A6C3477F6C673D7A24722F2BF51A4285089A47D4FB5F13C3
SHA-512:	263E39D3BF4E0B0ED500D2438DFCCC15218F9E2FF6C08525030BF6FA5BB9B169059C94C2F9D17182319564ACBBFB8C09A58E1E2E24BCB3121B2B70B2382D40B3
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3DK107HA72YisXutlRAbk3/fe56a48aa0ae33bcaccb287e47715374/productUI-docusign-navigator.png
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx.....%Uy..U.(0 .N...#...MT$ri>.g...... &B....Q..%.p ..f.D.`....v#......(W'.M^....A.B........jU..s........9{..m=....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................;lk..&;...3...Iv.3n.d........N..:..\|...y..$IR..]....{.............w5..C...F...0t.....3......0..o>\|5....-C<s...w..:m..h.m.../&].U.&[}...5g..7m.....:.....3..\|47......'.......Gu..Y....o......J1.[AI6zo.)&.....5a. ^..G..b.y[.l..3jc.].W.}>.b.....9.g.g..x..x>..%.o...]...g..a...V..Wy...h...-..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1576 x 1184, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	207158
Entropy (8bit):	7.963624648532845
Encrypted:	false
SSDEEP:	6144:gg+KTosVUo6STP4DjuxcSP/2hKttDZNEs:gg+KTpiU4Djux1n2haZNEs
MD5:	3AB004A1051B551CF461646929EAADA0
SHA1:	1A4CCCD10CE73A0D3023546F1F41DC5B0F029FB7
SHA-256:	3E868055F70214B873B3FDFB32A9849D581FE317EC8D70493F05470CCDE157B3
SHA-512:	B54DE968B4FB4F031282EA52F8F698FF56895AF3608B247AEC2752C0095174B010B143EC894FF6103B169EF0A8FE1EB3F0496D47160928D23B8A474C52973B86
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(.........U90.....PLTE...L...."p3.L..K.....I..H..K..J.....G.....E..J.....F..I.....H........D.....E.....\|.C........{....54>......m2....ont............B....E..A.......-+8......'&/l2.SRZNMU......}....K.c...j1.@....m2....a`g...n3.i1.h0........~}.?........109i0.hgm...DDK.~.............kjpg/.f/......o4..........QQX......KKR........................................32;...k1...p3............]\ca-.HGN...d..ZY`.........$#,............>..............e/...{z..................<<D...........dcjrrx+3.......b-..........WV]...vu{... .(....@?G...............yx}98A.....................#........................BAI=.........l3....................<.....EBSIFV...P.....A:X]%....s].;..d.tF....7vN...A.YQ..G._wI.'N:.)....`C 80.q.Y%.[".R......u.u.t?.fS.TFz.'....%.IDATx.....0.D+....E../.-Kq.~V....I}......... h..d.?../D./.-T.X.-.....K..../..sT.8..o...y...$N...._.?..>.....MT.X...o.y}\Y..&..;...._.?...xOf.*...."e...L,.............T....Ki^.R.g..}..".

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	110884
Entropy (8bit):	7.9493895649209225
Encrypted:	false
SSDEEP:	1536:v0Kegb1ruRxSKivEs9FFvE2KtJLHSk9jH43HzesEfPCavXIqMCckP8Gr7qe2:v0WbBuvSKivfPe7dL5XCUXIhAZn2
MD5:	70A935AE1B5A8AB4CB532D72F6A6AF56
SHA1:	E522825C653F1D71EFB5BEC5E93D14B62BC00ABD
SHA-256:	D05737920C20F3C9B626D40EC72493B52A7B7F9E4B9586892BBB56797E53C0FC
SHA-512:	52478C8AA1467DEC815992B5A45411305D8E630FF84F5A256578CA5425DC7F4C0F8D2E824F10177448A1ACA9166C727F33DF0A6A3DCC77BF53561ABA077079A2
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/7h7Qts9Xjqh2gfBMqrxMBn/ee86b2d2bcb3bf0d93a8f3d2e6037e81/woman-holding-a-pen.png
Preview:	.PNG........IHDR.............RcmE....PLTE................."_B+X>)rV:cF-[@,...(.....jN1......nQ6$##...v[=\|_@.........fI1&..S:(fK,... !(......M6&.../!.......('* ..2% ...PC<......G1#rO0(.?}Z:......wU6 $0...#)89) ...J=7............x...qU^F5.........cG......*4HD83...iIA,!WJD::@658 .....P=...............-2.kN.eYrD1...^RM...HTl.VB...cP....6CZ.wWDGMAMd.R/.../<R...>1,....\F...<?I...nhd...POPaac........._N...>$.C@@..uagpYXYmVG...~K8........4..{......y^...MGFpmn.rf..}....\Q..P^r.........laNT^}SH.jY..tdO@dZUh=/vJ>3-)..fV]gu_MFLW...~.........wuxR......[..y...}fX.zo..hmbZ.....\|~.t..kE9..........pK]5&p{........(cv.......~fTd\|.\|mf>".\|Sjpz..}....{r..]m}.....r\|oeF..i~....Aa.._:.pZIy..rf......c..\|..CX}...vh.....`t.Ej.q..V..Yk...n.......#l.^.....)Ir.N..Z.[}.Or.x.%.4d.uc."1.+=.[h.>Q.=I.~j......4.`....IDATx..oP.Y..K...%..-..ZE4 ....dk.d.t..8#:.5...2.1....4.".6 .....P..Y....3R..!2(.....g.O.....9.{.....$oB6e...9....vH..C.f..s...%..../h.g.l=..6=...6^.d..........6D....tj

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52313), with no line terminators
Category:	downloaded
Size (bytes):	52313
Entropy (8bit):	5.3303524261891395
Encrypted:	false
SSDEEP:	768:wSDv5zYoNbyP+FUJcBtopGTaY/zcAcbcVvwxaTLYqj6cw68KK0oZjjQmaLehU277:tVP+u6J7jJQzbM
MD5:	EEB141D15A5542CC12F6697498A4DAE4
SHA1:	31F378B1AF777F61E9242FDD59C53533CE1BE0AD
SHA-256:	80CA50F229E6A99C3A0E04D6E6B2AA216152DFBC3DD81B8A59E2934782F4328D
SHA-512:	BE195B1A1B0F446F3840CD609E2E4D2CFB55C246390DDCE31552299119CEEF872F4CBAB59A4F27F84D86F07FBC42E7195B22AD797397E308119D9A7CA056BBB0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/24.f2a14bf3.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return m}),n.d(t,"p",function(){return h}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	230216
Entropy (8bit):	4.954314910960003
Encrypted:	false
SSDEEP:	3072:MGhwolmFKJvdcZ8vdm7lizSNc8ZZtVk8GtsjEsW8No:MG+EmwJFC8s7lizSl/tJGtsj/Wj
MD5:	00392A633A10AB637E7BB4C38DD478DC
SHA1:	6DC6990E956F92AF1B4336C6A3518077D04011D5
SHA-256:	A06071B821ADA3867B261DA38262C4570FB2E6CEFCA70F57310146C6E0A819D2
SHA-512:	612F6B271F56D1373AC9327A1E51B8232BF8BCE178ECDAB5DE24CE8A8A662B279CEB7F4606903F7522B5A3063551A70FA2FC0669DCDBAF2B578F6A793D9BD530
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/jslibrary/jslabels/1712949258000/en_US.js
Preview:	LC.labels={'ActionBarButtons':{'ActionBarHelpChatterDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPEnabledFeedTrackingDisabled':'Feed tracking is disabled for this object, but you can still customize actions for Lightning Experience and the mobile app action bar. Actions in this section appear only in Lightning Experience and the mobile app, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPEnabledFeedTrackingEnabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarSectionTitle':'Salesforce Mobi

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454813614476191
Encrypted:	false
SSDEEP:	3072:+t8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:+tlWBZ7O0bvQQGArHu5GKn8
MD5:	E23E38F8CB36F24DEEA353C664F6B5E0
SHA1:	03223F5E52DC9B0515C09290D5ADDD459F2E9BD4
SHA-256:	BDA2CF571D7EA45F68AFCDC87F968090DBF4BBDEC2C7D6D19CE591B3980C296F
SHA-512:	3FB4B6A4C0B83E88B81ACA84FF9C86EF38C68EC5D5D32FE22F8E24E1B2CA22EE79588B02035FEABBC85D285C8DE31CB5205061725548E1D624CADACF0A47B397
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25715)
Category:	downloaded
Size (bytes):	864099
Entropy (8bit):	5.434986151507187
Encrypted:	false
SSDEEP:	12288:VmyL3XeZ9vn9W6HMqCvys1IZwiznuxN7WdVlOmf22MdwtdQOS0trdB2WURJUE:VzeZ9vno6HMqCK7ZwiznuxNitBRURJUE
MD5:	D61A097E0FA04FF81E4A1AF4060D74BE
SHA1:	334AAA852C27EDDE798806E7D69B7719CADDD653
SHA-256:	091C5F07080472B093D22C2989375C7006AEEB8905071CC9C90E07ADE8C967E0
SHA-512:	93B4E87223E4083EA7F658D56290578E00D2904FE08FCB11D12B9BF530DE1AF5D118BBDA0BE58A09026C7D396F2DCC1460764E76A105F3CC08B2BD5BB251BD0A
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js
Preview:	!function(){"use strict";const{assign:e,create:t,defineProperties:n,defineProperty:l,entries:r,freeze:o,getOwnPropertyDescriptor:a,getOwnPropertyDescriptors:i,getOwnPropertyNames:c,getPrototypeOf:u,hasOwnProperty:s,isFrozen:f,keys:h,seal:g,setPrototypeOf:p}=Object,{concat:b,copyWithin:m,every:d,fill:y,filter:E,find:w,findIndex:v,includes:T,indexOf:N,join:M,map:S,pop:C,push:L,reduce:O,reverse:R,shift:D,slice:$,some:H,sort:I,splice:P,unshift:A,forEach:B}=Array.prototype;function x(e){return void 0===e}function _(e){return null===e}function F(e){return!0===e}function k(e){return!1===e}function W(e){return"function"==typeof e}function K(e){return"object"==typeof e}const U="object"==typeof globalThis?globalThis:window,j="$shadowResolver$",q="$$ShadowResolverKey$$",G="$shadowStaticNodeKey$",Y="$shadowToken$",X="$$ShadowTokenKey$$",V="$legacyShadowToken$",z="$$LegacyShadowTokenKey$$",Q="$nativeGetElementById$",J="$nativeQuerySelectorAll$";U.lwcRuntimeFlags\|\|Object.defineProperty(U,"lwcRuntime

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (57946)
Category:	downloaded
Size (bytes):	598715
Entropy (8bit):	5.387782296499842
Encrypted:	false
SSDEEP:	6144:S+RhOlMvKbBlISFKech3kk0VzK3ozScUhW6M9:SNVzK3ozScUhW6M9
MD5:	D9FFD39D0ACE8559C419C82207F1105C
SHA1:	79E8C2511849F53466C73429E58F50B765986D3C
SHA-256:	0C4979838AC4A444845969A490A6CFF659EBF2636B272B785A58BF912D76A290
SHA-512:	E2590B07164C4BE332855A093CE4656FE4440D437921E6C386F34A942995C6580F40816885522E970ED52B1BFC6BE0366E50E21141CCBDAE1D5C43BBFD621297
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/intelligent-agreement-management
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><script type="text/javascript">. window.dataLayer = window.dataLayer \|\| [];. dataLayer.push({'event': 'DS_optimizely_event_hold'});. window.optimizely = window.optimizely \|\| [];. window.optimizely.push({type: 'holdEvents'});. </script><script type="text/javascript" src="/optimizely-edge/20917322951" referrerPolicy="no-referrer-when-downgrade"></script><script> Google Tag Manager -->.(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':.new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],.j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=.'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);.})(window,document,'script','dataLayer','GTM-NXX2M47');. End Google Tag Manager --></script><title>Intelligent Agreement Management (IAM) \| Docusign</title

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	225878
Entropy (8bit):	5.3173493547118
Encrypted:	false
SSDEEP:	3072:XmqIrl5phQk+VC2xILRcP2QBYfoSjqkxtxFC2b8L0UzRrD:gS2qVkxtxFo0q9D
MD5:	D320E83A1B98D0793815B4E22B96825B
SHA1:	5EFB94C459DBFA3C3B01CD8564066B81C6906A01
SHA-256:	28E132EA525A5B852DC1A77FCADC939BA1B70D68F321DD2DDEEDC4B8A8CB93EC
SHA-512:	6E27FB634DFED287B4D8043C2E7C5CB0B078A42BB5C29475CFF54E0349F394CA9D6A25F7366FFE6DB53F669B5EC5DA9C20E8B4602CF39F8C1CF6E87FF30F9203
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/conductor
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 548 x 586, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36300
Entropy (8bit):	7.943983754851478
Encrypted:	false
SSDEEP:	768:Ne6bEJVfanHKOyTowvlZuxqPaJYEti2+b44ehtE8GsxTgn7tFBia5/XkXXXX5:ggEJJNHLfPa/x+8Jt7nxkn7/R5/XkXX5
MD5:	8D358B0AB4E42697B1563389A45E2AA6
SHA1:	049700E9C9FC729AEDB16B1BA4578F766D6A7DC8
SHA-256:	4E786EA49BBDBEBB1FA4899EE62FBFD3B227D01BC980C1874A3FFBBB7D04DCBC
SHA-512:	67FB8A38F6D69DDADDEDCD14D11583A93B9C95A304B5098BB76AB8691CF7DAE27458720659E9DDCF223493705AFB6959D87C84E75CAC7177A5C9618E31D10098
Malicious:	false
Reputation:	low
URL:	https://docusign.file.force.com/sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId=
Preview:	.PNG........IHDR...$...J.......^Z....pHYs...%...%.IR$.....tIME.....,..;. .. .IDATx...}t[.}...H.A.#ZN..l ..........>.......-...y.]Y.K...m. ...X=..F9.....4..t.....n..S..r.v.HS..6....t............O.IPW.>.sp$.../........\..CDDD.A-N7@DDDD.....8N.....8N.....8N.....8N.....8N.....8N.....8N.....8n......eN3=}.3...x.......$""rKiZ@r....g.?tl...l......'.......1G6{....N....<.........l+o....91]z4A.n...&8....A...=.J..f)....{oNs..CL.....o...M.........9.p..S.....Z.1.C..'....$.g...8./....5.".D.....{S..Q...H...!.[.v...I$.9.^.s%d...'.....1...\.b./..}.Z$""r.....A.n...[....:......@...Y..'..`+._.....n....s.c..n..<.A....p.9"""M..{H.9t.(.?x.%.$sY.tQ......?.q...g..{..S..ajf.72.l.Q....R.e..md.c....&-v...CY...-+...,...../...C...fn1..I.....g..[z..b`....~:.;Y3Q..a`..5.. ...a..b.{:.....?.!.00.sy.......E.......Ls..j.'.....Boo...}...Mb6.._...4.[...........j..aDI.i.,..y....,......x2..T9i.7........^.........s.:.""".V$ ..<.A3&...X.....O.....S.....p.X..{.4Z..#......L.......O..{UfgNp.<.J

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&t=Privacy%20Notice%20%7C%20DocuSign&tip=ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:D9inuSqaY:D99SqaY
MD5:	3E9B2C6CFE8DCEDA1C67FCD756D85153
SHA1:	521E7FCB2B51D2B4A8592CD61A48517E09239BAF
SHA-256:	0C2A9E97033AABD2D4ECA748786555F48BA8530DE837CEEA6FFCB1AF69F0CF44
SHA-512:	F8E07031538CFAE237D799696A83CC9D53E34916220BF2FF47BA83A2DC284E20D253F6F6C776BD5D28E8531EF0115BB69C423C72B8FD298BFDCA3FB9FF90537C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzvU6P7wsYCBIFDZSQkvoSBQ2lkzYk?alt=proto
Preview:	ChIKBw2UkJL6GgAKBw2lkzYkGgA=

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999642248386902
Encrypted:	true
SSDEEP:	24576:bLZLzC9o76O/IMhHTCfsFX1+R9crJKCt9AKSSJDvzH2uNx+O:/1Cy/IITms3Q9qJz9A0JDvqcx+O
MD5:	DC3B0E31C941C9BA8626107D04142C6F
SHA1:	8CFB84ABFB7C22C9F6FF4068574394E25C182CAB
SHA-256:	CD6AE888C97145C1F2F2244BD69BF5B3BFB96816F74F71BFE80C038392AD247D
SHA-512:	8F06CCEF3CD3FA981E633F26EB706CAE1A3C47E853789B56D06273667E9C6038A49B932AA2BBBE7E84A007B7BAB381DF991F289C98EDF475EFCF5ACAB77B16A5
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:7
Preview:	[...,....e.K3_.....X.mgs..s.....#p..Y..Sn..<....e..lki.r\|..U4..LM..s..#..Xu.s+..n> ..H..._&..D.d.c.....N.<}$WU...pv......q...}!..T <,.]T.0.B.r./~v.9.n.G...W.}2...#.k..q...6v. ...vLipO.q/%.J....;...L.\|V....rs..Gx...q(.D.0.y.\|O.....qC.....X.^.n..\..S.....t..Xbx.>.@..vTQ.w7... ......."....}Ii.......Y7....'......0.....9P...[/.7X...Lj..b..g...l.3]..@...;y..^n.....n.'..-...O...pf..\|C.......;.....H.:1W>P.l..l.)......g..S..>\_....!\..\._...__.k)..E.L.l.....E..?......s.>S.v.ct...`WH.}.";....Qj.z..q...'.i.UR^.n.E\|.RI.L..+...0...k..E......Vi..=..a.AO....8vTS..&....r...\|8....R.~@.Cl..q6.HL7....V.]:. ...qg..T.3n.1..B.?!....v:..UT..*.f..=.(?........D..^..k.R.....7H..Zap.....02....;-R..V.L.YK..$r.tH$M...?..0a.Q.p..F...".A......\h......&..%...L..0....e..u..._.CX.....e......h.J"....y....6i6.D...X.[<.....}..G...s..H.2.Dy...j@~m.....h.6.....!.,(...'".z.E....i..O.xh...<.p..fRM..B.^N.%..F(.g.o.......:..........n-.......v.o~\|.i...v.T....."'...s.].5.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1576 x 1184, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	207158
Entropy (8bit):	7.963624648532845
Encrypted:	false
SSDEEP:	6144:gg+KTosVUo6STP4DjuxcSP/2hKttDZNEs:gg+KTpiU4Djux1n2haZNEs
MD5:	3AB004A1051B551CF461646929EAADA0
SHA1:	1A4CCCD10CE73A0D3023546F1F41DC5B0F029FB7
SHA-256:	3E868055F70214B873B3FDFB32A9849D581FE317EC8D70493F05470CCDE157B3
SHA-512:	B54DE968B4FB4F031282EA52F8F698FF56895AF3608B247AEC2752C0095174B010B143EC894FF6103B169EF0A8FE1EB3F0496D47160928D23B8A474C52973B86
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png
Preview:	.PNG........IHDR...(.........U90.....PLTE...L...."p3.L..K.....I..H..K..J.....G.....E..J.....F..I.....H........D.....E.....\|.C........{....54>......m2....ont............B....E..A.......-+8......'&/l2.SRZNMU......}....K.c...j1.@....m2....a`g...n3.i1.h0........~}.?........109i0.hgm...DDK.~.............kjpg/.f/......o4..........QQX......KKR........................................32;...k1...p3............]\ca-.HGN...d..ZY`.........$#,............>..............e/...{z..................<<D...........dcjrrx+3.......b-..........WV]...vu{... .(....@?G...............yx}98A.....................#........................BAI=.........l3....................<.....EBSIFV...P.....A:X]%....s].;..d.tF....7vN...A.YQ..G._wI.'N:.)....`C 80.q.Y%.[".R......u.u.t?.fS.TFz.'....%.IDATx.....0.D+....E../.-Kq.~V....I}......... h..d.?../D./.-T.X.-.....K..../..sT.8..o...y...$N...._.?..>.....MT.X...o.y}\Y..&..;...._.?...xOf.*...."e...L,.............T....Ki^.R.g..}..".

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	7.372454032832544
Encrypted:	false
SSDEEP:	12:6v/7VENaMJ/j8B/p1Nj9HCyQB7DydcSbywhiyB9F1An1KL6gbFzBwoS4/1Kxnrrv:DNnoB/prjAySDy8whvBdL6gbFzVKVrrv
MD5:	C2607F54138ADAA863040C7AAF919ED8
SHA1:	DB12AA38A7E7D7C2E0153E9A2D08A2D38732E456
SHA-256:	3D41BDA6BBDB76A117B7B6F0C41CDAEA79F96140AF54B2B8BDF0024D8E8B850E
SHA-512:	A01089A065BB1561E56D68DACACD9218637A6F88E1DDFE0563B677ECA8120422C71329BE83C2F81C30CA50F4123F34B24DF8F13D98E36E3FA7AEEA11241E9DC9
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/resource/1712837356000/DSicon_favicon
Preview:	.PNG........IHDR...@...@......iq.....pHYs...........~....JIDATx..1r.@...eL...K..D..G.. {....'.s..'..l.Lz.4)-..4..9-.P...A.+..........=1;.p.....]..I.$.=.+c.C.(.)...p.........Y.=.SX......d..X..<'5I.:#2..}...._.W....IM....j=y....#....R..\|...$...X.........n.i.......2..\.^H..Y.C.+.....0.....d........S..q...k.$......;5........$.OO.;?'.v...C..e..$//..s.......PI.P.....r$TZ../....X.....I...(FB..._....N.d...g...Z.p.t......K.0S....P..#V.)......H..........{...H.1.........$...dsP...e.t...H...}yh....+cf.&....T.d.e.y&;......K........w.7q".K......M.0.~<^F.y......`..P%.....-..&..V....i.....V....i.....V....i.....V.....@....H\........../......IEND.B`.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3896
Entropy (8bit):	4.786686051422741
Encrypted:	false
SSDEEP:	96:JvfEcgJcu5leSCSvraBYw9o01tedRnCKEpyWgoY:5EcgJ0SDvraBc0EEp+
MD5:	855476199961A10981ADCA7432CEC048
SHA1:	7995725A0CAC73EB6A2A1B5A8D5B162DBF47988E
SHA-256:	6DD60FAA0E35F2DFE342C452ED414A084D384D11793BD0F0EB03C2B1C6F1405C
SHA-512:	A9E61582FA18BCC1DD57DE8A7C194BAB0D6F733897F541A6E13B94906ADC115D65004F5A2649919FA8B8545F0C67C9313A14EAEAF42C34F630DA13CD38E17994
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path class="st0" d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4.....v48.8H1060v-125h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2.....C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path class="st0" d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9.....l0,0c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4.....c-4,10.2-13,19.7-31.1,19.7

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289454531
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6141), with no line terminators
Category:	downloaded
Size (bytes):	6141
Entropy (8bit):	5.412388424157133
Encrypted:	false
SSDEEP:	96:EQvUKvaRiF7grvVZ7IRn+DVkrD+5qk2NHPmWlewaN9kVvngpH43X6C+:DpSYF7mvVZ7IRn+DVk3+kk21uWlfaN9d
MD5:	44C56AE0F8BD42AD553B7316B388EA1E
SHA1:	07D8437020F67D97308E36ADA14A22538500135B
SHA-256:	BE4142CD009204F9C6B524AB8AAC0CBBDB6B552F26FE4973C12664DA04F1C416
SHA-512:	F8FE27C24B6815C0B1EE1654CF5B78D3AB92F8F850350326F7EE8117C7802D8064F0724FF8851B4A26C3015A0EA6DFDD3C7FC9B827490577117FDACC6CF819BB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/runtime~main.58de437c.js
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.apply(f,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<f.length;c++){for(var r=f[c],d=!0,t=1;t<r.length;t++){var n=r[t];0!==a[n]&&(d=!1)}d&&(f.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},a={6:0},f=[];function __webpack_require__(r){if(c[r])return c[r].exports;var a=c[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,8:1,16:1,23:1,25:1,27:1,28:1,30:1,32:1,34:1,36:1,37:1,38:1,39:1,44:1,45:1,46:1,47:1,48:1}[e]&&c.push(r[e]=new Promise(function(c,a){for(var f="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"1bcc8082",2:"31d6

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3777), with no line terminators
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	5.201597179155406
Encrypted:	false
SSDEEP:	96:h9zMCQ0G6KAbuGQ2f4BKrnmPuv2060qWa7yRtp1n1VdW6v8CS:fMCLXfvP60jWyH/h0CS
MD5:	12FAA2B69DBCAF002B66F9071D8D0978
SHA1:	2D681E56ABADD90CC10631AA01554E4CD1A609C2
SHA-256:	919A2F39571110A63107EDB4E885ABF3734688DE0928137933DC717D185BD657
SHA-512:	454A89741ACD2C6C255941EA40ADD37C17041BE228321757D16D06E774E27F46BDB9E831711A54BA37B12C808922E59FBE17663D8D60EF1750DECCA051C4BD18
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/webpack-a0deeec5c85c92d3.js
Preview:	!function(){"use strict";var deferred,leafPrototypes,getProto,installedChunks,webpackJsonpCallback,chunkLoadingGlobal,__webpack_modules__={},__webpack_module_cache__={};function __webpack_require__(moduleId){var cachedModule=__webpack_module_cache__[moduleId];if(void 0!==cachedModule)return cachedModule.exports;var module=__webpack_module_cache__[moduleId]={exports:{}},threw=!0;try{__webpack_modules__[moduleId](module,module.exports,__webpack_require__),threw=!1}finally{threw&&delete __webpack_module_cache__[moduleId]}return module.exports}__webpack_require__.m=__webpack_modules__,deferred=[],__webpack_require__.O=function(result,chunkIds,fn,priority){if(chunkIds){priority=priority\|\|0;for(var i=deferred.length;i>0&&deferred[i-1][2]>priority;i--)deferred[i]=deferred[i-1];deferred[i]=[chunkIds,fn,priority];return}for(var notFulfilled=1/0,i=0;i<deferred.length;i++){for(var chunkIds=deferred[i][0],fn=deferred[i][1],priority=deferred[i][2],fulfilled=!0,j=0;j<chunkIds.length;j++)notFulfilled

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74516
Entropy (8bit):	5.505393259268924
Encrypted:	false
SSDEEP:	768:Yzc3vzcCDQG7x2GEefEcY9VU5gBFELVQrOJsjJabPN7bfE3lslJZ0RVBbRjIhV1u:mYbQGdB89VGQrOJs3z0V7Wb
MD5:	3D2EECFEAB24C42F510811F441FC9BCB
SHA1:	54132CD97C80B587F8397D6E721F59C7ABC12DB4
SHA-256:	5DC5CDFA5ABE4D19100A5C64466E15878D12979C87845B5CE66F38E1CDE57ECA
SHA-512:	7BCCB4CD32085A7DFA84078EE913FD48F5AAC4CF315AA29B681DC157ECDAE9DD7BE377A6B041CB5F413A9661CFDF9F97B94DA79EB502FC89830CE5A0FCF010E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/1.0ca46fe3.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"),r=n("TbSn"),i=n("ERkP"),c=n("0lfv");function useGetConversationRatingMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.l)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.f)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var a=n("s8DI"),r=n("da4L"),i=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(i.useState)(function(){return e}),c=Object(a.a)(n,2),o=c[0

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	187519
Entropy (8bit):	5.751941377992311
Encrypted:	false
SSDEEP:	3072:UcfH6UY1/LmYtM0jq44Xa/a/mcdoappGz+qt8aWzlgABwqu:UcfH6UY1/LmYtM0O44Xa2mcd1pgBt8av
MD5:	C96E1782674435046128C9BCCCD8F73C
SHA1:	AEFC7A07E7B823DE993A28EEBE9BBEACA5358E7D
SHA-256:	8272EB74DC1585CB734F15ACCE40241CAF938B326A07A55974290564D035676A
SHA-512:	9A12E1478F9241AF6A026654EA09B0470A368CEF2991BB717459B1700B3A52BA64480F4367E87DCA05349A927C412B4D3C6F64541989AE85439D0AD144B9B4D5
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/jslibrary/1699262264248/ui-sfdc-javascript-impl/SfdcCore.js
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. /.function ApiUtils(){}ApiUtils.getApiURL=function(a,c){var d=window.location.href,b=d.indexOf("/",10);return d.substring(0,b)+UserContext.getUrl("/services/Soap/")+(a?"u":"c")+"/"+c};ApiUtils.getSessionId=function(){return getCookie("sid")};.ApiUtils.to18CharId=function(a){if(null==a\|\|18==a.length)return a;a=a.replace(/\"/g,"");if(15!=a.length)return null;for(var c="",d=0;3>d;d++){for(var b=0,e=0;5>e;e++){var f=a.charAt(5d+e);"A"<=f&&"Z">=f&&(b+=1<<e)}c=25>=b?c+"ABCDEFGHIJKLMNOPQRSTUVWXYZ".charAt(b):c+"012345".charAt(b-26)}return a+c};ApiUtils.to15CharId=function(a){return!a?null:a.substring(0,15)};ApiUtils.getId=function(a){if(!a)return null;a=a.get("Id");a.splice&&(a.length&&0<a.length)&&(a=a[0]);a&&(a=ApiUtils.to15CharId(a));return a};.ApiUtils.soqlEncode=function(a){a=a.replace("\\","\\\\");return a=a.replace("'","\\'")};.functi

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.498990120587625
Encrypted:	false
SSDEEP:	3:fFwNyhIeXVUI2DSUVAY:fFvfFUM3Y
MD5:	E7148C1DFAB81BC8459AB0655384DC85
SHA1:	664A6D4FF3DEE8A2F1846F8575AF7E63D052ED2F
SHA-256:	F6E29874FB94C03AEBA2EDC21E4204ABADC8CD671AA07366CCFAF40F82CBD864
SHA-512:	AF4F78F1FBB2273A522B496B37B399CA0CAFFD76413789E55B06022DB8D83EF804F6B38D19B88876DE8391B49EEA206EA5FBF8E8ADF5C09B5BE5D78A52590933
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.css
Preview:	:root {. --sa-uid: '0-574b2083-e644-55af-4eb8-953600e21e55';.}

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.091615510283559
Encrypted:	false
SSDEEP:	24:YD+u4l/ElD/yVQRSA6eU72GhZcHRVIsbA6eGdehL72PKr4D6lfJZ6Z3a:YDLGslDqVCS+ROsbKNWQya
MD5:	5236BCFCFF0CECB5FEFA2567E55DDF28
SHA1:	23F7654025A58A746FD17B697E8BB4FDF2F0A23E
SHA-256:	B66A3C6B9B0DDED0FAD92574EA0A964A4FA15A98509B7D8257EA70A2561CDFDE
SHA-512:	99EA2A90AE410196669F5C4CF226498861F43963FBEE5AF66CEE7D176A325210EE67FC2561CAD4E7AA1E6D9BA884E73887CC54BD5D2192F69D1CCF34826F011C
Malicious:	false
Reputation:	low
Preview:	{"id":"dc93ec4a-bc43-427c-9a83-8756e73f61dc","version":"5","headlessMode":{"enabled":false},"languages":["en-us"],"defaultLanguage":"en-us","apiEndpoint":"https://api.usw2.pure.cloud","messenger":{"enabled":true,"apps":{"conversations":{"messagingEndpoint":"wss://webmessaging.usw2.pure.cloud","showAgentTypingIndicator":true,"showUserTypingIndicator":true,"autoStart":{"enabled":true},"markdown":{"enabled":true},"conversationDisconnect":{"enabled":true,"type":"ReadOnly"},"conversationClear":{"enabled":true},"humanize":{"enabled":true,"bot":{"name":"DocuSign Bot","avatarUrl":"https://api-cdn.usw2.pure.cloud/uploads/v1/publicassets/images/e414a0f1-5e69-4229-b949-0947db2b6a10/fabcff32-9c6b-4ca7-94ef-d04eb08a0d0e.DocusignChatBotIcon.png"}}},"knowledge":{"enabled":false}},"styles":{"primaryColor":"#8930c9"},"launcherButton":{"visibility":"On"},"fileUpload":{"modes":[{"fileTypes":[],"maxFileSizeKB":0}]},"homeScreen":{"enabled":false,"logoUrl":"https://api-cdn.usw2.pure.cloud/uploads/v1/publica

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 87318
Category:	downloaded
Size (bytes):	28488
Entropy (8bit):	7.990716754902903
Encrypted:	true
SSDEEP:	768:PeaOWHiwyOt9dzCAhj3zK9QQKOoDaOvMot+q:bhGMz5h7pQKzaOvnt9
MD5:	71718BEC692E211BC3EA5FC2D18F4284
SHA1:	DF796782590AC4C91EC8E4E1B13DB6B6903D7344
SHA-256:	666B5EB40431840AE21727C9C5D501EB9A689E9AEC5D16E17411365527E37D51
SHA-512:	D4F7E370E6B0D8DC1E87E90B40A1848F96F9F1642928349F59F07293B2D20834AF7472A9EBEF991B92ABC41643E628890B1107C8CCA726B14BA0B920BDE47025
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/engage.min.js
Preview:	...........ic.6.(.}~...!cJ.by....Z..t....m.._..$.)R.b[m...H..e;..s.^.....B.PU.....;..\|[..0d.....=.B..:.f..$....N.{.p.Vn..,.^yk.C.....$...^S..iO.?..H1.h.`.....~.....9s.]v..5.gD..Q.2s`.M.....g..g<.....f(.p.Xt.aq&.5.......T%.x......2wr.?.h...]{.X..^%.....+......zo..@wt.......6F....Hw..>1..S..Ys..hv...i.a..~EM.-.?............`A..Y...h.......Nj.8.....4..F.....W..W.......a02B.....n.Zu:I1.&.p.L.t.v....5s.p...[I2.<.Z..4H..2.@._..O...Y.g..h...N...85.x)..p........w.#..@......._....jT...Mg..:5\|... .e..>2.Vzl<.:...c.d.;..D...M...O9..d<9.Hw;;.]dv.V..8._".{...a.(Us..Y.....;5.....<.t...4..Dt-..C..y....e.(\|....VP^`..[......www.....Q.x..s.....MX...YGyGC_Yi...ap.P.....9..Q.=.)...Y.z.i.~...=.N!..s7E......5./...Y.3#.z..jX..L..........)...`..&!..]r"3-..8L..=...z..(.7.D....l...j6.<..W.R,32.Z{.).XM..df..xE.b*@}=.........3....0...o....Z...u............lr.E.5.S.5".>f-$I.E!.j..r.m.@.Tsh......e.:l.......P}jt........... . .L3...wV.q..NA!.l#....3..[z..eq.Y>...:-...

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	566125
Entropy (8bit):	5.351690596307127
Encrypted:	false
SSDEEP:	12288:RgsGeUrYDqgX+q1mIypayIXd1+Fy/xmJdtlSYJl1Z7Up4kVPC93EQqYAJ3CAFTQU:ueUrYDqgX5Xd1xItlSRVAd3UFHif3/Pm
MD5:	66F567C4BAC79C075C6A3BFA4D6EC045
SHA1:	8318076F08DA440A8B219AA0BB192885CDE26DDC
SHA-256:	0A92947D70A5E2699060FDA715898E9BF10E1B6C8999EB5352006FA1CEFA216F
SHA-512:	DB9BCAB7ECBD10D33FF9F1BBE1389973BA3722394AE5BB0374D74387382D049FC6515D8471D896FBC8E9A2F13CF429D0FD1CD0CEF745CEBA11D65B9A33DEC9EE
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"c7651b2b-36b1-437e-8cfb-f67c34b7b347","themeLayoutType":"Inner","params":{"language":"","rsc_301":"","viewid":"1d92fa59-064f-4fd0-bcea-a400d414b45f","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"c7651b2b-36b1-437e-8cfb-f67c34b7b347","themeLayoutType":"Inner","params":{"language":"","rsc_301":"","viewid":"1d92fa59-064f-4fd0-bcea-a400d414b45f","view_uddid":""

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp18a2f87s", last modified: Mon Apr 15 13:22:39 2024, max compression, original size modulo 2^32 269376
Category:	downloaded
Size (bytes):	86823
Entropy (8bit):	7.997639143608175
Encrypted:	true
SSDEEP:	1536:bfGD+w7xXv8N3w3nNW2q6rrccag1NjyIAIPHQOBBF17aSd7po8PUa0m0:TGxNXvysIL6sc/1NjNAYHTDG4p1ca05
MD5:	5BA6754535C0E28386EC10C56C25E639
SHA1:	19AE658521CC50A1ACCB4F4B6ADD33AB54CF20D7
SHA-256:	42AFCE9DB68FD08FEADD7B8C6F89F5BACDE283835C3797BCD3BDF5B86232EE64
SHA-512:	AE38B77D685D673F7BAD6FE2B4B01F0C58B3C432A42056A3181C170DD27B0CBF28DE6370A439575C0433AA11F37CE84AA461C0DB68FC7D2072B1E54E21FF557F
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/s/fs.js
Preview:	......f..tmp18a2f87s..i[... .}~....j%B...........v.:<..@.Q.....~#"..........6.....XVW../ER.Ec^..i....^.Z..7b.!2.n..kg...l2.Q\|.j;.Q....r......:HE...t.....9.kiT.L.i.^]...m.C%.V..E..~.LVS._'+A8^.E.X`%...[]]:.b..n..1..kY8.F....d...B'....n.^&..&..Icw.Co......d...b.:...,.a..{...1.D.Lx.1O.8tS...;......q.F.....?>>..N1\|z...g"L. .q.R/....eS[.B.!m..~8{\|,.B.]...BO.8..5....6..<Na...:....1.C...<..ut.55.q.::.Y.F.X^.a.\|_x.e...B~[;..8..8.. Ij....8......z../.p.Ww...(....0.8.....?....~.0...+..BJ.ca>P.K.....Q..Ckm7.....a.coF..[k*...TU0.q..3..;..o.....i..."..qG....i..\|8.Z\.....C.....h......)b.j{!c..&Xl...v..+\|h.Z$..\32.......H...!.9.a=!..FA:.....f&wd..8.........,v..8.y..i....-..7...7..m\9......`.5`.n."o..n..z....`..h..'/...[......e..$8.v.%0.m.:`O....9T.....^...1...v6...3......#..15?.hA@...7c......._.E...d ?...d..aX....3.%.km".j...Q..o....C.&n.`..l\|......6v..-d.$.M..".#......!h`._ ..k......?l...=......;..m.{..%XB....).r...!..+.In.Ba.=..\|..d..K(.z.c.a

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	283286
Entropy (8bit):	7.9697379598769125
Encrypted:	false
SSDEEP:	6144:/SP3Cm3bRB8od7Qgl3qggPoPutwXbMIWPVnQknQ:/SH3FBXcglqggftab3WPtJQ
MD5:	9BA65284B01E652F093DA5062F7A6487
SHA1:	C537A5537CAEE92023B2252139E97506CDE75CDF
SHA-256:	D881806857BE0DBDB86EC4E80C0D25F78E684C6463AF6781D0B64BB7668AB5CE
SHA-512:	E068AA849CBB4B7F80641BA8DFE77E10201E632F85A3AEF981FF594BA266D99192136DE0685D16CE95B0EE3C8FA2D6172A252D734B54E3BC6411378B560A2A01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a...R+IDATx..{.wIY...{..#.......r.I.............x...E.......d.c....^R.h..I8.d.I....N.?.A..$....:F..\v....O.o?........w.?3.]..w.....C.B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.8.b.B..%.t.u.kn888.a..SS..c..S:.n.\|..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6423)
Category:	downloaded
Size (bytes):	6579
Entropy (8bit):	5.033215741072058
Encrypted:	false
SSDEEP:	96:1sr5raqtCwUy6hP8QBUkBwoAyvTZWTUrmkSjE/DoFSWkF9nq:yR65UkBwNyLZWa/SjEwShVq
MD5:	D5B6F64C931380134D5AE7D96F675BFA
SHA1:	FF52A5915098AA51C21C5ECDBE15AA52B6A533DC
SHA-256:	CCC025F91CD12FD7CC7468E2F0F9F07C9E5BEB52FB48C9ED4CC876E37F3AC545
SHA-512:	511465AA5114C7557538ABE17B48648C16E32433531BB714EF37A7115301263CD62B533D3433E13517C893611AA4DB09A723A6237A78D78BE283626EDF1F12C2
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networks.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.html{background-color:transparent;background-image:none}html body .bPageBlock.brandSecondaryBrd,html body .linkBar.brandSecondaryBrd,html body .bSubBlock.brandSecondaryBrd,html body #stt.brandSecondaryBrd,html body .genericTable.brandSecondaryBrd,html body .choicesBox.brandSecondaryBrd,html body .action-panel.brandSecondaryBrd,html body .zen-data.brandSecondaryBrd{border-bottom-color:#eaeaea !important;border-left-color:#eaeaea !important;border-right-color:#eaeaea !important}body .bRelatedList .bPageBlock.brandSecondaryBrd,body .listRelatedObject .bPageBlock.brandSecondaryBrd,.listViewportWrapper .listViewport .subNav .linkBar,#container_content #searchResults{border-left-color:#e0e3e5 !important;border-right-color:#e0e3e5 !important;border-bottom-color:#e0e3e5 !important}html body.forecastPrintable.brandQuaternaryBgr,html body.lis

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1016957
Entropy (8bit):	5.455400178722187
Encrypted:	false
SSDEEP:	12288:AfmiVqgAE/ifO/sIpZNiONAV206En2DIIOTEDm3:AfmiVqDE/ifO/sjONAV2061DqB
MD5:	6322870943159B821DEF0A65FF23E97E
SHA1:	3F0C97D49D6D43D36E702D9D0B19E6DCDDDBA179
SHA-256:	6A6371C422F611A3EB48C4CCFB42C55800B46758590413C6BB67E638AA9E439B
SHA-512:	87D2B4B47C4C5C2880D82535723038C4CC0CCAF66FA1C33342C682E17F190C0BAA976499805B1CD9A3B8D63092A364A66095AE22D55F1C8EEDF8990781ECC2B7
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/322-a0d074e43c952876.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[322],{24179:function(e,t,r){"use strict";var n=r(2784),o=r(34153),i=r.n(o),a=r(35048),l=r.n(a);/! @name @brightcove/react-player-loader @version 1.4.2 @license Apache-2.0 /function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}/! @name @brightcove/player-loader @version 1.8.0 @license Apache-2.0 /function u(){return(u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}var c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f=["catalogSearch","catalogSequence"],d=["adConfigId","applicationId","cat

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1008
Entropy (8bit):	5.341741351033008
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHEHuKw2cUnPob2cUl1XnD2nwUg4gjioghn:2dDATLf3z2kOKOD9uXLd4fomn
MD5:	093C01E5C7BF8CA66DBD361F32EC07BA
SHA1:	BEC514FE7BCD36217F21ABF0151973C3BB8B8D52
SHA-256:	AEA8498CA007031B5969504BC680AA6D9832D984CB495EC8FF0D2B60E88FA7D7
SHA-512:	651870571E0C65F18A0954DEE5241FADA70FAC25B5969FFC427B126F1AEF06E81E43B6B404AE89FEB7B5014BB72430F8D980B75690FDF3E6A6B62CC8379D7ED7
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#CBC2FF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<path class="st0" d="M46.3,48H28.8c-1,0-1.8-0.8-1.8-1.8V28.7c0-1,0.8-1.8,1.8-1.8h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C48,47.2,47.2,48,46.3,48z"/>..<path class="st1" d="M19.3,48H1.8c-1,0-1.8-0.8-1.8-1.8V28.7c0-1,0.8-1.8,1.8-1.8h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C21,47.2,20.3,48,19.3,48L19.3,48z"/>..<path class="st0" d="M19.3,21H1.8c-1,0-1.8-0.8-1.8-1.8V1.7C0,0.8,0.8,0,1.8,0h17.5c1,0,1.8,0.8,1.8,1.8v17.5...C21,20.2,20.3,21,19.3,21L19.3,21z"/>..<path class="st2" d="M48,10.5C48,16.3,43.3,21,37.5,21S27,16.3,27,10.5C27,4.7,31.7,0,37.5,0S48,4.7,48,10.5z"/>.</g>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:	1536:h5nLZxjaZ8x2R3Ud4FqBW92ZgyFqBW9sLBHdyoXwIWc1GO9GwIw6CTq14e7pnvaM:h5LZxjml1GO9xqB7pnva38
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/v/static/mixpanel-2-2-1b.js
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114), with no line terminators
Category:	downloaded
Size (bytes):	3114
Entropy (8bit):	5.256224332537812
Encrypted:	false
SSDEEP:	48:lD58u5a2nLPHMXC9Y1/65EyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkio:A2DHMSS1/LltCRiwYMoUX
MD5:	B5201FF04DA30312910B71E1DA072DD2
SHA1:	84B0303592849AE0E16C33F9EA4776B22D6F326F
SHA-256:	9373A860524D692CE81C1F8F266B511CD597A7F1DBB9FB674C57A303101C21BB
SHA-512:	5F3C0F76106D54056FCB06A8B41C5D390AD6E410C0290E8B0F24985259ED526433395FF87F9E2658C0DCFFD41B4FA33172A169B6C675F9FD0D1A00EE6461DBE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/39.f1d268f5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(28)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:function handl

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7555), with no line terminators
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	4.968086769227201
Encrypted:	false
SSDEEP:	192:+vkz1/kwiMULuOsvzo2qKFOb2/gh75uG2m5vnbsW4RZYH8SP:kYG75X5vnbsW4Rc
MD5:	189AEFFD571884559DABABA22C66D75A
SHA1:	7B8BC38FB8A289535FC0C369E16F241D604828FB
SHA-256:	DD09E3BA26066ABE27C4DAD57C8E0C8A63FE23A0BC87E63BCAB94F25E9096459
SHA-512:	1B1BC05A69CB53E252ED017D28AA0709A08C39715A6656D2D9EFF029EDEC8EBDE28B20FFC1C033A769BA66430ABD79B9A8E4F9A4B3E0D9524C939EC25B4B7DE2
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/3.07aa08a5.chunk.css
Preview:	.emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#fff}.emoji-mart .emoji-mart-emoji{padding:6px}.emoji-mart-bar{border:0 solid #d9d9d9}.emoji-mart-bar:first-child{border-bottom-width:1px;border-top-left-radius:5px;border-top-right-radius:5px}.emoji-mart-bar:last-child{border-top-width:1px;border-bottom-left-radius:5px;border-bottom-right-radius:5px}.emoji-mart-anchors{display:flex;flex-direction:row;justify-content:space-between;padding:0 6px;line-height:0}.emoji-mart-anchor{position:relative;display:block;flex:1 1 auto;color:#858585;text-align:center;padding:12px 4px;overflow:hidden;transition:color .1s ease-out;margin:0;box-shadow:none;background:none;border:none}.emoji-mart-anchor:focus{outline:0}.emoji-mart-anchor-selected,.emoji-mart-anchor:focus,.emoji-mart-anchor:hover{color:#464

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1207)
Category:	downloaded
Size (bytes):	1363
Entropy (8bit):	4.990314635127001
Encrypted:	false
SSDEEP:	24:IMhjcN4zC6LcswlfCK6LK6keLK64LK6dK6MIcswlIfmK6Mki+34N5pk1mn86:19NpRor33fu3b4z28z
MD5:	23944A4C10D0F437DBE35E9079AB7F78
SHA1:	19C35DFF55B12E5501251C09C83D1AC91B7F04A4
SHA-256:	AD43C8C8A2BFBFFBD2EC7C3A51846D9DF39C7AED547D0FC57972D9B878A96039
SHA-512:	B119C63AA5CAC9C613F4821308B5A212CBA7A4CA92C663B40F91BAFF907A71510B7FB691068EE6636ACA888B09C1915DDF7E8643C107BA7BD0A910AE8E1A774E
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkReputation.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..reputationWidgetFull{width:200px;margin-bottom:30px}.reputationWidgetCompact{margin-bottom:10px}.reputationWidget .reputationWidgetLevelIcon{float:left}.reputationWidgetFull .reputationWidgetLevelIcon{width:45px;height:45px;padding-right:15px}.reputationWidgetCompact .reputationWidgetLevelIcon{width:25px;height:25px;padding-right:10px}.reputationWidget .reputationWidgetInfo{float:left}.reputationWidgetInfo span{display:block;word-wrap:break-word}.reputationWidgetFull .reputationWidgetInfo,.reputationWidgetFull .reputationWidgetInfo span{width:140px}.reputationWidgetInfo .reputationWidgetLevelName{font-size:16px}.reputationWidgetCompact .reputationWidgetLevelName{width:175px;padding-top:6px;font-size:13px;color:#7d7d84}.reputationWidgetInfo .reputationWidgetPoints{padding-top:5px;font-size:13px;color:#999}.reputationWidget .clearFix

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (688)
Category:	downloaded
Size (bytes):	2971429
Entropy (8bit):	5.362038375777802
Encrypted:	false
SSDEEP:	49152:wJGLrNOxN4Ew+XlC7mj73aG03m7TnkS24k0G7uUeWjksd+xIcCoi7qKDz3akVEY/:ATkS2KGGunjA1SY36WGJYI7CdYGjfMZB
MD5:	8B09ACA301959C92954A096F002AC2F4
SHA1:	4D00CCD6980851EE57B4EC56BC2562348479541E
SHA-256:	51D338D19747C8D926B36F0CF5871FADAE47F3D56F6165D89A5240BDEC1EACEF
SHA-512:	8E2025B0A8A29671516A6788B9BDD2C98024CA208F20A1789770988C1F123113773F4439DD277363548BD10D7A938697274E3782CF99760E756154AE3FBF64B3
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
Preview:	"undefined"===typeof Aura&&(Aura={});Aura.bootstrap\|\|(Aura.bootstrap={});Aura.frameworkJsReady\|\|(Aura.ApplicationDefs={cmpExporter:{},libExporter:{}},$A={componentService:{addComponent:function(a,b){Aura.ApplicationDefs.cmpExporter[a]=b},addLibraryExporter:function(a,b){Aura.ApplicationDefs.libExporter[a]=b},initEventDefs:function(a){Aura.ApplicationDefs.eventDefs=a},initLibraryDefs:function(a){Aura.ApplicationDefs.libraryDefs=a},initControllerDefs:function(a){Aura.ApplicationDefs.controllerDefs=a},initModuleDefs:function(a){Aura.ApplicationDefs.moduleDefs=a}}});.$A.componentService.addLibraryExporter("js://force.sfdcAjaxLibrary.Ajax",function(){/*$A.componentService.addLibraryInclude("js://force.sfdcAjaxLibrary.Ajax",[],function(){var g=["while(1);\n","while(1);\n".replace("\n","")];return{parseWithCSRF:function(d){if(!$A.util.isString(d))return null;a:{for(var a=0,b=g.length;a<b;a++){var e=g[a];if(0===d.indexOf(e)){d=d.slice(e.length);break a}}$A.assert(!1,"CSRF protect string not ad

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.820004247187388
Encrypted:	false
SSDEEP:	12288:9mxaBf0HFhnilEEm0ggT8wbIMn34fwQNeSNFIZ2QplEBpia13xxk56J9mFKJkVoU:+phnimNs4FNeSPHQpWDiAxxk5y9miSX
MD5:	D13B7E0B48FA0118C95E93DAB1675DDD
SHA1:	FACEA6F0EDD40C3FDBC1F0F64FBBA90583FEE00A
SHA-256:	8BF751B18D3F787D31732E9E5EB539D63251D89BFB0C0ED1BF2EA56D6096CC23
SHA-512:	7C224781532399980F7EEEAD7B7F653A8A1AFDB02D6A1236AC7F7020CB784B666E45A1CE69E1DA0993B9F9948EBB58133E64C4A7061961602D954FE859AAB07F
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:0
Preview:	... ftypmp42....mp42iso2avc1mp41...*moov...lmvhd....."^.."^.........................................................@..................................trak...\tkhd....."^.."^.............................................................@........8.....$edts....elst...............S........mdia... mdhd....."^.."^..._....7U......-hdlr........vide............VideoHandler....minf....vmhd...............$dinf....dref............url .......vstbl....stsd............avc1...........................8.H...H...............................................7avcC.d.(....gd.(..@x.'..Z........ .W....2....h....,....colrnclx...........pasp............btrt.....0...0....)Xstts.......)...........................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65156)
Category:	downloaded
Size (bytes):	142036
Entropy (8bit):	5.387650585201245
Encrypted:	false
SSDEEP:	1536:YEvlNAND5d7fCJZKYYfLif/5VolRqZwKksm/S6bQg5FSrJRR/C:YEN87KrYfL7Exj6E7bZC
MD5:	89C853C4D5D8DA361D51F767FD6D3A7B
SHA1:	B20432BC1B0A4A8FCD3A0F701B39205FC8D6F931
SHA-256:	CF8DC859D765E3697558BFFA27D942011DDB1049B359DE2AF1C5AE5FFB679871
SHA-512:	0DAD5F5509ED0FE24E9FFEAFD8A8372CB7151EE7DFA82A14823BD459D90EA48485953022B03F7BA4AE0BA0CA54CE34465CC847CAD253776E5D84CD63534443AC
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/framework-ffee79c6390da51e.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(__unused_webpack_module,exports,__webpack_require__){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */ var xe,Aj,Bj,Cj,Dj,Wk,aa=__webpack_require__(7294),ca=__webpack_require__(3840);function p(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var da=new Set,ea={};function fa(a,b){ha(a,b),ha(a+"Capture",b)}function ha(a,b){for(ea[a]=b,a=0;a<b.length;a++)da.add(b[a])}var ia=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createE

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	825228
Entropy (8bit):	5.71576364886195
Encrypted:	false
SSDEEP:	6144:trHSL6+ksfwsdyVRWhAAbVelZzZ3nsoeB+7R6Q+RtGWzMdDk1JbmBictBdcHfTLB:tgfwzuxzMdDk1JbuigMwJKA2u+l
MD5:	F87E5D87E476ADDD2BC1CBFB209B28AB
SHA1:	EE1999FF016D0C73D8D3A77F271AA08C07DFBFE5
SHA-256:	203F4833070BE2F82C1DAE3ED49A68B9C8CB691ACF5DF4B49D4CEBFC482322E5
SHA-512:	87F032FD34A3CFB2FE18EDE0A7C23CAC8B923FCA20F1772580E513FAB1C9A2A9F26298BAEA3844B33C4F55B52533F43BB351C212B7A5BD5B2E7809CBC3DADC25
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/pages/%5B...page%5D-481876c04f95ef5a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[240],{78109:function(e,t,n){"use strict";n.r(t),n.d(t,{__N_SSG:function(){return E6},default:function(){return E7}});var i,r,o,a,l,c,d,s,u,f,p,O,m,h,g,v,b,_,C,T,y,E,R=n(2784);function w(){var e,t,n,i=null===(e=window.optimizelyEdge)\|\|void 0===e?void 0:e.get("state").getActivePages();for(var r in i)null===(t=window.optimizelyEdge)\|\|void 0===t\|\|t.push({type:"page",pageName:i[r].apiName,isActive:!1}),null===(n=window.optimizelyEdge)\|\|void 0===n\|\|n.push({type:"page",pageName:i[r].apiName})}var L=function(){(0,R.useEffect)(w,[])},N=n(95235),A=n(11242),D=function(e){var t=e.datafile,n=e.isBrowser;return s\|\|(s=n?(0,A.Fs)({datafile:t,logLevel:A.kE.LOG_LEVEL.ERROR}):(0,A.Fs)({datafile:t,datafileOptions:{autoUpdate:!1}})),s},I="optimizely-user-id=",S=function(){var e,t=null===(e=document.cookie.split("; ").find(function(e){return e.startsWith(I)}))\|\|void 0===e?void 0:e.split(I)[1];return void 0===t&&(t=btoa(String.fromCharCode.apply(null,A

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	71663
Entropy (8bit):	5.438176761243166
Encrypted:	false
SSDEEP:	1536:gIXxlOtJCeX5whYXCkJkzkKIzYcc9uSlYRUMRn7B:XXxlcCrkJkzkIRYOMd7B
MD5:	489B1FF4B0D187650DC5B9899B9FA5B3
SHA1:	9FEFDA89D7E1BE195773CD2F2806A77D5C6A517D
SHA-256:	D7CCD77B205B05362BE85D33D9A12243E164501B4AE8908D7CFC391675991E08
SHA-512:	08142F936413EFD75A5942D9D9AC30A56E680709F1825AF8FEF393BCDFABB08B12F86588857151266907E27596BB7318E7ADDAA6347DE21AACC8FE642EB5107C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://optanon.blob.core.windows.net/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23144
Entropy (8bit):	4.609989283730634
Encrypted:	false
SSDEEP:	384:ao0Hmh3q58PeYRwKBjrUxpuuh3q58PeYRwKBrYhkq58neYR2KB8O/babh3q58PeS:1L3YPxKBjrUxpB3YPxKBrakY3TKB8Omp
MD5:	F0C49B7F657C685F8856350167161D08
SHA1:	E30839010C9012F55C3727445B0F5CD181197FF0
SHA-256:	F61547DE93D90087E381250884A50F6B458B56C81501606DE9603FD9BB20DF26
SHA-512:	CFC46F8E567509C78DE83F3A1009EF890CC90AC6A8AC75BF57BBD05DD49A5C5BEEC7980A9A02F1070747052C02A0D86DCEE9592B8EA964289CC83DEED4D70140
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8335b-1f5b-415d-923b-2daa2d0de9bd","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","al","pr","dc","ny","ut","nh","ia","ok","az","hi","mp","oh","ri","id","wa","mt","nd","nm","md","ak","de","nv","wv","nj","in","tx","gu","il","ma","me"]},"LanguageSwitcherPlaceholder":{"ps":"ps","sr-SR":"sr-SR","pt":"pt","es-BO":"es-BO","en-AE":"en-AE","el-GR":"el-GR","en-AM":"en-AM","zh

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	146865
Entropy (8bit):	7.984328907199668
Encrypted:	false
SSDEEP:	3072:sagDQ69cVJklltpRLes8Kzdcbyuz3wP8i0El1D7vTZeNn0GxAPDQf064lT:o9cVClP7es8KzdIyshilp20JLQf06e
MD5:	F779F8DE4A8BB30625908B57933BB22C
SHA1:	1852708AEB59A20B389047B6659380693EF80884
SHA-256:	96FE7911FA7029BBAB6135710BA16AD72413DAC920DA5C2BB4A4E7A8944031C4
SHA-512:	AA4A3D1646BCBF14F577F91FB579FB30E315A07FD0E45A8707DF987C38B2A87948C11021F308E45C20ED070DBB101541BF071D9A7DC8D44633D4AC47779D3102
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............RcmE....PLTEog\kdZri_haW......d\R`ZPe^U...^WMPC8F;1TLCK?460(TH=vk`[TKB7-XPG......odZ...dYNOIA=2(i^SlaWMF=yod......HC<..z0+%% .ZMB.......u^RGD?8:5......smccUI........................xm?;4&!...xhX..rcR.\|o[H7...i[L.......!N.sg..4......nV?UD4.)h.$[..~lZ.....(.........3......u......A.?...o_M.......8.bP>..........."[..G..~v..............T...NLH....TQL.M....xeRwsl.z...p^eM7..q.&W...$?.wd...4)N.../`..z....sT.}t..g5".../e.QAd.qQM.V='C5R/4w.gH...d@).\|`WWS.q}.keK4".A..p.x.G7E%.\Mo.h.W<......A6g.}[jhd....WB...}f.dG...J@~.IEk_z.bH.\|..~`........~..[T.nz..Z............o`.....\j...uw.[)yH1.]e......\|q.#38bP...x0)..tpm0..I..i....i......Oc+.j...O.....K...PS..`..N^.*+.w+.b2..f.Np8R..fUpu.=5.{.-N..JMa.\|Imph.Da_.es?.% s..B...OZ..@i.4.o...YMJ($..:lIDATx...n3E..w....`.M`..Q.. ...(.R.E.A.>.'...D.K@...(.'...(.P..:...k.9.}...p<.;;3....93..?..3..o..........;..z...~x}}{..=<<<>.[w.....n?.`.l?.'.....O.......~.v..>Lv.t6......

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	123098
Entropy (8bit):	5.307263521497999
Encrypted:	false
SSDEEP:	1536:KjfIOJe2RcAFEV8WaIIURxIZF9Esdwv0yFm9McHJ96G196:4e2K4URxIZF9EdJuRp196
MD5:	B481CAC2657584EEEC6CB46DDF750890
SHA1:	0AAFD440DCFCC791570B0F755AAAFA087207CB20
SHA-256:	EF79802452C1E4657E54CC81DF50C42B831A19000BA6988CE31DE740E7E5782E
SHA-512:	21ACD3806E560915C83FE8D5EB0B8E63C20DF0773B9C70D6FA8D8692E9343843D55C489659F78C7C4C0F545960802A7ABBF8C8D3F8CCDA8A5B9CD1C00A860CD3
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/main-96f41e99722bcfe8.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[377],{26783:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addBasePath",{enumerable:!0,get:function(){return a}});var n=r(67891),o=r(69291);function a(e,t){return(0,o.normalizePathTrailingSlash)((0,n.addPathPrefix)(e,""))}("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},96484:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addLocale",{enumerable:!0,get:function(){return n}}),r(69291);var n=function(e){for(var t=arguments.length,r=Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];return e};("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Objec

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	54851
Entropy (8bit):	5.351885775358845
Encrypted:	false
SSDEEP:	768:sEctKbJNwoioYX5x9ncZsCpWdlLhh7kXrjlyfqhCsGAoOrk2n:sEctKlNwoioYX5LM3+H124qhCsDnj
MD5:	45A6749860B806A0ED77ED08DFA90B99
SHA1:	C533D7544452DBD40907306BAFAC435541D4E2BF
SHA-256:	7C690A6EBB2EEF51E8CCC66161B02197C22F388F1FC23C89E0F5C7B70E1EAC50
SHA-512:	9265A6290728192FEE12DD0F448FC490F8B2EA95AE61453256FCF4FD1828F47018B884A199EFF8F94597F7055181BD805DAF4F8EAECCDF0D5747CD3D4F5514D4
Malicious:	false
Reputation:	low
URL:	https://cdn4.mxpnl.com/libs/mixpanel-2-latest.min.js
Preview:	(function() {.var l=void 0,m=!0,q=null,D=!1;.(function(){function Aa(){function a(){if(!a.Ac)la=a.Ac=m,ma=D,c.a(F,function(a){a.nc()})}function b(){try{w.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(w.addEventListener)"complete"===w.readyState?a():w.addEventListener("DOMContentLoaded",a,D);else if(w.attachEvent){w.attachEvent("onreadystatechange",a);var d=D;try{d=o.frameElement===q}catch(f){}w.documentElement.doScroll&&d&&b()}c.Rb(o,"load",a,m)}function Ba(){y.init=function(a,b,d){if(d)return y[d]\|\|(y[d]=F[d]=S(a,.b,d),y[d].ja()),y[d];d=y;if(F.mixpanel)d=F.mixpanel;else if(a)d=S(a,b,"mixpanel"),d.ja(),F.mixpanel=d;y=d;1===ca&&(o.mixpanel=y);Ca()}}function Ca(){c.a(F,function(a,b){"mixpanel"!==b&&(y[b]=a)});y._=c}function da(a){a=c.e(a)?a:c.g(a)?{}:{days:a};return c.extend({},Da,a)}function S(a,b,d){var f,h="mixpanel"===d?y:y[d];if(h&&0===ca)f=h;else{if(h&&!c.isArray(h)){s.error("You have already initialized "+d);return}f=new e}f.jb={};f.W(a,b,d);f.people=new

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	121000
Entropy (8bit):	7.9034262613361435
Encrypted:	false
SSDEEP:	3072:po2ZGTbEdBVhTdZF8CJtVPngXV8wivjCO7dXaeP7shzKN:pJZGT8zdZF8OgX+wqmKLIVKN
MD5:	3C62E6A6FE57A891F75CBC1ABC2994EF
SHA1:	1B92CD824D62D037FC27FAE982D9286D22E0C9BA
SHA-256:	666C5EC0C76D900AB1EFBA1D01EB681A90ABE3E6DFF55950E3E3A6BBCAA3D4B7
SHA-512:	2F6BA9C3C407AEABB284EF022443ED3D2F53AA000DE8A5061F58F59CDA0D1084C6EA46C00F3AC92E7B22E40D6AD9610EB9A254FB3EBD835865C55698E613A1D7
Malicious:	false
Reputation:	low
URL:	https://docusign.file.force.com/sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTOk&operationContext=DELIVERY&contentId=05T8Z00002WJTrf&page=0&d=/a/8Z000000GYqW/XIhk.eaEqq45jwJH6U5I0GuVBBifKvGPF7KZfPoKJac&oid=00D300000000bS4&dpt=null&viewId=
Preview:	......JFIF.............C....................................................................C......................................................................................................................i............................!Q..1Aa"q..2Rt.........#$67TVWbru....34Bdsv....589Se.%'CDGc...EU..&F.......................................M.........................!1.AQq..."235ar......#R...%4BSTb...s...6C.$.D.7...............?..E.3=h@....@...U.T.,....F.UF..w.F...u.X!... .9,..,....F.R0.. .J..Uf.F.m..,....6.F...,.#...Q...Dp .K6...6.F...f....T.4W..6..A.Y.A.6.R0.. ..4....@.... ..Y.F.b..#+6.U.@.2...h.FVm.%H.DpG%.D.B.EB.Q.H....Thq .K6..}.t...9.........\..\|J.....vk.R....d.....7v.B.~..m7M.J.O.../.ND(.<Nm...C.@..ZW.Z..m(.w.p...[......\|..G.4..$.q..K...9..$......VH..S.i..$..+`./S.pP.[..........~-..o#..o..gui.Q..... .... .... .... .... .... .... .. ..(.)..@....@....@....2..!Q.T.4.Y....{.%.A.Y.T..@..Y...@.94..4....D.#+6.D,..x..EH#...6.#*.....Th4A.Y.AR0.h.B...4..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.030747095760829
Encrypted:	false
SSDEEP:	24:Y1AJ3Hkp/yDWTkk3VyBWTikgCyOHFC5fkIhz0s6X06kCvfkaz046X06vCufkrz0y:YWJUVZnLKB4zxi/8x9A5ApRbSR/k
MD5:	87532C4DB85F1429FA6D759BC3332F36
SHA1:	4E576E680C9843DAE6FBBFBAEA10822B3B70158D
SHA-256:	E40B6EAE9D66C60B9C750DA70DA6B2BC5D35C2AE9689CC1E9547E300FAC4A3BA
SHA-512:	CC961007D9F014C4CD2086C977315B26128EF627F707316FE672F3CBE9688BCEAC40B3D24CD4DCC1D390D5A390208004DD3213A23AE293C5C422DE5F89D192E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/39.11d2b6a7.chunk.css
Preview:	.drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animation:bounce 1s infinite;-moz-animation:bounce 1s infinite;-o-animation:bounce 1s infinite;animation:bounce 1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(2){-webkit-animation:bounce 1s .1s infinite;-moz-animation:bounce 1s .1s infinite;-o-animation:bounce 1s .1s infinite;animation:bounce 1s .1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(3){-webkit-animation:bounce 1s .2s infinite;-moz-animation:bounce 1s .2s infinite;-o-animation:bounce 1s .2s infinite;animation:bounce 1s .2s infinite}.drift-widget-loader-balls--small{width:16px}@-webkit-keyframes bounce{0%,25%,50%,75%,to{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transf

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 643 x 261, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	13702
Entropy (8bit):	7.8986608011417285
Encrypted:	false
SSDEEP:	384:HSmSjs2UiEATeIi1u4k01h3LnnkTmw4Pl7VFLo9C8KwtD:ymWEi+h1Q0f7nnkTmtRVFL0djt
MD5:	5CC1977B21BF780731B87028942FFD6D
SHA1:	80D7113EF2323BC839FC79BF43FD37C4D7E03993
SHA-256:	CDFA2C94A06FA985649F2853A1D1BC2C64CD1B487B5EB6EBB2DCFAAEA5DE2FB9
SHA-512:	601E493D5ED694D50897B17E37BE93C37A63FC4DB15E07ACE8CE1F693EDC44370061729D0C5671D5D96D6A9D7205FA7237FE00BC8E7CB50AB0BDBFB132D48962
Malicious:	false
Reputation:	low
URL:	https://na3.docusign.net/Signing/Images/linkExpired/linkExpired.png
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.6..c...4.IDATx^....\U..q...O.......#v...~PZD..Z..RV...PQA.T.@E....b.[..kh...t.-]i-.{..i.f.d&3...%....4L'..{g.9....q.J'...9'..;...DDDT>,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN.....K.'"..KL..\.DD.`......,1Q.r....%&.C.{""{..Dy.uODd...(........!.=..=Xb.<.'"..KL..\.DD.`......,1Q.r....%&.C.{""{..Dy.uODd...(.........zzz".H4...b.x<.L.t.t.u...8..3.[...v\..J^(..KL..\.De.......Ot./......q.."\..b...(...J%...h.].Q.Le.....l..,..KL..\.D6C.b.X..1T.6.....JVS......-.Fmmmr..K.{"......'.H..)......._b.....p.....F....Yr..I.{"...~g..?.d. .G."...8 nll..O.#W...={N.<)'..'*..S(...."f...?..S..D....0...F8&f....@$.Q.1`..G...{...J.c...s.....q.`..7.+.....A.....Xb.&..P(..G.....wY.....Xb. /78..Q(;............y..d/..<"..`?&.C.....a..^,1yA$.....pC...8..g.....g....~....g.P..;.6.....5.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	566127
Entropy (8bit):	5.351697464359698
Encrypted:	false
SSDEEP:	12288:RgsGeUrYDqgX+q1mIypayIXd1+Fy/xmJdtlSYJl1Z7Up4kVPC93EQqYAJ3CAFTQz:ueUrYDqgX5Xd1xItlSRVAd3UFHif3/PV
MD5:	C8DB21506A5B025DDA7AF22C90E53D99
SHA1:	FE93E74DC2418EAE2453B854A940283C37C37036
SHA-256:	6DF085E26E7CE50C31DDA8F6497E6D7008B03078FCF1F12C2DF4AC82D7376022
SHA-512:	D6EB8E210428D007DBCCB123EB2C395E6A7A6740ACA1F63D61F95FB6ED7E635DB964A46583BB331311BE067BEC09B48B5E646023838D44CE4EF44ED201FD84FF
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22c7651b2b-36b1-437e-8cfb-f67c34b7b347%22%2C%22routeType%22%3A%22custom-contact-supports%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22rsc_301%22%3A%22%22%2C%22viewid%22%3A%221d92fa59-064f-4fd0-bcea-a400d414b45f%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"c7651b2b-36b1-437e-8cfb-f67c34b7b347","themeLayoutType":"Inner","params":{"language":"","rsc_301":"","viewid":"1d92fa59-064f-4fd0-bcea-a400d414b45f","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"c7651b2b-36b1-437e-8cfb-f67c34b7b347","themeLayoutType":"Inner","params":{"language":"","rsc_301":"","viewid":"1d92fa59-064f-4fd0-bcea-a400d414b45f","view_uddid":""

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 788 x 591, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8739
Entropy (8bit):	7.925138481694344
Encrypted:	false
SSDEEP:	192:cqbEkA4NlWkOiICMfzJPcgdvY7lKl8Ws3+gli0teVQSejn7k2cMS:nbJRNlWkObP7NfclG8Wo3XtgHpAS
MD5:	E259D49AD1B22D7F61343B11E3D63454
SHA1:	43CF47F1223CF0C69BB3C03974EC569BA7A812D9
SHA-256:	051DF612B9831A8AED7A441B878157B717C0AB1B374F3F0E89AF8BE2C6CC381C
SHA-512:	51B061A1242688F4283C951B87C63389DF9220AC3377573952BCC1661C42B59B88A6925A20465546FCA0B16D5987E9DB7955E1DCBF1F2DB44DC660E15CC802D8
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png
Preview:	.PNG........IHDR.......O......cb#....PLTEL......W2...E......y..+...... C...R?W..&...e.......l1....c...LL.Aey.....!..`.9....@\'.T...a..L,...H.... ....`...\|I.]'.c ....\..tF..6.b .0...y.LI`I.....`!..,....y@....t.....dL...20@.................e`.........@.....B&...\...7 .m..7..R/d$.....U....XTpp&..vm.G).6..1.t=.Q..0..0...U...+..!.p=..rl.".z.^?....p..P......0...h7.Q....kX..n....&.h6.....FXP..@;T>.....<r..0&%0..4...<#P..h7...P.. ..0..Z-.D..y..!..v....y'6.r;L.. .IDATx...;N.1.......tPp.t..J.."......v'A.Y.v.......C.g....{.......&.....>..M..>..Aq....A.rP8.qP(@..6{.W..7...i.9...X.S.m...lUY.XUYf..T.iv..X.>.....s./.nOZ...=.?Q.=.?..{.A...;.'&t....[.........R..T0#..TPyJ!.`N.B...^s.w.^g.<.,`...ic..x...}..9...eZ.........v.W..Hl.DEVM.o...Pxad$.9m....3...s.z.......U.EK.A!(............V?Q..AA!(.....HN..`JP...Aas.....}bJPX..%..yOAC/9..Q...2Y..c...?....F..6....!Yl.(4.....C......BE..T.....'.'&..^`p.?T.9.i......<....`..y..0..H.D.l..!.6hm....Y2K..H.n elR)....{.x.~

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 4999
Category:	downloaded
Size (bytes):	1402
Entropy (8bit):	7.861996175866077
Encrypted:	false
SSDEEP:	24:XsGohN4vpAC1zcnQPvj1wpKDqG1kIGkh4lsI+3HQkAVL6uq+FCr1CUyYwcbkYLaN:XShN4COFvj1cyqGyI3gq3QkAh6uesUyb
MD5:	18C24C458EADC60F1CEA4AE31A9781F7
SHA1:	DE8C7358B650DCDC96D735CD10A79CB5596E8D41
SHA-256:	B62208FBB7102D372B61194159301AF6FF0D79F77BAADAC4EEB6A4271AC15E9B
SHA-512:	6C2F8C9FF5740515A3EB681138CA94888A821E64A5D69DED346DFD9DD666A5FA3584AE390B60E13BA0CE780B21CD55B5611715328259A36A3FBAA7235F35B104
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/s/settings/12BP4E/v1/web
Preview:	...........WMo.<...X0...h.(....h..6).....I.)R;.....}AJv$EN......3.p.....]>....E....'...9..[....2.c.'.Yc....V....E..[bc.LY...la...{ .\....(.......J.Ld.Mj'.S....&.....d...........`...z.a....d=Y'.-@.8...{.X,F....-X.2.:2.f/.FP..b9......z`..$........a..0\|ou.-..yR...$a.^}1va...T.:.C.u.JpnaI..]Y..x6NA;L..D6>]'.......{....(5z.u!..;.r.....<J...U..~.Z..P>...a....}m...lg...}...+.j.......C.\...iP.A.BaI.5.>=....Z..S..J.^x.{..5..v.~...P6.z.~A,...J.-.\|.w"..A+.^Y...58.;...Ze.o.?.......pi..}..}.]zOjZy...V..d..e...$aw..1;f..gH..9.,a.".....w.Rpns.m.N.i/YoF.....#.....R.S.Z."...A.C.E.b..E..;.?'L../5...H.......A......[..\|..f.9.j'.....Q^...WO.o....MZ?Uo....&.2Z..xN....k...fJ.Ty7..7..H...h.j.w.;[..9.W.C.Jo#..........B..$......c..W.3.!...?\.@..i.4.Je.gD........b.8..}OVs.'.......y=C.....=\|[cP4..0..5...-...k}...%!....%......H.].R..`Q)/.....R..%w...1c..}.L..P..7..,.,..J....tC..>D..V..CV7LU...fm..g.d.B,...{..J.m.]....Zw........B.&h.t.ei......?......x..;l.y.....

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	956870
Entropy (8bit):	5.395523973087284
Encrypted:	false
SSDEEP:	24576:mE3nDjuuB5uftLLUrYDqgXV5mtmVNZ5DiQ3/PHDP8m:mE3nDjwt3UrYDqgXV5mtmVNZ5DiQ3/P/
MD5:	060E92C87AF0B06AFF3A9A87EDD0C8F6
SHA1:	13E6E5A11D07A9E1C9D03DE49D47C3103FF34415
SHA-256:	2331C7B73ACA98049C45F886FAE0388E97BB858C0541C034EC352721484083DE
SHA-512:	77505E341F4A7C877CB10ED0E5554E2DA69DF2F58A400E2B2BEC4434CE139BB02D69C48AED2F4F49A25A56BBB250FB6B4F73B9E4C8D5240128A9FDDD037F0736
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	window.Aura \|\| (window.Aura = {});.window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});.window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/[0]","attributes":{"values":{"schema":"Published","authenticated":false,"ac":"","formFactor":"LARGE","brandingSetId":"52bff5e6-866e-4e63-8c44-d79144c0db18","uds":false,"language":"en_US","viewType":"Published","pageId":"bfd6e0ae-cd7e-4358-90c8-87f8de2344ca","themeLayoutType":"Inner","priv_themeLayoutReady":true,"isHybrid":false,"includeInstrumentation":true,"publishedChangelistNum":193}}},"components":[{"componentDef":{"descriptor":"markup://siteforce:baseApp"},"creationPath":"/[0]/$","model":{"appConfigData":{"allLanguages":["en_US","pt_BR","ja","de","fr","ko","nl_NL","es","it","zh_TW"],"isHybridApp":false,"activeLanguage":"en_US","cmsSettings":{"isPersonalizationEnabled":"true","isEnabled":"true"},"cmsConnections":[]},"googleAnalyticsAnonymizeIpEnabled":false,"googleAnaly

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	731695
Entropy (8bit):	5.72851454455714
Encrypted:	false
SSDEEP:	6144:kxnAGF7J5cfDeCsSvL7AVmJic65pIonKMdqf27j+b6+PmZSuJasu+Lw3EloKPJbT:GAGKMds2H+dPwaf8W16TKH9m
MD5:	77DD02FE637B62C68ED1ECD1C687AFF6
SHA1:	417E84838EF364EE7458C37C20526F64B0CEC529
SHA-256:	CBD735DD893D840142F914B154416B6E5623E526E39C9C6453EDDF038AF68E23
SHA-512:	49D69CD9BFE9F287284ED3FC46D3C9220FCC21F8D9FAF189498B983CD2353B882A6AE6BA34A092A7D4B0841E768906B268A8C5347AD5C5ACCFD36BAB48777D44
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/776-c480819ecc3896c4.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[776],{81250:function(e,t,n){"use strict";n.d(t,{Z:function(){return n1}});var i,r=n(95235),o=n(2784),a=n(97729),l=n.n(a),c=n(20434),d=n(35669),s=n(20406),u=n(52746),f=n(8529),O=n(28526),p=n.n(O);function m(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,i)}return n}function h(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?m(Object(n),!0).forEach(function(t){(0,r.Z)(e,t,n[t])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):m(Object(n)).forEach(function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})}return e}var g=n(34406).env.BASE_HOME_URL\|\|"https://www.docusign.com",_="ds_locale",v="ds_country_code",b={"en-ca":"/en-ca/","en-us":"/","fr-fr":"/fr-fr/","en-au":"/en-au/","fr-ca":"

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	67113
Entropy (8bit):	5.333409534393581
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyE:RIT7OX4s9eZYtj8ltE
MD5:	E782D30892E377093C63A72D74FEA8FA
SHA1:	292FD0A737322387361855D9F54ACAF19E39763D
SHA-256:	AB1C97FEC50267B138246CFA04DBB2420DAF893BEFA49F654B57474E5DF7C6DE
SHA-512:	5296EE307A0D068858758ED206675352D472C1B57A8548514CF4A3F0A04A2D0459A2126F8E20AAAC29243DE296D4106C590394F388665575E43B2A1DA2122569
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/357123711145934?v=2.9.153&r=stable&domain=www.docusign.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	120484
Entropy (8bit):	7.977708945286498
Encrypted:	false
SSDEEP:	3072:Ibluyzp1ijkW2XkVzA5WK9Ag2k13fZvWVPSWWelaix2NReP:IxuOpkIKVzA5WK9A/oxteo+3
MD5:	A1D906DD351C2B8322A3C977E5323C21
SHA1:	7E41AC2667D58CC71187E0886CE552486A7644C8
SHA-256:	E16D4BF23D6F06EF372EF44E7281A89532141026AA884CB0CA67261E061355BA
SHA-512:	38BCE56A32141B0849D952FE5C6B5538760A009235015AB53280B167BF6D79F5A959421311902991ACF905E442C67F8BCF0821C92AFC5C6681D1FA6DD3CE32AE
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/7LrypGfM1BdddpRfwGZrze/3a9135c9a49064c815ad7289b052772a/woman-smiling-and-presenting.png
Preview:	.PNG........IHDR.............RcmE....PLTE................................................3l..................;t......C{..d........E.................N..!..y7.........% ...?L...............&[.......Y..))....`D...T:...sD(.......x..s.......?..J1....A$.I......j9".\&.....z....oR..@...jOq/..6..~e......O.....w...........,..........x..............g.6$.....cD...x]2............n..d..b...V.-7A;CL..ql4....uSZ.....{B....,.......h...X5...."....K+842..".....Aj.BTZ.O..~j...h..M...K..Vr..\....;.t.#...g.....t.E0!....6../..........wR3U..~_D.f(.LT@1...GbkTZ.\|nY.{e.....cTr{.....y.yt.5m{h.%(..t.HG.\|@.GeQDC.&.....S.@..y....bX...^jb..Ws.e.Z.y.w0.\|c..y.r.eG.~...Y...JD....b....K6\nJ.......t...R.....fd...Pc3.1#=X q........P..m....Hg.}....e.....E.........b......p....._IDATx..?l.i......kv......$YE.H...c..?....(. .s..)@n...).I.EF).Er.EB2 ..Ia.....kV.X..Dw.V.8...}.w.kc8x..3..;.....~...y.>.f...o..._.....S...I;.x}l,7...r{{mu.l.T,....qa.....E..

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 44632, version 1.0
Category:	downloaded
Size (bytes):	44632
Entropy (8bit):	7.987357174041996
Encrypted:	false
SSDEEP:	768:uxwkQ/YffL9+XaJogn6SrjRM4msHbFmLTsNyDBXijpbfyCY:mbQ/OfxMaV6wLHbsLwNyFyjpbfy/
MD5:	637D3546705EC6527AC9DE1072F8BF05
SHA1:	B92F50AFAEA846C8216713EF3F90035DC48F17B5
SHA-256:	CFAAA487C360D95DF3770068F04411273CB56FF065E9446043C0347E85E3F0A6
SHA-512:	F58E91E03E4428FE7C62DF714A527D8119DA07AA0FAAED6B427484D6F40D40AA7B09CEDAC9903F0A524C9E8C7DFF79A59DD866F2E45033006A44DC9B017A048B
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Bold.woff
Preview:	wOFF.......X......h.........................FFTM..............jbGDEF.......5...6.)._GPOS......'+..TB...GSUB..)....3......%.OS/2..+H...O...`l(..cmap..+...........cvt ...,.........]fpgm...X.......eS./.gasp..0.............glyf..0...nk.......head.......6...6.O..hhea.......!...$....hmtx...........(8.mloca............&..maxp....... ... ....name...$...&........post...L...x....f..@prep........................E...............F.x.c`d``..b= fb`e`d..b>F..fFY.P ;.1...1...........5L.....x....U...~.]g..a@@....DE .0.q... A..$>.Q?C.(n..!D......H..".......@P`d...A..w.s..Y .{......kUWuu.9Wi...Z.~J......Q.(....O....a...~9..u...V..S7.../..j.:...D.....G:......vm....;=q.X.G...B....w.E...YZ..N..^.u.z@=...Yj..P...j..C...Z..b...S....QQS...\|U@...A..\|...Ju.:N...%.O.5D.U.....L....QC.ms..PE.B.p.i9.BPSP.9...I!.f.c...-.x.J.\|)-...M..L...W.A......y..jL.E.)%.M.T..RJ.p.?.~.CR..%..P.._~...7..3{.Q.?Z.....?..}...z....M.S....j.Dha..h..ig.r4.".....f..5.S=.....>S....Uw%<K.Ex....p=\.....

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 8123
Category:	downloaded
Size (bytes):	2477
Entropy (8bit):	7.917718966947685
Encrypted:	false
SSDEEP:	48:XGEw7dhoNHAxiTrOOSeHCvc2XkvrpFMEcZH6kdvcDge0MsUbzyl7Ct:vDNHAUrLkvyDn8akiDl0UbBt
MD5:	C7A28573AD8E4E0572990059D433FAE2
SHA1:	71002FD665C268A6B8806135FDA5322C4585232C
SHA-256:	8009907ED257E18D1199A86CF2B1E4D5AF541A50C9E31CD834F74FEECBFE4D62
SHA-512:	47EC653A1D88377A655865F385C24ED5C67E41AB8252084667C3D5784A536D94B32E33E7B4C7953299E782E48679D8FAB6FC2ED54FACB74C2AC871FB32006757
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/i18n/en-us.json
Preview:	.............n....`... . ..0.G...-k5r......l.&......s..........h.E.A.d=X.....^.qRI.m..N..'._...w.....F K.w.W......g9t.3..,...?o.j:\i.\|.........WE.~^('..<A..Y.....Nze.;..p.w#>.nE.....J..3.R...t)...p.Xt4.K......v(.....5l..Jo...i...{.w.u.qS.t .`=R.....L.....W..z.._.F....l.s....f.~c..h.G......&.......M.%...2.2 ..j<.M..&..F..-<A..(........y.a......?*.R.2...r`..60 ..gK.q ....2..D..7..H....6Ig..............+..PJ...e.v.grs\iT.\g.4...t,.\w.....K.uS.."(...........-Xqsq)"......8..b..c.R9...gQ:Q..I'0.@y......k......B].nb..=...{..pC...Q.PJ..i......T\.........p KO.SN.:.o....K@.?..U...w^v.,B......37.fx.d....{Y.z.0.......j.1...........Yf.t\|. ...'.$;G........,..Q.}...\.a.c........7`.\..#..hM..6M...&W../.fp.s....SS.R.A...Az.....<G2.\|..0..y..H..a.N..q..IE.de.3.W5U&...9`&$.q"..K.;>.h..K...xOF.OJ...SQ...1.lHw...rG.........(.S..c.8C.......X8..=.uJc.w8.x...Q.....L.....3(W...D?._t.5.l-.<.......W....)3;t............h.5Q.wy..e..S.&G.Q....~.Mu.$yK3.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31436, version 1.0
Category:	downloaded
Size (bytes):	31436
Entropy (8bit):	7.993250168057893
Encrypted:	true
SSDEEP:	768:lIQXpJaSv1p16Copvvta/RKIxLD+fSw88A9mWLkYWsxMppOD95:eSNzxopta/8IZGA93LtxMppOL
MD5:	BA0E987E564CD3409E9D6F690D641F55
SHA1:	1C2684BD20C775B7497796C2FA66AD4943F6B824
SHA-256:	346CFD3DF3DBB80D08655AE396A413F66CBCCFCF201EAE36A6403DCF7ED372BC
SHA-512:	DFBA7D6B8114C9DD1A3288E053F6E7C18A1909F6CBBDF35E46B1972E15497D1C35FE1007FC90CAF111D20AB036D9E1C73C15EDD7B2BF24F24CA4A2A36EBA571D
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-semibold.woff2
Preview:	wOF2......z.......jl..zc........................?FFTM..6...H..t.`..V.(..e.....l..).....6.$..(. ..4..3..M[WL.....{(HD.!..:.jV;\.......vy.b.a.us.f..j........{.I..%.%....H.j.v.n.53sP....CI..D.^.>`Jdb.y.. .E.L...I....I...vD.c. .VD..S.f..x.E....v!...k...b.../.....;...s..T..Y~....~N7m...P.wv..t.....K\|.(...b...h..~.....m..{\|......SdU.RI._M.......s...,wW.0.~..P...F1Q..Umt..LP..#.'...........3.......BL..4.\....qL&\.o"...[.A.0..+.r.b...s.y.Y..d..o...KOa.M..Dk..u.?XS..J.i.7..6..)B..W.].....P.......K)q.f.._.Xy.~....>.Cn#G681..jb....3u........I..;....CBI....Tb.T....5.Z...jFi9~.'.1.g.M.h<.S....:[..m.3g...,.DQ.A..i..j.T@.E...1u.....X.s._.s.....'.......O....`,...y@......U/a.!.......T.[.0.'`..l(....h.Z..$...m4..h...*._..@...;!=......ZM.TP.......^N.T..p.!.4@.(m...~._....{..&.85j...Q#f...)......................j. t.s]..m..&.^.G...2.........<..(..(..(..(..(..h4..F..._vx...g....P...PU/`...L<..RJ)..i.+3..p.A.+[....=.X...........B...../.(..X........T.U...3M..]....&

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	27198
Entropy (8bit):	2.459230633161204
Encrypted:	false
SSDEEP:	48:Bu111111111w1111111111Y1111111111Y111h11n1i91nYk1nZ1ocJ1i1gn111W:BZAvF892d5TaAtMH3LOCaGshCaGsu
MD5:	1904FDCB027ED618D24601BFE5121096
SHA1:	3384FA317742DD9B6D6C8995AB6B0131579311B3
SHA-256:	300AD21B2AFE161BE399D3C4034131DEEF4FC22A9BE39FA70AC3716295DAFDB9
SHA-512:	3E9D51836FEB63D18D2B05592F80A8B79FF627DD2E1F50C68520D4C180647E7A12E6B73BFA081CD368D5C43F13AAE69696E071F0B191701E17A13E7E7197E766
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......00.... ..%...D..(....... ..... ...........................L...L...L...L...L...L...L...L...L...L...L...L...K...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...M...M...M...M...M...M...M...L...............L...L...L...L...:...&...&...&...&...&.z.#.k.f.RT.cRR."__..TT....L...L...L...M.w.#.........................&&v.SS..RR..RR.EQQ....L...L...L...M.v.#.........................&&v.SS..RR..RR..SS.,..L...L...L...M.v.#.........................&&v.SS..RR..RR..RR....L...L...L...M.v.#.........................((\|.SS..RR..RR..RR....L...L...L...M.v.#.......................3.CC..SS..RR..RR..RR....L...L...L...M.v.#...................3.BB..SS..RR..RR..RR..RR....L...L...L...L.k.i.%&v.&&v.&&v.((\|.CC..SS..RR..RR..RR..RR..RR..............UT..RR..SS..SS..SS..SS..SS..RR..RR..RR..RR..RR..RR..............TT..RR..RR..RR..RR..RR..RR..RR

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.458694969562841
Encrypted:	false
SSDEEP:	3:mSZwaoxsquSYsRn:mSZwaopuSbR
MD5:	8D02DAF37C1992A1D07A86974D16C80F
SHA1:	A4BF0B454A915C76958219FF2E119B51EFF0E0B6
SHA-256:	5C1D9C74059901E5CCE209ADA51865F790B361082BE319094FD00F6ABA508180
SHA-512:	9678D22203C2DEDAE1EF65BCCC26E29E106D923CD1C43F6ABE4C8AD21524CAD584D8CBD9FFE5A6F6CD4EDB610DFC932482816F4013BD3D1492EAC118C7D8945C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnuPaFT0YDzGBIFDaWTNiQSBQ1TO2zrEgUN-7faHQ==?alt=proto
Preview:	ChsKBw2lkzYkGgAKBw1TO2zrGgAKBw37t9odGgA=

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	downloaded
Size (bytes):	36995
Entropy (8bit):	5.200129010508312
Encrypted:	false
SSDEEP:	384:z90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:z90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	46FA5A7BC37A22544A908E4AD950309C
SHA1:	7C63D2A96EDDD4BC0D2C1D03947DA197B4625804
SHA-256:	E0C6F8695589DF90E63442FEE1C9CF14E60DFC4FD8CE7296515B1D6DB41E1D3D
SHA-512:	A2A18AE69D4BB9F5D2B8FFD0D4B74ED7F5769E432F5B81DEC8F0DEDF0DDF8AE13144DFDF09098CFEE0B59E44A5381EDE0EE17E96DE88588D40EF8B285EBA04C6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/35.d0f1ccda.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26439)
Category:	downloaded
Size (bytes):	29062
Entropy (8bit):	5.381917528930447
Encrypted:	false
SSDEEP:	768:X024ULQwfaekOYoyjgXIHOQ0fNcm7+Jhq3Jt5a6o:X2maekOzysX1fNcm7w
MD5:	67F974E3B666FB38D835CFCAE2532120
SHA1:	523A856363FD6F5E5AF46316E34BF0FF58F79898
SHA-256:	4945ABEA23BEDBB93710BD7498A5AABA61B43C9E479E65824B92817E7581FD68
SHA-512:	7B96B24C0CA7B0F9E53739922DF3E019DE224D5DB4E5F5A5D30DADAA53EA136397CE91CCB28E8EFFB8E51E278CD14005D55A0CE095A42D4C9CEE5BF14801D3E1
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/885-d6ecc87b4abc63e3.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[885],{4811:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.d(__webpack_exports__,{HY:function(){return Fragment},tZ:function(){return jsx},BX:function(){return jsxs}});var cache,func,cursor,react=__webpack_require__(7294),react_namespaceObject=__webpack_require__.t(react,2),StyleSheet=function(){function StyleSheet(options){var _this=this;this._insertTag=function(tag){var before;before=0===_this.tags.length?_this.insertionPoint?_this.insertionPoint.nextSibling:_this.prepend?_this.container.firstChild:_this.before:_this.tags[_this.tags.length-1].nextSibling,_this.container.insertBefore(tag,before),_this.tags.push(tag)},this.isSpeedy=void 0===options.speedy\|\|options.speedy,this.tags=[],this.ctr=0,this.nonce=options.nonce,this.key=options.key,this.container=options.container,this.prepend=options.prepend,this.insertionPoint=options.insertionPoint,this.before=null}var _proto=S

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1803), with no line terminators
Category:	downloaded
Size (bytes):	1803
Entropy (8bit):	5.205326896473008
Encrypted:	false
SSDEEP:	48:fbci9MVXFHvwICNSxJ7/SK46mMgyxsXSUdxAKDr:ky8H7s6sCaAc
MD5:	492A292AF349774AC90503DB7025D983
SHA1:	70A1FBC06ED17D3B255318F3392CF9F0B9D5627E
SHA-256:	B7268DFBBBF118CDC38C54DED726A7F844615B8292E5B79E9DDFBC0D07652102
SHA-512:	0F5ED3854BFB032A3D755209A097F0C65209E937F9A445C269F70980718D358EFE8463A45953E667BAB48F0757F8D36CEC52DC95F5B9ED8643BAC092803F4502
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/pages/_app-4a36b7240ff60e5c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888,451],{24451:function(t,e,n){"use strict";var r=n(28526),u=n(22624),o=n(85458),c=n(80065),a=n(75034),f=n(22073),i=n(75424);Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:function(){return _}});var l=n(43219)._(n(2784)),s=n(41950);function p(t){return d.apply(this,arguments)}function d(){return(d=i(r.mark(function t(e){var n,u,o;return r.wrap(function(t){for(;;)switch(t.prev=t.next){case 0:return n=e.Component,u=e.ctx,t.next=3,(0,s.loadGetInitialProps)(n,u);case 3:return o=t.sent,t.abrupt("return",{pageProps:o});case 5:case"end":return t.stop()}},t)}))).apply(this,arguments)}var _=function(t){c(r,t);var e,n=(e=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct\|\|Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(t){return!1}}(),function(){var t,n=f(r);i

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27881), with no line terminators
Category:	downloaded
Size (bytes):	27881
Entropy (8bit):	5.145165347426631
Encrypted:	false
SSDEEP:	768:NYQPNzPHhXrmg831enXU/a1inBnYEBCGpKz8fsn/HU:yozPBXagHuxr4gj
MD5:	80A16A7469ECE9A85DF7AC8D39605662
SHA1:	54E64975F24647D242FA4DC0E20BA048A603DED2
SHA-256:	7236BA4D18121D1C1E55329FD2110EB585B49DED5D66B2FE461F15369C7D3DDA
SHA-512:	07968309BC3F528C0CCF239EBDEB79802BD474794498453D2ED664D15F260F77E29219DEF8D5D25B4F1CF85B94D47A07AFF6B34ABF3A9B3808EAEDBA6BDAA5D5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/31.c043863a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a]))for(i=0,o=(n=e?flatt(t[a]):t[a]).length;i<o;)s[s.length]=n[i],i+=1;else s[s.length]=t[a];a+=1}return s}}},"3fZ3":function(e,t,n){var r=n("utat");e.exports=function(e,t,n){return void 0===n?r(e,t,!1):r(e,n,!1!==t)}},"3kqR":function(e,t,n){"use strict";var r=n("8s1R"),o=n("p9qs"),i=Object(r.a)(function forEachObjIndexed(e,t){for(var n=Object(o.a)(t),r=0;r<n.length;){var i=n[r];e(t[i],i,t),r+=1}return t});t.a=i},"42TE":function(e,t,n){"use strict";var r=n("Jn/H"),o=Object(r.a)(function not(e){return!e});t.a=o},"4Vr+":function(e,t,n){"use strict";var r=n("8s1R"),o=Object(r.a)(function pickBy(e,t){var n={};for(var r in t)e(t[r],r,t)&&(n[r]=t[r]);return n});t.a=o},"4Zd6":function(e,t,n){"use strict";var r=n("8s1R"),o=n("U/ZD"),i=n("pQZd")

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 657 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	124834
Entropy (8bit):	7.944737206772905
Encrypted:	false
SSDEEP:	3072:ffZvvKpjdpURGYyeWPH0rx3ICZWTqMxIvBo0phI7kQl7/nC:tvcRpURGNeGH6NStxsot7kQl7fC
MD5:	9C4968FF679BAC7C9E4CC57772C759DB
SHA1:	7E1F8BC0BEE1C93034D5105F2BD64EF43F9D0BF1
SHA-256:	BC060EDD90B0C6945967C72C4FE9F1CBF8A782E9F87511B2C54CE5192354B38B
SHA-512:	9494144A8C1C2C44F466E46B6980BD29876DE32FDF756075AFBE8BB49A419422B32E77D38DFD93471F522518244F9E56AE0343041BADB3938047AD784BCD2DD0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................{....PLTE............................................#0!............(....... $(.......Y6&.... ....`................h..e>).......O...u...W..........z1..T.\|S....GQ(..mF.fA.....M.9)....[C.......PN2#6......."5.xL.qH.p.%1.I.C'.V..vN< .{=#)-.a=. )]..F.!..pV8&.o+G#.v%..F..B..........tVg4 q6....=..J...1=.[!...C.....j!..X8.6./..x.O-..i,......a]...7..3.....lP.h&.../1529F.{[\|W>\|F.._!vP7.6. .;y2.9AQ^=.>....>mJ3.W4.dI...89<....e&...Z&..T...jAIZ-=OeC..P4bq..`...O.=2+.=.....&6F....o%. .Yf~.^8.._.....L.K<3...m..>Od.........X9MQ[NVi..wQ4GZW^rJ^zABEp?(..`x..qE._H.\|O.z.[?.nI..u.y*x...Ww.....YF;BVo.eA.g=.....].C..y.n.]...hhi.S!\|.....r]QJJMl..Qj...]]_..~.k...msx.........m....g.....R....hYiRD.sa.......D..t......zsm]QL.0!;UCS{ZJdQ$D1:.......tRNS.@..f...PIDATx..;.+E........<4.#Y...8.....2k.@p......WA8...;pBh....`..\..yT.....8.~......s.T...0o...........H....w....}...............x.....77..t:..o.../......~zz.....b

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	921
Entropy (8bit):	4.337849973502388
Encrypted:	false
SSDEEP:	24:twdqoF0wni2xVbz1LV6DY4J7VyLD1DuVwqLOFOJMxM:69Vxdzhg701aaqSDM
MD5:	559874CCE4E5ABCA81AB2271675B5DBB
SHA1:	9B5FB3027CF6503FD8C4F8ED36050E3F3A750A91
SHA-256:	8F50CD41F9738CEC9C518BE33B60DF095EF889D4FA3BEE623A7E2B4B8B0C3D80
SHA-512:	F06940AA7A8CFAD4278A56FF3486A57D868CD8DCFC8CE87D2DA2D32C4F4B2FE5887A9310EEF11D0B9C188C122B862E261C8AFCBF41718BE92203FD4F71505962
Malicious:	false
Reputation:	low
Preview:	<svg width="20" height="20" xmlns="http://www.w3.org/2000/svg">. <path d="M6.206 13h7.588a12.596 12.596 0 0 0 0-6H6.206a12.596 12.596 0 0 0 0 6zm.29 1a12.504 12.504 0 0 0 2.227 4 8.125 8.125 0 0 0 2.554 0 12.505 12.505 0 0 0 2.227-4H6.496zm11.028-1c.372-.928.576-1.94.576-3s-.204-2.072-.576-3H14.72a13.5 13.5 0 0 1 0 6h2.805zm-.482 1H14.45a13.384 13.384 0 0 1-1.777 3.647A8.145 8.145 0 0 0 17.042 14zM2.476 13H5.28a13.5 13.5 0 0 1 0-6H2.476a8.057 8.057 0 0 0-.576 3c0 1.06.204 2.072.576 3zm.482 1a8.145 8.145 0 0 0 4.37 3.647A13.383 13.383 0 0 1 5.55 14H2.958zm3.538-8h7.008a12.504 12.504 0 0 0-2.227-4 8.125 8.125 0 0 0-2.554 0 12.505 12.505 0 0 0-2.227 4zm10.546 0a8.145 8.145 0 0 0-4.37-3.647A13.383 13.383 0 0 1 14.45 6h2.592zM2.958 6H5.55c.397-1.278.99-2.51 1.777-3.647A8.145 8.145 0 0 0 2.958 6zM10 0c5.523 0 10 4.477 10 10s-4.477 10-10 10S0 15.523 0 10 4.477 0 10 0z" fill="#edf1f5" fill-rule="evenodd" />.</svg>.

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	283286
Entropy (8bit):	7.9697379598769125
Encrypted:	false
SSDEEP:	6144:/SP3Cm3bRB8od7Qgl3qggPoPutwXbMIWPVnQknQ:/SH3FBXcglqggftab3WPtJQ
MD5:	9BA65284B01E652F093DA5062F7A6487
SHA1:	C537A5537CAEE92023B2252139E97506CDE75CDF
SHA-256:	D881806857BE0DBDB86EC4E80C0D25F78E684C6463AF6781D0B64BB7668AB5CE
SHA-512:	E068AA849CBB4B7F80641BA8DFE77E10201E632F85A3AEF981FF594BA266D99192136DE0685D16CE95B0EE3C8FA2D6172A252D734B54E3BC6411378B560A2A01
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/7lEyMAosQLMPNV3ciF9dmK/7cc6df4946379ff407d55727a5bc2f46/productUI-docusign-ai.png
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a...R+IDATx..{.wIY...{..#.......r.I.............x...E.......d.c....^R.h..I8.d.I....N.?.A..$....:F..\v....O.o?........w.?3.]..w.....C.B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!.8.b.B..%.t.u.kn888.a..SS..c..S:.n.\|..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	211329
Entropy (8bit):	5.171973921790016
Encrypted:	false
SSDEEP:	1536:+2JhOCFey47gOuyrv9BMMTvdJKHe+bpgY5IVD6TbN1eAeQ+fOi7ZAboPrQxkpT/F:JJhv5NDst/
MD5:	36A297A1094741D1D36D9C31F33EA062
SHA1:	C6B6FD48065E4FE97A2998F1CC77748BF9FAFF56
SHA-256:	9260359FB2B9E2B4E8FB96C8F54A415F9E91C6755EC36C850DBAD445F97C3110
SHA-512:	1E8FDEC99FA888402D3F27F82F3E3D8B7FD5CB04DEED80EFF6CB3A295CD881AED7F7ED1CCC44E7FB4EAD0326F1450E813825327E27308751CB8123D1FD45F150
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/common.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.pre.exception{font-size:145%}body,td{margin:0;color:#333}body{background-repeat:repeat-x;background-position:left top;font-size:75%;font-family:'Arial','Helvetica',sans-serif;background-color:#fff}a{color:#333}a:hover{text-decoration:underline}th{text-align:left;font-weight:bold;white-space:nowrap}form{margin:0;padding:0}h1,h2,h3,h4,h5,h6{font-family:'Verdana','Geneva',sans-serif;font-size:100%;margin:0;display:inline}textarea{font-family:'Arial','Helvetica',sans-serif;font-size:100%}select{color:#000}select:disabled{color:#aaa}select option,select optgroup{font-size:100%}img{border:0}dl{margin-left:1em}dt{font-weight:bold}fieldset legend{font-weight:bold;color:black}fieldset ul{padding:0}ul li,ol li{margin-left:1.5em;padding-left:0}input{padding-top:0}.fileFieldInputElement div{padding-bottom:3px}.accessibleHiddenText{position:abso

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	123719
Entropy (8bit):	5.4691313738222025
Encrypted:	false
SSDEEP:	1536:WF9rJ8hCvDZGCMxNLxGrh2dpJ9ZMZZIXOpj+mL3opq1Yqh5w:7xWg9SZZIXwfjopqLh+
MD5:	C7EAC9A820851215466FAB7A76255F6D
SHA1:	32ED2525171C5ACE832D747F590ECDF86C7229A9
SHA-256:	72BAD477C0C0B1DEE092AD33CDB562ECF796D6EAFB63EB02090F59BC0EA74E8D
SHA-512:	0540FD5C8F6BF8FA6F78458977B8DC125B7E5AE5E6CAA447CAC051EF78B90CFC1206AC010052339543882E3D013F19304FE8AD7607F8CA55486C63B43C833D47
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"295ac930-4585-45d7-b3ab-7962b3fd4b52","themeLayoutType":"Home","params":{"language":"","viewid":"eb9556a8-abd9-4d79-b20c-e81ba2526cfb","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"295ac930-4585-45d7-b3ab-7962b3fd4b52","themeLayoutType":"Home","params":{"language":"","viewid":"eb9556a8-abd9-4d79-b20c-e81ba2526cfb","view_uddid":"","entity_name":"","audience_

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.437147921986512
Encrypted:	false
SSDEEP:	3:Yh2/vWGcVIGL+EQVAVAnhdfH4:YB5BjIw
MD5:	AD8E7F787E2449DA06FFCAB830442C93
SHA1:	FED86D513CBBF9A9C2FAA8870A2C0FBB472A5BF4
SHA-256:	49CCC65B6080D2177EB19DB1B8387CF3E21739CFAB00836D520895326840DD1D
SHA-512:	390899E78746D9E8BEE6DAB0713A16E79B03DB19620C0044081A66365C411BB410D890B444BDC2ED8932F1C78F757A126BB1CF25E851F4CBAD93DE79CFA14047
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/f
Preview:	{"DS_A":"305622db-cab4-46c0-8a17-15a582e0ed4c","DS_A_C":""}

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7215), with no line terminators
Category:	downloaded
Size (bytes):	7215
Entropy (8bit):	5.715150265850369
Encrypted:	false
SSDEEP:	192:XFl9r8FRHF6U/Atg28bngH1nlm6AVPhJ98evibOEOxWShjulmu/TuVH5coKW8AB6:DVfnzeuN/Tk4
MD5:	73B9F4A9EB62A2176090BF9C21A639A7
SHA1:	1C601CF93D1BE4E6B9C55F273DD9EE758076BE00
SHA-256:	9DCB7DF984F468CEE4F41F0E76EA672A02601350AEFE9BCCFFA7BD0120782941
SHA-512:	0E55F3682ED12AE6A022FD44E1B371344AF82ECCE03F8093369446F60E9947CF5BE48D10675922C98CAA76CF57E6739458C7378954D0EE8953349ECEEAE7DDB3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/main~493df0b3.9e1d5232.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(49).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(40)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(54).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(52),E.e(35),E.e(22),E.e(19),E.e(43),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(50),E.e(42),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5699
Entropy (8bit):	5.296602915599285
Encrypted:	false
SSDEEP:	96:5KMbwZjaQTPJJCD2QUkL8WNfL+YyD40ryoeRVC+7Y2zsU7X9zwau:9gOQcvRLbZL9yD40ry9/JzsU7Xru
MD5:	0637D4DA0E0B18950761E178C5FBBA20
SHA1:	A5899ABCCA3A8D1A6CA36347FAF365A3B150098C
SHA-256:	94F737475281FDFEEE01B81B0A1EAF4F5DE2C6F39549CEC91CD78739BD53233F
SHA-512:	74C1E7E429A7E08097C433F2DB1F76AB602D770A6C633933C154E87175283CC436E5F719938A537CAB9AD8FE60B9DFB854A5C4DD64E9D221DEC2886C1315E000
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/1702515884138/DSC_GenesysChatbot
Preview:	/* eslint-disable @lwc/lwc/no-document-query /..const MAX_RETRY = 5;.const TIME_INTERNAL_MS = 500;.const CHAT_BOT_CONTAINER_CLASS = 'genesys-app';.window._userInformation={};// store the logged in user's information.const _USER_INFORMATION_TAGS={"NAME":"NAME","EMAIL":"EMAIL","ACCOUNT_NAME":"ACCOUNT_NAME", "IS_GUEST":"IS_GUEST", "PATH":"PATH"};...let loadGenesysChatbot = function (deploymentId, env) {.(function (g, e, n, es, ys) {..g['_genesysJs'] = e;..g[e] = g[e] \|\| function (){...(g[e].q = g[e].q \|\| []).push(arguments)..};..g[e].t = 1 new Date();..g[e].c = es;..ys = document.createElement('script'); ys.async = 1; ys.src = n; ys.charset = 'utf-8'; document.head.appendChild(ys);..})(window, 'Genesys', 'https://apps.usw2.pure.cloud/genesys-bootstrap/genesys.min.js', {..environment: env,..deploymentId: deploymentId..});..};..../*Returns the location tag from the current url/...const _getLocationTag = function(url){..../** Page location sub location */....let _GET_SUPPORT_PATH = '/s

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.9826031985455645
Encrypted:	false
SSDEEP:	3:qVvlKMD/WAGv4qgvOs+oNGb:qFMQ/H4lnoQb
MD5:	792E7DA69F9637E2F63C0FD5245DAC86
SHA1:	589F6FE5CE5EFBD111AC635C747838A84475CD6D
SHA-256:	F5FC14181849CB5F911A632A9663DD875BD7FA4A0565D05A17D8185CF643853C
SHA-512:	E78D9812F95CA53E1F591445AD731040F7A51107CBB411B533A36C7BC9534346DEE99FF6D3A5F948898B189471C01ECC68634DCD3CAB0B38E8EA077D56746C1D
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>....</body>.</html>

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1886
Entropy (8bit):	7.860616806628173
Encrypted:	false
SSDEEP:	24:rUB/6em6NQ0DVOigRCzrFmSSxz6JEwnlKKU3cZDzUeMDtTRA5R4JUmnKqFBe1Ozw:rUB/6h6R6IzY2lKKU3kDzUeMZFAiNcec
MD5:	66B7ACA9C7FE038F8B505ED6F4826560
SHA1:	7C6EB9F053597DAE9D9A1991BB0FD29A5908918F
SHA-256:	2681FBBF618EEA1A872364FB3D5596C8166C3F83E3C9AF3A5BCC152A24E82888
SHA-512:	DAA989B04A108729552850DDF6317DC2A2BB4DCA471FC6F5A35F0A53377F2DE8FCFDDA5FCEF4EB488A3D903B1B7AEE3B85B14D10AD222B7F2E524DCD38DE0255
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....;.R/....pHYs.................sRGB.........gAMA......a.....IDATx..[.N.G...5.....fyx...0{...-G90(...'`y...;.)F..H.wx..r..c.\ W[..b.MM.......'.;..U.SS]]]=.4h0.D.....Z.PA.>d...e...M..\|..!^.<.(......s..B.D..HZ..(.{.....m...n1f.5B....'./_F...j.Td,i$/.RI1.SH=..#I#y}$...k....f.J....Ka..Vb.......-hP7N.`Z..~;..^...uG.).....9.j.4qv....A-......;..s..%.G..?....+......b.....%...7.}........!...813....R.h...sI.U\=.xA2b..3\|?D..>....?'.=C....L}........T...Y.P........l/...>.L....;.G.R.SY.I\|.\n...}.....H.m....!.W....V..G...D.,..)iW..E...c..?.......8R.n..w........._"..!oM..9f..V.E...9.G..L.c.~]..<..E1.07...=G..2>..T....4T"X.6C.E.SGr...I.r...XR/..;F.y...ySp.......S.\|W........._.'&.bv..\|........%.&...IQ$.S......$P.7..A...eI....S..,(/..*q.......0.].!6A....wx.!.)....{l2RV............^+.xH\..>....&C...X.u....m..(..b.MF.y.a./....L.CZ..W.....X....R.h.}....lIA}.\Y..~Yk......0..?.f.G..bI..?.....A.\|...E.......Ay)}fc..a...uK7z6R.E...>.-.T........?.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=ed91c088-7bc1-4da7-aed3-66a4a48ca451&sessionStarted=1713289455.802&campaignRefreshToken=e86c19ce-3176-4988-8a04-41e2e39a617d&hideController=false&pageLoadStartTime=1713289454531&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (486), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3264
Entropy (8bit):	4.622434014345442
Encrypted:	false
SSDEEP:	48:vbQ1FKCnktFnndSwFFms/laP8qIVcrSLrg82ExQUi+Cyu:vbGF5KFws/lu8qIQSR2kdi+Cyu
MD5:	B58DBCA877E41DD99DDFB5243C409C3B
SHA1:	649A46DAE1B3AC8E37FEBA417DB0910FB2DBB278
SHA-256:	97453DEDCE2EB9200583F4324EC9C7CBFCF272E76EFFA3157A57F18ED4B277FF
SHA-512:	1621F3661E400F2DF5D1126A440AE9059DC910BCA13B81107771E7BDAF6A5BEDF715DB7D4AA6E9C0FB5DDB6B911A59E87EAB288C9EA64D8AAFEABB7E9A6F1AA9
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/apex/zoomin_app__ZoominGAPage
Preview:	..<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html><head><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="/resource/1639078464000/zoomin_app__event_layer" type="text/javascript"></script><script src="/jslibrary/1698336664248/sfdc/NetworkTracking.js" type="text/javascript"></script><script>try{ NetworkTracking.init('/_ui/networks/tracking/NetworkTrackingServlet', 'network', '0668Z000000DbWp'); }catch(x){}try{ NetworkTracking.logPageView();}catch(x){}</script><script>(function(UITheme) {. UITheme.getUITheme = function() { . return UserContext.uiTheme;. };.}(window.UITheme = window.UITheme \|\| {}));</script></head><body>.. <script>. let vfUrl = window.location.href.substring(0, window.location.href.indexOf('/apex/'));. let event_layer = "https://support.docusign.com";. parent.postMessage({ "vfUrl": vfUrl, "eventType": "zm_vf_url" }, event_layer);..

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713289453514&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management
Preview:	{}

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94361
Entropy (8bit):	5.268906933862704
Encrypted:	false
SSDEEP:	768:FT3+kw9UO7GpSeOqRlCFYRKW16y13BUNxekUG/6GUX5+M6lhrLfyZ6sMOqLIdPVD:Fai9tUNeGDM6lhrLo6szIG/2xICB4Lf
MD5:	1FAB3E8D98E98FE27B86BDEA9085F17B
SHA1:	D0CFBD4819FECE863D18C58474B759755797C357
SHA-256:	77C1FEE067F934F8D9268DFACC3BD33674EFFD759B0AD1B702E2C5DFF710CE21
SHA-512:	FA3BBD91F6B5E65D6EE16793CA3481EB716C0F034634551CF07B8229B6FA91C0B44557F351E9136AEDDEBFDE26103C28B076840F81AC26178616A4911CC1F0D7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/25.b8d3a33a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r.a.mark(function _callee(){var e,t,n,a,c;return r.a.wrap(function _callee$(r){for(;;)switch(r.prev=r.next){case 0:if(e=Object(o.b)(),t=Object(l.a)(!1,["embed","configuration","theme","soundNotificationEnabled"],e),n=Object(l.a)(!1,["embed","configuration","theme","notificationOnFirstVisitOnlyEnabled"],e),a=Object(u.c)(e),c=Object(s.a)(e)\|\|null,!t){r.next=8;break}return r.next=8,Object(i.a)({topic:"play-host-notification",message:{chatOpen:a,notificationOnFirstVisitOnly:n,activeConversationId:c}});case 8:case"end":return r.stop()}},_callee)}));return function playSoundNotification(){return e.apply(this,arguments)}}()},"76KI":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var a=n("QtlZ"),r=n("LVcX"),c=function hasGate(e){re

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfXJ:YGKe+
MD5:	4AB1B2FAFAC8446E3F329B0B0DB9808C
SHA1:	BEF639CD408A77648D92883866A353078DF08752
SHA-256:	66B9C90C1C910938928F03A3CB23264C4976BB4786313664CA05CF4DE33E60C5
SHA-512:	3EE8010C1BF0B4D34FA190F69C12A7D4C65ECF21D526E1225E27732E1C63CB290DFD73EF0F75BB78CB7BCAC4B7BF65A88F31D382882A387E6F0D022047AB681B
Malicious:	false
Reputation:	low
URL:	https://geo.docusign.com/country
Preview:	{"country":"RO"}

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4739
Entropy (8bit):	4.736490039075709
Encrypted:	false
SSDEEP:	96:mbr63wlBqhA2/EB9CkxgfFLFA31vlKn4aXtYly:mQwlBqh8PaF5A3ZlKn4CtYly
MD5:	4B86605C4B80FA75342703878E7DFF13
SHA1:	6EF59F904C58E88B3E143BA3DA464AFE63FDC188
SHA-256:	2F186CDFA13B6CA51F69D44BAC8A7D5B69E1D5409A68D21F5768A87C6DFDB3A1
SHA-512:	B493241426AB5A1B75D1455720E84AB27A2B7E176FDF782ECB14B26004F5553FD306DCAE14C17CE788891FDBCAE9A32A5E22CB187C6BCE66486B89A0E5028AD9
Malicious:	false
Reputation:	low
URL:	https://na3.docusign.net/Signing/StyleSheets/Framework.css
Preview:	/-----------------------/..../* needs brackets to swallow error on dev /..{..}..../ This file contains the styles needed for the 2014 rebrand /..html {.. / Prevent font scaling in landscape while allowing user zoom /.. / Use 100% here, NEVER none. See http://blog.55minutes.com/2012/04/iphone-text-resizing/ /.. -webkit-text-size-adjust: 100%;..}..body {.. margin: 0;.. background-image: none;.. background-color: #EAEAEA;.. font-family: "Helvetica Neue", Arial, sans-serif !important;..}...Header {.. display: none;..}...scroll-area {.. position: absolute;.. overflow: auto;.. overflow-x: hidden;.. top: 0;.. left: 0;.. right: 0;.. bottom: 0;.. min-width: 1024px;..}...scroll-area, .Border.scroll-area {.. overflow-x: auto;..}...scroll-container {.. border-bottom: none;.. position: static;..}...clear {.. clear: both;..}..../ site content - centered w/ max-width and padding */...site-content {.. margin: 0 auto;.. max-wid

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21475)
Category:	downloaded
Size (bytes):	878875
Entropy (8bit):	5.5147196593562
Encrypted:	false
SSDEEP:	24576:ZaUTHmCBX/mcdyuGiGFCiR5N+zcIi0k7ht:ZaUTzBX/mcdyFiGFCiR5N+zcIi0k7ht
MD5:	D88654A84C00FBD35FD1E507D20AE5F1
SHA1:	5D927F69ED7E43F9A967878B4AA5406460C52E57
SHA-256:	C38EA70269DA2E778689E1E1EC7B5E51BB46B3502842723859E93CF7366D6B03
SHA-512:	20F4C78499E56D91C5A172D38BEDFD073C7D27E3ADA8573079BA2F2868D441D0C44C1107927E12F59567EDDA52D4DCE919EB7FCD59B1B3731218AD1AA9D29E8F
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/jslibrary/1699262264248/sfdc/main.js
Preview:	var InlineEditState = {"EDIT":{"cssClass":"inlineEditWrite","display":true},"NONE":{"cssClass":"","display":false},"POSTONLY":{"cssClass":"","display":false},"READONLY":{"cssClass":"inlineEditLock","display":true}};.var ColumnType = {"NAMESPACE":{"inlineEditable":false,"isCompond":true,"comparableDatatypes":["n"],"isNumber":false,"datatypeLetter":"n","needsLookup":false,"isDate":false},"HTMLMULTILINETEXT":{"inlineEditExtraData":["maxLength","isHtml"],"consoleSidebarInlineEditFieldConstructor":function(){return ConsoleSidebarHtmlMultiLineTextField;},"inlineEditFieldObject":"HtmlMultiLineTextField","inlineEditable":true,"isCompond":false,"comparableDatatypes":["5"],"isNumber":false,"datatypeLetter":"5","needsLookup":false,"isDate":false,"inlineEditFieldConstructor":function(){return HtmlMultiLineTextField;},"filterQueryOperators":["e","n","c","k","s"],"queryOperators":["e","n","l","g","m","h","c","k","s","i"]},"AUTONUMBER":{"consoleSidebarInlineEditFieldConstructor":function(){return Con

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7951)
Category:	downloaded
Size (bytes):	8285
Entropy (8bit):	5.244135284520358
Encrypted:	false
SSDEEP:	192:oyCmhZ5RDGwnmL1Q2oVgdTlK92bHMhgsF3F7gj0ea:ZhPRDGwnYndA8MVF3F7AA
MD5:	A59CAAE29D0AD8C65398377F51B21BDD
SHA1:	158C3C7AF006C2F3FAFFF3F55A09384A23D0CF2B
SHA-256:	AB5961246DDCDA5ACF22A32E165ED8D15758CEC5EC566F3039B1D395A68F1A05
SHA-512:	7053F106088EB0BD6A599F5AD0C5AC04345A5CCA4995EFBB04061F20CD714539F133A641EC68DC6D8E069A6C0AF8780A4CD56B2BB3DE517B3C2B2FBFC2B5603F
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/349f80dd-8f4d13fff1aeee64.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{16060:function(e,t,n){var a,r,l,i;/*. @remix-run/router v1.15.1. . Copyright (c) Remix Software Inc.. . This source code is licensed under the MIT license found in the. * LICENSE.md file in the root directory of this source tree.. . @license MIT. */function s(){return(s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a])}return e}).apply(this,arguments)}function h(e){let t;void 0===e&&(e={});let{initialEntries:n=["/"],initialIndex:r,v5Compat:l=!1}=e;t=n.map((e,t)=>d(e,"string"==typeof e?null:e.state,0===t?"default":void 0));let i=f(null==r?t.length-1:r),h=a.Pop,o=null;function f(e){return Math.min(Math.max(e,0),t.length-1)}function d(e,n,a){var r,l;void 0===n&&(n=null);let h=(r=t?t[i].pathname:"/",void 0===(l=n)&&(l=null),s({pathname:"string"==typeof r?r:r.pathname,search:"",hash:"

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26453)
Category:	downloaded
Size (bytes):	26609
Entropy (8bit):	5.1798915041849485
Encrypted:	false
SSDEEP:	384:lg1ZyFtqNJSXEfecErpGdWxTZfqqqVbjlEpM0cORO:lgotqkEfzErpGdWxTZfqqqVbj2tO
MD5:	9574EF2F28A3322D64DD229EDF857D3E
SHA1:	F2C09A00D582D2A03D6D1320AA5688EB087387FA
SHA-256:	BBB4B32C2A0C64792CA923928138453F21FD235EC20E0532BAB61E64A34B1503
SHA-512:	18EEBBAE0E650B468FF02F20A7F677E66F9BFEA063A315370EA5EBA65202A8E1C45CBEA2189EE262EE423B0E3F0FC8844D206469E4739C77EAB4F88CC1401AF6
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/setup.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..sysAdminTab .outer td.oLeft,.setupTab .outer td.oLeft{width:230px}.setupTab .outer .oRight,.sysAdminTab .outer .oRight{padding-left:10px}.setupTab .bPageTitle .ptBody .content,.sysAdminTab .bPageTitle .ptBody .content{padding-left:10px}.setupTab .bPageTitle .pageTitleIcon,.sysAdminTab .bPageTitle .pageTitleIcon{display:none}.bTask .bPageBlock .pbBody{padding:5px 20px 0 20px}.setupTab .bResource .primaryPalette,.setupTab .bResource .secondaryPalette{border-color:#930;background-color:#930}.setupTab .bResource .bPageBlock .pbBody{padding:5px 20px 0 20px}.bPageBlock .setupOverview td,.bPageBlock .setupOverview th,.bPageBlock .setupResource td,.bPageBlock .setupResource th{padding:3px 2px 3px 5px;color:#333;width:50%}.bPageBlock .setupOverview,.bPageBlock .setupResource{width:100%}.bPageBlock .setupOverview a,.bPageBlock .setupResource

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29606)
Category:	downloaded
Size (bytes):	29942
Entropy (8bit):	5.508024439026688
Encrypted:	false
SSDEEP:	384:3Y1EfXnRvHfEcwMuXb4vdRg5uKlLtc65XlXfPSBlQ6rRBtXRjRFU4Kdv+bacYMMV:3YmXR/RrdKdDVlPqBPRXxZU
MD5:	A8354C6620323C6DFA5342685D85AA07
SHA1:	636CEC30E2F1BFA01C382018C6BECA0FE642E28F
SHA-256:	A37F01ED933312187981ABE34FD10C9D0DC4CA70CEC92EE4A0FF5CFCD8EA833C
SHA-512:	588544268E51196AEA14B4D8977FB1B2989638AD15C6AF231AD94D610931B1F1ED9144A0B354871A16BF87B48EFBBAE55207166DB4395E6517164DB8443174BF
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/resource/1710974750000/zoomin_app__Zoomin_FP/fp.min.js
Preview:	/*. FingerprintJS v3.1.2 - Copyright (c) FingerprintJS, Inc, 2021 (https://fingerprintjs.com). * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license.. . This software contains code from open-source projects:. * MurmurHash3 by Karan Lyons (https://github.com/karanlyons/murmurHash3.js). /..var FingerprintJS=function(e){"use strict";function t(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]+t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]+t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]+t[1],n[0]+=n[1]>>>16,n[1]&=65535,n[0]+=e[0]+t[0],n[0]&=65535,[n[0]<<16\|n[1],n[2]<<16\|n[3]]}function n(e,t){e=[e[0]>>>16,65535&e[0],e[1]>>>16,65535&e[1]],t=[t[0]>>>16,65535&t[0],t[1]>>>16,65535&t[1]];var n=[0,0,0,0];return n[3]+=e[3]t[3],n[2]+=n[3]>>>16,n[3]&=65535,n[2]+=e[2]t[3],n[1]+=n[2]>>>16,n[2]&=65535,n[2]+=e[3]t[2],n[1]+=n[2]>>>16,n[2]&=65535,n[1]+=e[1]*t[3],n[0]+=n[1]>>>16,n[1]&=65535,n

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11141), with no line terminators
Category:	downloaded
Size (bytes):	11141
Entropy (8bit):	5.2091619177959565
Encrypted:	false
SSDEEP:	192:tAnMI+lkKfpA4dVfg78tqtvntGdRHrO2fWBjlY/LyoblDGS+zsX7xSwEge:+nMIgkcdlhtqtPtG3rwlY/LxbQU1ru
MD5:	CCD37404195FFF5783B10BB017D12992
SHA1:	9AD173AC57C66C1EE99B0B94A35E625BD9ADB1F9
SHA-256:	257EF1B7DD06F88A465E5BADB58C57B62CF678D7618ECC2929AA3B428E848122
SHA-512:	CADEE59DB552F2CAC5CDA79A83D692E4E34FA9C2B7F2FEC7C5FA8147D619F225505CEA5EE9FF18952F0DA0B168E7C54FBC3E215B472B074EE38F314872C0881A
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/.netlify/scripts/rum
Preview:	(()=>{"use strict";var e,n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){return window.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0]},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),r="navigate";return a>=0?r="back-forward-cache":t&&(r=document.prerendering\|\|s()>0?"prerender":document.wasDiscarded?"restore":t.type.replace(/_/g,"-")),{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return function(a){n.value>=0&&(a\|\|r)&&((o=n.value-(i\|\|0))\|\|voi

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	921
Entropy (8bit):	4.337849973502388
Encrypted:	false
SSDEEP:	24:twdqoF0wni2xVbz1LV6DY4J7VyLD1DuVwqLOFOJMxM:69Vxdzhg701aaqSDM
MD5:	559874CCE4E5ABCA81AB2271675B5DBB
SHA1:	9B5FB3027CF6503FD8C4F8ED36050E3F3A750A91
SHA-256:	8F50CD41F9738CEC9C518BE33B60DF095EF889D4FA3BEE623A7E2B4B8B0C3D80
SHA-512:	F06940AA7A8CFAD4278A56FF3486A57D868CD8DCFC8CE87D2DA2D32C4F4B2FE5887A9310EEF11D0B9C188C122B862E261C8AFCBF41718BE92203FD4F71505962
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/themes/custom/cubic/patternLibraryAssets/images/select-globe-white.svg
Preview:	<svg width="20" height="20" xmlns="http://www.w3.org/2000/svg">. <path d="M6.206 13h7.588a12.596 12.596 0 0 0 0-6H6.206a12.596 12.596 0 0 0 0 6zm.29 1a12.504 12.504 0 0 0 2.227 4 8.125 8.125 0 0 0 2.554 0 12.505 12.505 0 0 0 2.227-4H6.496zm11.028-1c.372-.928.576-1.94.576-3s-.204-2.072-.576-3H14.72a13.5 13.5 0 0 1 0 6h2.805zm-.482 1H14.45a13.384 13.384 0 0 1-1.777 3.647A8.145 8.145 0 0 0 17.042 14zM2.476 13H5.28a13.5 13.5 0 0 1 0-6H2.476a8.057 8.057 0 0 0-.576 3c0 1.06.204 2.072.576 3zm.482 1a8.145 8.145 0 0 0 4.37 3.647A13.383 13.383 0 0 1 5.55 14H2.958zm3.538-8h7.008a12.504 12.504 0 0 0-2.227-4 8.125 8.125 0 0 0-2.554 0 12.505 12.505 0 0 0-2.227 4zm10.546 0a8.145 8.145 0 0 0-4.37-3.647A13.383 13.383 0 0 1 14.45 6h2.592zM2.958 6H5.55c.397-1.278.99-2.51 1.777-3.647A8.145 8.145 0 0 0 2.958 6zM10 0c5.523 0 10 4.477 10 10s-4.477 10-10 10S0 15.523 0 10 4.477 0 10 0z" fill="#edf1f5" fill-rule="evenodd" />.</svg>.

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289441539
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	4.683676689918715
Encrypted:	false
SSDEEP:	6:UxzHAs5/7v/WLtrnPj3wA7Ggrg+L4QFmZQLF7QqUQmEZ5k7QmEZ:UxMKzWRrnjSQoQLxQ5QLaQd
MD5:	5C103B4E9F4E3FB67D9FCB0C54722A9A
SHA1:	2449AFF5FCAF5E735E2BF57D3D2418A59011F857
SHA-256:	6A1290429B5780CE10A2F96A0C3AE4253E9A44EB70638171F6D8B71B0E5E746D
SHA-512:	2EE68767CD66A269F3D3D98236E7AEAFF2C9CCF2C5C7E55567AB230852286A8B2305B22CB599A16A46A3DEDE0ED66B0427FF46C5B29CB85EAA90C7D393EAB20E
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-appFooter.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..zen .zen-pageFooter{margin-top:10px;text-align:center}.zen .zen-pageFooter,.zen .zen-pageFooter a{color:#fff}.zen .zen-pageFooter a{text-decoration:underline}

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	747
Entropy (8bit):	5.530526482483565
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHEHuoLHXoAcRUViXKvKC:2dDATLf3z2kOOHYAcRUY0X
MD5:	9B177D16DB0A24ECC2D9163C3DD0FF29
SHA1:	B8F30A8D8DB54557F7C48BEB6A80C182CE2752FC
SHA-256:	FF1E70A7F38DBAFAE160B60406E316E97C519525670D732D0AE912A1F54153E8
SHA-512:	F6888A391870337B95BEBFD902765F056E81E8D1A958EB33BA221703D3F67BDF5D90BD3CCEC4807E00B726AD0DDA45B388373F6AF22E160653A804A969C37C1A
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/7gMtFWydiMHrue6DhrLJQU/483100ca17c7d6f717bc2453fbfbeb0e/pictogram-capabilities__1_.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#CBC2FF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<path class="st0" d="M37.5,43.5V15c0-2.5-2-4.5-4.5-4.5H4.5C2,10.5,0,12.5,0,15l0,33h33C35.5,48,37.5,46,37.5,43.5z"/>..<path class="st1" d="M39,0.9l8,8c1.2,1.2,1.2,3.2,0,4.4L25.9,34.5H13.5V22L34.6,0.9C35.8-0.3,37.8-0.3,39,0.9L39,0.9z"/>..<path class="st2" d="M13.5,34.5V48H0l0-13.5H13.5z"/>.</g>.</svg>.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	134108
Entropy (8bit):	7.980037274662238
Encrypted:	false
SSDEEP:	3072:hipdnzqr4Nw0bzGHbHYqf1JUW36Q1+2l9lEroVO:hiHRNDbqHbHYqf1JN3iAO
MD5:	A5E2650E372D2929F91F13E8DB877BE8
SHA1:	DFD960C269A11AB650BBC65FC36694BE5A8B1BAE
SHA-256:	F493F918C6C3371215AFE13E56CC6463B43188C2C32D9E56328075A087529B76
SHA-512:	2AFFEE20677EDB2B06B359E84AC3E9DD139293551A172FD099C0337F56757AF4B17C7326FB0546E04A47387B89E9BDBF3C5CDF790EE16C47039CEC9C9E7E4F12
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/2EtPn9bUkWstdeKU15nFXY/a121cb9bd5d40d3e539abf9bcb58e4da/man-typing-on-laptop.png
Preview:	.PNG........IHDR.............RcmE....PLTE........................(&&! %#"/,+:74...+)>;7A>;100730............ID@......MHCFA=..................PKG...545.........4/,ZUPWQL_YT...SNI...pK9...-&#fG9......:8;-.....kI:......lF4%..pOA-.....dC5<%.P5...%..uO<5..U'(hb_%..B(!K0(kL?M"#CAA...`\\_,-`?/X:.G-$E..S8....tSFHFI=........g^W......xXKZ>3~\Q............zP+phap66.EE.XW5..h12SPT.SROKNzS?.II.NMgB.....5#....oloy:;_B7XV[O89.O.^\.L.cU...@00...ca.l...hehI32...AAurv...xohA,'7)&.WB...}y}`eq......==......dT??.bI._....]E.i]...ov....G]EE...ejyjp.......u.ki.d:.]4......E87...\]g.m@.............gKK...V..A>Gw}.....vo.z\|...p.............sd....{.k......kRrRU.....\|...~v..F.ua.........n.....~......uv......_^.R.wr.........\.DC..k....ho.{H.....JHS.rH.....\|vZk.{T......_F[...f.z.^D.....w....IDATx...k$U..#.Y.2....&..$....U...!..P............".......A...B6...A........{^.~y...T..t2....w.....7..V.O<Ti.Sl\.\|...js........I.....,.#v..7....W.\|..G.O>.._..J.....

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 660x276, components 3
Category:	dropped
Size (bytes):	31577
Entropy (8bit):	7.769046614205463
Encrypted:	false
SSDEEP:	384:Qg/uRIGOas0wRtWZAt75rqbHJZvWOnSongklQ2PPTB/+p3uPf1OSfq94XtrE3:puRIGlsbDtUzJPz8UPR+p3dSfq94X2
MD5:	DBBB5FD10AAC8DAC2446F4818F0C33A5
SHA1:	4726559E6392C13C08BC0938D846FAB9D002CED9
SHA-256:	76C4804869FE4453518558AB75BE4725ECCE31609B85C46355CE78AB172F1294
SHA-512:	945B59339E52862BF58151EA7BFC3E895601A82F7351E0526107B09C28D871AB220508897485A2590A5236A6D0C6B4B4A18C4762597C8233E3F0305A1F38ECFB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....PExif..MM..................>...........F.(...........i.........N.......H.......H..............0221...................................0...........8...........@....................058.........058.........058.........0100....................................................2023:02:14 06:45:06.2023:02:14 06:45:06.-08:00..-08:00..-08:00.....xPhotoshop 3.0.8BIM.......?..Z...%G.........?..064506..>..20230214..7..20230214..<..064506.8BIM.%.......w.i5...Ze..&......ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl.M.O2#.q=..oiTy.................................desc.......cprt...(...Pwtpt...x....rXYZ........gXYZ........bXYZ........rTRC........chad.......,bTRC........gTRC........mluc............enUS.........S.3.4.J.5.5.x..mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.3XYZ ...............-XYZ ......m...8z....XYZ ......d.........XYZ ......$....g...Dpara............sf32...............W...)......

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8000
Entropy (8bit):	7.956311720761714
Encrypted:	false
SSDEEP:	192:68Cr3eY3RaPZdWv6+CIJs0Lkddu/NDm0laAhQoegKcMl1F:Fk3eYhmofCIm0LSghuoegKcM9
MD5:	C102C6D1BF0DF972B011FD49F4E894E7
SHA1:	211AC57545ED65A7038560D6B1F8B29E7ADDF694
SHA-256:	688CE66342550D7DF482B1DEE22C10559AEC4B575C3E42DD86239F47D4B7290E
SHA-512:	891789A8C81926B070EF31D635F7351E8E1B0EC308BA1C6307843424346DFBB773923C784918DB6EDB56972CF45EF3502499483793BD1BA54C0D31663CE5627E
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/1UD43hoOxdWkZZPcTG64KN/aebf586f98a5dff7c5132401db92ea13/Woman-working-remote-on-phone.png?fm=webp&q=50
Preview:	RIFF8...WEBPVP8X..............ALPH.......m.G..lc....cu.\&.Yq..6...j...\|w....0..X.sa.\|.l.G..z.Kf..WR.....F...I.<...>[)..Nh.......j......e{4......n']2..//V....I9x..~..Lh...U.^..V.rq.Z._.%rYc..D....Cd.Z.nDv....r............?............?............?............?............?............?............?............?............?..........B-I?D.%./.-.D....w..b.br.%.e....(........y=...........H6......v.5c..7a..xDcBk?...\....3.YR..V.#]F...........C..n.!.VP8 Z............>.\.N.)...s.s...gn..>\...1.0......N....,.z..a<.../9.}................ao../.Vbl...[..{.h.~DG......1...X.8....x........./...@U..IZt.....DDDDHu^...!..P{...N...agP$.fs..t.ffffg..."...Vxx7......T..6..R._.kN..........).J..j...q06z....u...B.\.]........\|..ZU...9I.~...s..@HF..&[..7..Mo....-^...)...6......P~....J..f....B.9................7vS.:...N.x.......(.9.@CR11.?.....i8&...T...}...22...t.fffffp0."!D3....c.L...R.&.Ns._m\|tY#Hn.qj..r....~r.&c.....%i.4Z.........~pc...#.d.8......Z9. ./

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 12835
Category:	downloaded
Size (bytes):	5195
Entropy (8bit):	7.949191831562825
Encrypted:	false
SSDEEP:	96:v/Jv+gHKZtwaZxZLOLikWsGAZcFHw9VR/Jx4tRlq9aJ3KBku9hXG8G:vVdKtw0x9U6sZcFH83/47uaJ3MJjG
MD5:	A9B7E3BE96255A59CA32B3159EA791F9
SHA1:	8C353B30B3A222975FD94B4032D8C1DFF1EE9B9B
SHA-256:	4E4FCC47F4FB8655C2635BFA08F190754251504212367A4285F87101E825D551
SHA-512:	48B0AD466FB413B426E4B431EAD9DE4791291E9BE565C571E4F1853F404310E600B041B551F5C75A76B8B01F5F56A4BEB01D539E78CD5989CFF8EEAFED8D33B5
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/journey/messenger-plugins/offersHelper.min.js
Preview:	...........:ks....W8^n.8..'!.3....9...p..n.%...#..$.i..-.g....V...#K.V..R?....7Ry9O@h..JU0......O.xr8........\._t......W.....Q.......)...q.......0+.2:~.,../.....=..V.....y.......}..{+..,..P..<7..u..p9?..f\|...?#......l.7..mw..JA.=!.lt.Rs...7.3H....].........(....w..79..o.w...a.K...D....no.....=Z%...T^.......o.n.'.o...L....H.a..;=..k~{.d"y.E.q,..S)...q.YH. .E.._..Y......@-..A....E.......!....{.V9..r.a.CV..hE...,X..40u .4&..+yC..E.=.<CE(..8=<<.Mp....H....\|P..e.v,X...Pl.C. .20}....E.r.v~...f^B8b.r.........W......;..........sY.L...4.?..#d\.P..."..._.@$./jJ.R..@.*....9... .E(..gN6.d..3<.J.4...$!.e..v....g.)..a..S....f..n..%.+.........L..4..t.....\|...l.H..g.T&U....f."..E..O\|.<X.r!@.......S.-..)...L.H.4\S.:.5+C...3........o.N.IF.CKtu..zuY,..UZ:V....{..X..+..9.c..&..=.....D...g.. 23:...B........m.....J....)..YV....T...6.(..).c....O.i.....A$..R........l..o..A.j..w04....-'...n.W....m...4F.M....#....W9...w?........5..D..,c..r.f....r....pM..+..

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1886
Entropy (8bit):	7.860616806628173
Encrypted:	false
SSDEEP:	24:rUB/6em6NQ0DVOigRCzrFmSSxz6JEwnlKKU3cZDzUeMDtTRA5R4JUmnKqFBe1Ozw:rUB/6h6R6IzY2lKKU3kDzUeMZFAiNcec
MD5:	66B7ACA9C7FE038F8B505ED6F4826560
SHA1:	7C6EB9F053597DAE9D9A1991BB0FD29A5908918F
SHA-256:	2681FBBF618EEA1A872364FB3D5596C8166C3F83E3C9AF3A5BCC152A24E82888
SHA-512:	DAA989B04A108729552850DDF6317DC2A2BB4DCA471FC6F5A35F0A53377F2DE8FCFDDA5FCEF4EB488A3D903B1B7AEE3B85B14D10AD222B7F2E524DCD38DE0255
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png
Preview:	.PNG........IHDR.......!.....;.R/....pHYs.................sRGB.........gAMA......a.....IDATx..[.N.G...5.....fyx...0{...-G90(...'`y...;.)F..H.wx..r..c.\ W[..b.MM.......'.;..U.SS]]]=.4h0.D.....Z.PA.>d...e...M..\|..!^.<.(......s..B.D..HZ..(.{.....m...n1f.5B....'./_F...j.Td,i$/.RI1.SH=..#I#y}$...k....f.J....Ka..Vb.......-hP7N.`Z..~;..^...uG.).....9.j.4qv....A-......;..s..%.G..?....+......b.....%...7.}........!...813....R.h...sI.U\=.xA2b..3\|?D..>....?'.=C....L}........T...Y.P........l/...>.L....;.G.R.SY.I\|.\n...}.....H.m....!.W....V..G...D.,..)iW..E...c..?.......8R.n..w........._"..!oM..9f..V.E...9.G..L.c.~]..<..E1.07...=G..2>..T....4T"X.6C.E.SGr...I.r...XR/..;F.y...ySp.......S.\|W........._.'&.bv..\|........%.&...IQ$.S......$P.7..A...eI....S..,(/..*q.......0.].!6A....wx.!.)....{l2RV............^+.xH\..>....&C...X.u....m..(..b.MF.y.a./....L.CZ..W.....X....R.h.}....lIA}.\Y..~Yk......0..?.f.G..bI..?.....A.\|...E.......Ay)}fc..a...uK7z6R.E...>.-.T........?.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	5.3316315625780915
Encrypted:	false
SSDEEP:	12:UkU2mLnSvCRWTyvCRWDicQANoXA4Myis+psCQ4rtCEoDyqsgnUqZKf6o:pmuvCYTyvCYD9QANEMyF+PruyqsgUjz
MD5:	5F4F7675750C433CD6FAC71BA12DBA62
SHA1:	59674166DF3D17560DA9B9A318F71D30C7F27E9A
SHA-256:	091D0CBA8C4A8D22AC0CBC54B710E1A9739EF69F03ED3448C8F41E663BA712C0
SHA-512:	CB80956B2D0B1166A10195E1B794B9373B1E6E061EDB33897C81F3D1C2BF6F455A9E168A45CB158B4DE0B95D16689A98EDA75CC36EE64ECFFAF098510C15441D
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/i18n/vendors/date-en.min.js
Preview:	/!. messenger. * @version: 2.8.1. * @license: Genesys Telecom Labs. */.(("undefined"!=typeof self?self:this).webpackJsonp_Messenger=("undefined"!=typeof self?self:this).webpackJsonp_Messenger\|\|[]).push([[10],{466:function(e,n,s){e.exports=function(){"use strict";return{name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(e){var n=["th","st","nd","rd"],s=e%100;return"["+e+(n[(s-20)%10]\|\|n[s]\|\|n[0])+"]"}}}()}}]);

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2048
Entropy (8bit):	4.886793296383126
Encrypted:	false
SSDEEP:	48:e6m7eDwLO/T/6kok/TF/c4kb30m3ZP0ZopAa:JmSq8Nok/TF/Tkb30m3ZP0Na
MD5:	3165AF715E6BA5CA2B00F9AB5277CC8C
SHA1:	99697540AAC85B979624E1A09483418A4C30BD11
SHA-256:	08034C30A67418DD7BFF599A0EA4ECB87315D485ADB3BD1774AFC36B33705317
SHA-512:	9B62C145664DA8EE0C6B8C719B7468848F1E1F87CBD9DAFBBF878FCCE9F72E5569A7FCA13C01FC408ADB6B8C5B4F2393BBB93B5077BA02CA816C2DE7937EFA5E
Malicious:	false
Reputation:	low
URL:	https://na3.docusign.net/Signing/StyleSheetsDev/ErrorExpired.css
Preview:	..btn {.. background: #111;.. border: 1px solid #111;.. border-radius: 2px;.. cursor: pointer;.. color: #fff;.. display: inline-block;.. font-family: "Maven Pro","Helvetica Neue",HelveticaNeue,Helvetica,Arial,sans-serif;.. font-size: 12px;.. letter-spacing: .6px;.. line-height: 1;.. min-width: 55px;.. margin: 0;.. padding: 7px 14px;.. position: relative;.. text-align: center;.. text-decoration: none!important;.. text-transform: uppercase;.. font-weight: bold;..}.....btn-main, .btn-main.disabled:hover, .btn-main[disabled]:hover {.. background: #ffc820;.. border-color: #ffc820;.. color: #333;..}.....btn-lg {.. font-size: 14px;.. padding: 9px 18px;..}.....expireActionDiv {.. float: left;.. width:50%;..}.....expireActionDiv .newLink {.. margin-left: 50px;..}.....expireActionAccountless{.. text-align: center;..}.....expireActionAccountless .newLink{..}.....freshLink {.. margin-top: 10px;..}.....expireActio

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 660x276, components 3
Category:	downloaded
Size (bytes):	31577
Entropy (8bit):	7.769046614205463
Encrypted:	false
SSDEEP:	384:Qg/uRIGOas0wRtWZAt75rqbHJZvWOnSongklQ2PPTB/+p3uPf1OSfq94XtrE3:puRIGlsbDtUzJPz8UPR+p3dSfq94X2
MD5:	DBBB5FD10AAC8DAC2446F4818F0C33A5
SHA1:	4726559E6392C13C08BC0938D846FAB9D002CED9
SHA-256:	76C4804869FE4453518558AB75BE4725ECCE31609B85C46355CE78AB172F1294
SHA-512:	945B59339E52862BF58151EA7BFC3E895601A82F7351E0526107B09C28D871AB220508897485A2590A5236A6D0C6B4B4A18C4762597C8233E3F0305A1F38ECFB
Malicious:	false
Reputation:	low
URL:	https://docusign.file.force.com/sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLAa&operationContext=DELIVERY&contentId=05T8Z0000250azu&page=0&d=/a/8Z0000019R98/ofPnbj4wOZYBKpWeSGciEv2ng6eNiy.5nOQjk70.mf8&oid=00D300000000bS4&dpt=null&viewId=
Preview:	......JFIF.....H.H.....PExif..MM..................>...........F.(...........i.........N.......H.......H..............0221...................................0...........8...........@....................058.........058.........058.........0100....................................................2023:02:14 06:45:06.2023:02:14 06:45:06.-08:00..-08:00..-08:00.....xPhotoshop 3.0.8BIM.......?..Z...%G.........?..064506..>..20230214..7..20230214..<..064506.8BIM.%.......w.i5...Ze..&......ICC_PROFILE.......appl....mntrRGB XYZ ............acspAPPL....APPL...........................-appl.M.O2#.q=..oiTy.................................desc.......cprt...(...Pwtpt...x....rXYZ........gXYZ........bXYZ........rTRC........chad.......,bTRC........gTRC........mluc............enUS.........S.3.4.J.5.5.x..mluc............enUS...4.....C.o.p.y.r.i.g.h.t. .A.p.p.l.e. .I.n.c...,. .2.0.2.3XYZ ...............-XYZ ......m...8z....XYZ ......d.........XYZ ......$....g...Dpara............sf32...............W...)......

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.4144413036949715
Encrypted:	false
SSDEEP:	3:YXca47fcaDFCIn:YMa49YI
MD5:	EA09F91FEBAA0DAA6FF7CA083C32EF03
SHA1:	7DB97F9A004B2197111F3DEED9F88773435EE2F5
SHA-256:	18942862D38FF7690D608CAD7358CB6012E0E21CF6239A8122FD1CE1D7E0D7F7
SHA-512:	C01CBDE1C9549A79DD203E06864EEB54F7B0E2369C4855EEBB35014D40888D7FED1BE734D02A510506E349F8E839E6A9A8AA91B7F88C4FBEEE367BF0154C81C0
Malicious:	false
Reputation:	low
Preview:	{"reason_code":9,"reason":"Invalid page URL"}.

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.997102727203802
Encrypted:	true
SSDEEP:	24576:qDY9eEzNVeoOZsM/Z4kihsS+dvRlHv48QZBmBRf1+:CuJVeoOaM/qiSYpkZBmBV1+
MD5:	18112ABF84739DCE238B2AD425628ACF
SHA1:	032FAA03BDD278B5A8FB198296C4261412FA5AF6
SHA-256:	AB82E8669A344F3BEEFCA380BBAC153916CA615BE1660DEEA1CF943D437D6751
SHA-512:	37054C63DF290023EC5AF55FE6C5ECD217E8B085BA289F02823BECB7D3215074EB06BCE1F355AE853404E5DAC33E0E03330913287E4ED656092EE489A2D26CC9
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:6
Preview:	FJ...S..NE.'uEY.d.[...Y........j...Z.......j.kx@.?.i....Q..T......jD....mN..S......(+.\..r#..$&l..z.8h...4.a..5=..`.`.U\.2.9.#.nt...S ....2.7..V.'O.RiA...4Uk..q.A..R.A......b....."..7:g.:Z....Y.....C.d`._T! .w....i{...'....,....H.g6(.%.f....N$N(^.1z).'.....T.Y%"....n..4~........9 ....Y.0`.....A8\|m.7..6.....;e .Q..K...K....%.[n@.Z..H.?L-E.y......s.....X.5.B..g.u.....f....Z.....UV....A..I..&S./..8@..........X.]......t6.z..".#...x...7Xo..w...h.G.ft..m5..o.0g.....g...o.4..^..6f.S......[3.L......4JY....F....Sp..8w_O.g`..j.5.....ZT@H.....z.......A....;..D.lx....,.ef.oHQ.KI..`..0..t.&...5{.....2,>........Xy.....6.X"..."....Y....V".+j.<.u....f.w_.[?WL.r... l....cH..b.%..zpS...4.],....3..}...YU_..Ge...ku...f.u`.'......b6..\....~.N...7.\|...RI..../...\4....e..Q.M..x..B.sFY..\|.Ptx..\.K..N.32:..te.[..c.F...+..+.XI.LD.y..^.Dr..........?...-3R...m..s....=C..F.B.8..Yw.......:s..1..'3_.'.T..>...@.M.Opm...$MS......F.3X.g\|....VB.l...-.........(.sk..E.c.9h..E..

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.197845823084412
Encrypted:	false
SSDEEP:	3:YEHqZlL6RX7LthQ+V:YEKZlWpnQ+V
MD5:	BD0B814B289C55FD0F2D0CD84CA3ACD5
SHA1:	3C8C7DC6993D9715666D0B8A06EA10AB94054881
SHA-256:	78BD6EE8A2FCE4C0294729FA7DB73D0D370298F2F5738B53ECBF229F85171942
SHA-512:	F97E9DD29BD879ACE6209421E59119A888DCC9951BD9289770451F5DDD7FCF134A8A797344226BA5D46C0D5166D0EF0C247F4093CB4185A4C9263A90F044720E
Malicious:	false
Reputation:	low
URL:	https://api-cdn.usw2.pure.cloud/webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/domains.json
Preview:	{"allowAllDomains":true,"allowedDomains":[]}

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.4842572184389935
Encrypted:	false
SSDEEP:	12:jgUXW9q9X+lavXirAkyxbued/OAdottVacdgnQiNkTAYRFiyaiQkk:hXLXaoXir5sbuelOA2LyrOTA+iyaiQl
MD5:	FC6A97BC81D9B1B2B0DAF6A76678DF97
SHA1:	472075C5D1B81644A61613C02C9E759048487706
SHA-256:	4E1CCB730E4E3CE40DC6DBE8DE1A1AB49D74D492C298E0E910F19C7AADDE31F1
SHA-512:	D21006DB5B7DD8366C574C64A6FE5830A00F4E1CC146A478073F6DB1282BCCF2C72F9F7D3D9C3D8C8410B278111A2AB2D6372C30F0D170CCF9098381C90651AC
Malicious:	false
Reputation:	low
Preview:	// Polyfill for Object.assign IE 11.if (typeof Object.assign != 'function') {. Object.assign = function(target) {. 'use strict';. if (target == null) {. throw new TypeError('Cannot convert undefined or null to object');. }.. target = Object(target);. for (var index = 1; index < arguments.length; index++) {. var source = arguments[index];. if (source != null) {. for (var key in source) {. if (Object.prototype.hasOwnProperty.call(source, key)) {. target[key] = source[key];. }. }. }. }. return target;. };.}

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 295773
Category:	downloaded
Size (bytes):	84531
Entropy (8bit):	7.996304763783443
Encrypted:	true
SSDEEP:	1536:nPU2VqHalPmm6eoZh2agZTwTCMY6Nxk8kgI:nPU6qHaMeoZhN+UTCj6Nxk3gI
MD5:	813595C713C9BBFA2821B3169E3B8523
SHA1:	8BB847D96F8EF14B71C010ADC1E684A434F5E814
SHA-256:	41BD58676107146330CD83C2384A56722E26D4F597039917382A277EF317E12F
SHA-512:	BAA249C02846AB86D48C702690B838A2669A6C027476910008E1A23547A954C6728D1A7CF5B4274FBED384EE080CCB6157E15A257B87193B89A97C12025AE7FE
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/messengerrenderer.min.js
Preview:	...........mc.H.(.}.......aI~.....Iv.8.{&;... hI..4.l+F..VU7.H`{29g............o.[?n...cc...c.....(...lt...CA.. ff.g..x.7...p.xk.c.....h.8.$S..h.J8..D..d1c...fa....Z.4t.>;..C.Y...J...v...X...=u....\|.\|..C.o.....c.4.4.#[.Y..<.9..F.&f.....d....]{.X2..F...1{o$pf.F..5"......}......{..V[.Y.7G.O...%......l+.vo...1..$Dr..._...p.da8..nk.fxm.4.3c6.'~@f../V....^.k/B9.#@......F..f.R..2J...O...N..3<...g3..z....@.pk...Y.q....K~.2...>..,.:..#k......?..\.p.3.....aY...x..xG[F......YMZ-....U.!.0.@8.lIud=...z..3..6.?0.K....I..V....Y.H..(.q.1.z..D...."...2c..D.. K..z.n......-m.Y..a^....Prvs.t!...^.-....iG..#/e...P.S/fj!....#.c]...R.$.V.Q.<..7t.S.$..1;a....N...E;..gbG1K,e..Z.....7e.<.:.n...l..@.$I...... ...P.....).V0.6f....>vM.U.=..q.;...>..#@.g^. .c..F....l...U.N...U......G.].....T.@..neL.1.U1#.bvc.0.....V.......(h....!.T...l.J..w.S.`.1.<.\|.....cy0C.v.cZC`P.....b*..#.lH&.S....d..I..i...D&......wfKh.i.M.z..%V. .GB.A..DQ..yE.....a.0..7?.]+.......x.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	278435
Entropy (8bit):	5.572402631264673
Encrypted:	false
SSDEEP:	3072:FAN4evQq+71vbzwHn2A9jX8Pvp2LUF1eFS+MCY55CgY8pv1HkcnLP/w222ho0/cL:W4hq8wH2OWnVL55Cv8pNHkCLn22K
MD5:	549A3A2BED5E2E28DD95D68250D3BF92
SHA1:	E98816D35989F712A3B2BEDC06D0D5A41A455E0E
SHA-256:	E86F75970A752ACF2A8437FE16A572ACB56A6D4CA5E6A36F874C75B203462C9E
SHA-512:	68765C37E6A7B1D9AF549DC650850E2E0EEAE9195C2EC4BA1EFBC13A5EA5FD70EBEA72326D9276D348BCE082A8AD18F6C4299814047F9841F9012AFE5B89DF36
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-1TZ7S9D6BQ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","docusign\\.(com\|ca\|co\\.uk\|com\|com\\.au\|com\\.br\|de\|fr\|nl\|in\|jp\|mx\|es\|sg\|net)$","docusign\\."],"tag_id":112},{"function":"__ogt_ip_mark","priority":11,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":114},{"function":"__ogt_referral_exclusion","priority":11,"vtp_includeConditions":["list","docusign\\.com$","docusign\\.(ae\|ca\|co\|co\\.uk\|com\|com\\.au\|com\\.br\|com\\.es\|de\|es\|fr\|in\|it\|jp\|lt\|lu\|mx\|nl\|no\|org\|pl\|se\|sg)$","docusign\\.net","^(apid

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	747
Entropy (8bit):	5.530526482483565
Encrypted:	false
SSDEEP:	12:TMHdPxRi/nzVJ/KYf3nzO4gHEHuoLHXoAcRUViXKvKC:2dDATLf3z2kOOHYAcRUY0X
MD5:	9B177D16DB0A24ECC2D9163C3DD0FF29
SHA1:	B8F30A8D8DB54557F7C48BEB6A80C182CE2752FC
SHA-256:	FF1E70A7F38DBAFAE160B60406E316E97C519525670D732D0AE912A1F54153E8
SHA-512:	F6888A391870337B95BEBFD902765F056E81E8D1A958EB33BA221703D3F67BDF5D90BD3CCEC4807E00B726AD0DDA45B388373F6AF22E160653A804A969C37C1A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 48 48" style="enable-background:new 0 0 48 48;" xml:space="preserve">.<style type="text/css">...st0{fill:#CBC2FF;}...st1{fill:#4C00FF;}...st2{fill:#FF5252;}.</style>.<g>..<path class="st0" d="M37.5,43.5V15c0-2.5-2-4.5-4.5-4.5H4.5C2,10.5,0,12.5,0,15l0,33h33C35.5,48,37.5,46,37.5,43.5z"/>..<path class="st1" d="M39,0.9l8,8c1.2,1.2,1.2,3.2,0,4.4L25.9,34.5H13.5V22L34.6,0.9C35.8-0.3,37.8-0.3,39,0.9L39,0.9z"/>..<path class="st2" d="M13.5,34.5V48H0l0-13.5H13.5z"/>.</g>.</svg>.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 840x840, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	39638
Entropy (8bit):	7.9947154754289835
Encrypted:	true
SSDEEP:	768:vSfQyQTd6ax9f/9ZXV93ME3BNLwjtSHRY2F89P6eC0pAN38jCUf4ItXEIH2:2A6w9n/V9hRNLhHRzF8RfpAd8jWIt0IW
MD5:	6DEF8A47BDAC6CC263E9371F1EEFEB9D
SHA1:	5EE742D3681E08C5980C4F920F88CE756FE6B2E1
SHA-256:	30036DFB346FFD1A784D57C2C4F53B33DF2346709A4971A853BCA800C5AE46F0
SHA-512:	953C8815EF463F4691CAC40C301803B9768A00613617BB5F198A2B1B16D1BF2C752CB27D7243AD8AEEECC94E62177ABB1160096E60F1674CD1EE77AD7AFCF7B6
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/1lBNWvcCorq4OkqECvYFZ2/68e3295cdee439f27e3bdbf90420ffdf/woman-smiling-holding-laptop__1_.png?fm=webp&q=50
Preview:	RIFF...WEBPVP8 ...0E...H.H.>.R.L.$....[Y...en k............b...d..w!?]...]........5>>.....2.3}....._..Y6. ..........}..=4.O^......3....~z....a...{...y~...{v..../..RGuD.4....B...THf......5[...J#.....+.'^..w...x\|.L..)...).........j..........MC=........=...p.Qn...1...... ...L........5(.R.AS..:{..E...X.:.{7.h...6G....b[.y.y.p...Q..zK...7:..R3.....G=....RN..<..N.r.n.,@u..G..B..oT(....kr.-_.Su......iy...@.B2........Dl.0.. ..%......3........=p.....;.......z.....N........4..>.l....K........+.P0#..+U...G.cm..)I...4.0.X....9H..#..%.N=.....b +0...~..p.UC...L.s....=.+&....7.)W~S.8z\|J..$.&.?.....(kxFX.\|...2..-..v..Uj..R..c.=!..]...T..}.Z..y c{g.l....[=.w.....S\..@..r0.5..1..&..%......m.xQ.mk..F.W6....W.2]......A.aB.*2pC..+,.......2...`.I..a.7...L.XF.1...j.([...w.....h..3.A.~lS........Ra.p...j.B[}Dzu..!.un.....l.'.=..=.8..P....js.0.....D.K.F.x^4..v.l..L}..]_K.D.....h.d\|..P..H.m........0<O.H.j.G.C.......B.3...s .\..&.n<....gAr...tW. !.`...

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	134108
Entropy (8bit):	7.980037274662238
Encrypted:	false
SSDEEP:	3072:hipdnzqr4Nw0bzGHbHYqf1JUW36Q1+2l9lEroVO:hiHRNDbqHbHYqf1JN3iAO
MD5:	A5E2650E372D2929F91F13E8DB877BE8
SHA1:	DFD960C269A11AB650BBC65FC36694BE5A8B1BAE
SHA-256:	F493F918C6C3371215AFE13E56CC6463B43188C2C32D9E56328075A087529B76
SHA-512:	2AFFEE20677EDB2B06B359E84AC3E9DD139293551A172FD099C0337F56757AF4B17C7326FB0546E04A47387B89E9BDBF3C5CDF790EE16C47039CEC9C9E7E4F12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............RcmE....PLTE........................(&&! %#"/,+:74...+)>;7A>;100730............ID@......MHCFA=..................PKG...545.........4/,ZUPWQL_YT...SNI...pK9...-&#fG9......:8;-.....kI:......lF4%..pOA-.....dC5<%.P5...%..uO<5..U'(hb_%..B(!K0(kL?M"#CAA...`\\_,-`?/X:.G-$E..S8....tSFHFI=........g^W......xXKZ>3~\Q............zP+phap66.EE.XW5..h12SPT.SROKNzS?.II.NMgB.....5#....oloy:;_B7XV[O89.O.^\.L.cU...@00...ca.l...hehI32...AAurv...xohA,'7)&.WB...}y}`eq......==......dT??.bI._....]E.i]...ov....G]EE...ejyjp.......u.ki.d:.]4......E87...\]g.m@.............gKK...V..A>Gw}.....vo.z\|...p.............sd....{.k......kRrRU.....\|...~v..F.ua.........n.....~......uv......_^.R.wr.........\.DC..k....ho.{H.....JHS.rH.....\|vZk.{T......_F[...f.z.^D.....w....IDATx...k$U..#.Y.2....&..$....U...!..P............".......A...B6...A........{^.~y...T..t2....w.....7..V.O<Ti.Sl\.\|...js........I.....,.#v..7....W.\|..G.O>.._..J.....

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.314426701421019
Encrypted:	false
SSDEEP:	12:+o8ExMnMueFH5sGkx1EJtOLVeO7WLqUfgJ9nVklS2owStXr5:CEQwFHv6Eq7Z+gJ8Vwn
MD5:	72C688564D9DF34FF346B8CE821E6C83
SHA1:	AD76389B50376A45D061C82CC077EE3719C6618A
SHA-256:	6347A30B4B960C1AC1B54A75E7231D38352B5D348F95776FCE048D497A872BBF
SHA-512:	3933C84675EA10DD2E8F1EF71C5F7D1D37C4BDCDB0B9D958BD4F510C0D62D69A6EAA78283906DE1695440912FB79F02074F86ADAC8EC12F0C9E417324514F99D
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/1710540190000/DSC_SetGoogleAnalyticsWindowVariables
Preview:	var setWindowVar = function(event){. const {excludeAnalytics, accountId, userId} = event.detail;. //set window variables for interaction events. window.excludeAnalytics = excludeAnalytics;. window.accountId = accountId;. window.userId = userId;.. //push a new event for viewing the page to google analytics . window.dataLayer.push({. event: 'dscPageView',. userId: userId,. accountId: accountId,. excludeAnalytics: excludeAnalytics. });.. }.//event listener to handle event sent from rscFooter lwc .document.addEventListener("addGAWindowVariables", setWindowVar)

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1045), with no line terminators
Category:	downloaded
Size (bytes):	1045
Entropy (8bit):	5.3503291736388645
Encrypted:	false
SSDEEP:	24:fbjgjIej/kn1cvXu1MwXaXSPr1xAU7MFolYuCQXQ6:fbUjhju6X8Mhm1xAHd6
MD5:	9805A8471A519D792A60A5214145B403
SHA1:	605FCB92DB6C9241206C309099ABA0AFC4549873
SHA-256:	E90C4C2D02A287915D1FAE5C8ECDF7925CDC5ECC1604A038128CA4B5F013A440
SHA-512:	DF6840A99029DD1700CB0C1EF09E2DC68F2C8A28A9E1994235D51E26373060A9D1BDDE54CC373E4AD6A5B00BDC7AD6CD08C289E2B3E9AC7D7C4D2A7207B46F86
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/pages/%5B...page%5D-422ba4461a5a0422.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[240],{51774:function(e,n,t){"use strict";t.r(n),t.d(n,{__N_SSG:function(){return r}});var i=t(52746),o=t(40365),c=t(2784),l=t(51501);t(94438);var u=t(81250),d=t(66152),s=t(52903),r=!0;n.default=(0,o.Yy)(function(e){var n,t,r=e.content,f=e.slug,a=e.preview,p=e.locale,_=(0,l.pc)(r);(0,o.qe)(),(0,c.useEffect)(function(){window&&_.fields.redirect&&window.location.assign(_.fields.redirect.fields.to)},[_]);var w=(0,i.Z)((null===(n=_.fields.content.fields)\|\|void 0===n?void 0:n.pageContent)\|\|[]),v=null===(t=_.fields.content.fields)\|\|void 0===t?void 0:t.popup;return v&&w.push(v),(0,s.tZ)(l.Dk,{locale:p,enableLiveUpdates:a,children:(0,s.tZ)(u.Z,{content:_,locale:p,preview:a,children:w.map(function(e){return(0,s.tZ)(d.B,{pageId:_.sys.id,content:e,locale:p,slug:f},_.sys.id)})})})})},19596:function(e,n,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/[...page]",function(){return t(51774)}])}},function(e){e.O(0,[774,179,322,399,776,888,377],fu

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4877
Entropy (8bit):	4.656032923236862
Encrypted:	false
SSDEEP:	96:vImyQ/2yWg8/2yWpQqfsBgaSxQylg6mmpduzI3ufYP/XgdLolwPB:vImyW2yq2yl6mmygP4LoeJ
MD5:	8EBFF36118550AB72BB17778C3E39C15
SHA1:	159AE64B4E1B7867CBD5290F63430E6210D3F88A
SHA-256:	2F85C90E77782C10A05C91E07326F05954BD6382318B1E4E7254CB2515F3ED70
SHA-512:	60A75357AE499C49619B4EC3D9807FC878040C746554E348A818D2C89BDCB0B9293E4883D3832565D2E692B97BF3F5945583857D48FB51FBEE8C55808E1C81F5
Malicious:	false
Reputation:	low
Preview:	<svg width="516" height="688" viewBox="0 0 516 688" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1503_89877)">.<rect width="516" height="688" fill="#4C00FF"/>.<path d="M299.787 409.264L31.7773 540.269L299.787 651.338L567.797 523.181L299.787 409.264Z" fill="#FF5732"/>.<circle cx="247.905" cy="168.726" r="84.7257" fill="#CBC2FF"/>.<path d="M37.0403 444.021L93.8482 443.453L34.8517 341.269L37.0403 444.021Z" fill="#CBC2FF"/>.<path d="M35.4922 342.367L122.58 391.708L94.4887 444.551L35.4922 342.367Z" fill="black"/>.<mask id="path-5-inside-1_1503_89877" fill="white">.<path fill-rule="evenodd" clip-rule="evenodd" d="M495.857 257.114L401.16 214.676L341.311 348.223L341.314 348.224C336.508 358.952 353.808 377.148 379.957 388.867C406.107 400.586 431.203 401.389 436.011 390.661C436.041 390.593 436.07 390.526 436.099 390.457L495.857 257.114Z"/>.</mask>.<path fill-rule="evenodd" clip-rule="evenodd" d="M495.857 257.114L401.16 214.676L341.311 348.223L341.314 348.224C336.508 3

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 643 x 261, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	13702
Entropy (8bit):	7.8986608011417285
Encrypted:	false
SSDEEP:	384:HSmSjs2UiEATeIi1u4k01h3LnnkTmw4Pl7VFLo9C8KwtD:ymWEi+h1Q0f7nnkTmtRVFL0djt
MD5:	5CC1977B21BF780731B87028942FFD6D
SHA1:	80D7113EF2323BC839FC79BF43FD37C4D7E03993
SHA-256:	CDFA2C94A06FA985649F2853A1D1BC2C64CD1B487B5EB6EBB2DCFAAEA5DE2FB9
SHA-512:	601E493D5ED694D50897B17E37BE93C37A63FC4DB15E07ACE8CE1F693EDC44370061729D0C5671D5D96D6A9D7205FA7237FE00BC8E7CB50AB0BDBFB132D48962
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.6..c...4.IDATx^....\U..q...O.......#v...~PZD..Z..RV...PQA.T.@E....b.[..kh...t.-]i-.{..i.f.d&3...%....4L'..{g.9....q.J'...9'..;...DDDT>,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN,1..Q9..DDD........KLDDTN.....K.'"..KL..\.DD.`......,1Q.r....%&.C.{""{..Dy.uODd...(........!.=..=Xb.<.'"..KL..\.DD.`......,1Q.r....%&.C.{""{..Dy.uODd...(.........zzz".H4...b.x<.L.t.t.u...8..3.[...v\..J^(..KL..\.De.......Ot./......q.."\..b...(...J%...h.].Q.Le.....l..,..KL..\.D6C.b.X..1T.6.....JVS......-.Fmmmr..K.{"......'.H..)......._b.....p.....F....Yr..I.{"...~g..?.d. .G."...8 nll..O.#W...={N.<)'..'*..S(...."f...?..S..D....0...F8&f....@$.Q.1`..G...{...J.c...s.....q.`..7.+.....A.....Xb.&..P(..G.....wY.....Xb. /78..Q(;............y..d/..<"..`?&.C.....a..^,1yA$.....pC...8..g.....g....~....g.P..;.6.....5.

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83519
Entropy (8bit):	5.538821824248939
Encrypted:	false
SSDEEP:	1536:zHI/ev1BjikFMJdwUCkRI+XafM3kRnFgKr:MWF6VXsM3kRFj
MD5:	A8CEAC2E3BD2C128D8F2E2F1B0EF0290
SHA1:	A1C4D2B832CE5CFB0D5E46B1EB6A8E708CD7F937
SHA-256:	7418C75F5B92AEBD9204DE88288757D6864F8DC8CF782EEE24BB788F9F02C338
SHA-512:	7D00DB637BD194B07F56E1C6B77DE07570BB71B9EB0E308FEF1B62CB9462C974F97F5B2D8E423920AC5B898CD18DEA2384941D868A521C03A46891B6DE6867D5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/8.10f90e75.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),c=n.n(o),i=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,i=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return c.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:i,viewBox:"0 0 16 18"},c.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	downloaded
Size (bytes):	25600
Entropy (8bit):	5.448672016604878
Encrypted:	false
SSDEEP:	768:RYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:eeLP7vobcSr
MD5:	48BE1563378F7C36BDADC0F2EB616856
SHA1:	2AA42B08FE8CC7AC0DC371D2309A38D5A465247F
SHA-256:	63C035E2F43180086B19EC08F35C8DEEE82B2B804DDFCF92F7F0E6D835957BFE
SHA-512:	6BD0492F48D247C598BB23CD41063A90C95B93AC491F80BB80FD755D004A2275CD04D0D456CDF618D70E344C74B6EA51FBD1EE3AFC62F68A91DA322A0BF9692F
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/43.7ac85d58.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (677), with no line terminators
Category:	downloaded
Size (bytes):	677
Entropy (8bit):	5.39397925140006
Encrypted:	false
SSDEEP:	12:Za6BGmFM9TwX7d5r0drbRQ4GsKovtFcV63FXjV:ZdUcMFw3r09bChc7cmFV
MD5:	77FF956F8632FD9D120F43B974CD4D81
SHA1:	C4023CD161AB95064F5C8B2D1EBCA61345238E2F
SHA-256:	23A6D7FFEC1C72591CA308AF03395A0901D06E11416A818F3807E5B069692314
SHA-512:	D2420CACE2F8451E35B293D51D665F94DA6DC628E2812DABE6D3B24C8759347D1F3A8E6F9B209100233A2A1B1139D7B27B4F636B53979B8D594A5A4606C20BA3
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/35d1d58a1044879bd83c010cbbdbe30c4a199dcd/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(s,e,c,a,t){return{__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":[s,e,a,t,c,"static/chunks/pages/index-6f2511e7ddc5e010.js"],"/404":[s,e,c,"static/chunks/pages/404-458700898bb864e5.js"],"/_error":["static/chunks/pages/_error-5276d7836f3b57bf.js"],"/[...page]":[s,e,a,t,c,"static/chunks/pages/[...page]-422ba4461a5a0422.js"],sortedPages:["/","/404","/_app","/_error","/[...page]"]}}("static/chunks/349f80dd-8f4d13fff1aeee64.js","static/chunks/322-a0d074e43c952876.js","static/chunks/776-c480819ecc3896c4.js","static/css/ef46db3751d8e999.css","static/chunks/399-11944819542c0ab4.js"),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45138), with no line terminators
Category:	downloaded
Size (bytes):	45138
Entropy (8bit):	4.971380621374382
Encrypted:	false
SSDEEP:	768:J0pH3w4JWZdsTvfjsdPlyYVtSxOc9EHV5d2VLuqaUnkdaBK1At:um4otSxOdVunkda9t
MD5:	3B8BA82E1BAC13EE29E9764A55620D99
SHA1:	D68D0E4A43779884F7FDA72C7FEBEE83BA287E0C
SHA-256:	58FDB03FAC3E89E51525A5A45EB777395D1B499BF4483E96201B6BECDDBE516F
SHA-512:	5A873467CF51F97362E289AFC8BFA1D63A118970D89A1F0A0845DE66F7751DAF95652BB0FEC5B6D7D545461DBFE1F2ECBC3FEB4B4D882F10E3B94001B1A97875
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/1.1bcc8082.chunk.css
Preview:	.drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-height:114px;left:-16px;width:-webkit-calc(100% + 32px);width:-moz-calc(100% + 32px);width:calc(100% + 32px);opacity:0;visibility:hidden;overflow:hidden;-webkit-transition:opacity .2s ease;-o-transition:opacity .2s ease;-moz-transition:opacity .2s ease;transition:opacity .2s ease;border-bottom:1px solid #eff3f5}.drift-widget-composer-emoji-picker>.emoji-mart{width:100%!important;padding-top:8px;-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;border-color:#eff3f5;border-bottom:none;border-left:none;border-right:none}.drift-widget-composer-emoji-picker .emoji-mart-search input{appearance:searchfield;-moz-appearance:searchfield;-webkit-appearance:searchfield;-webkit-box-sizing:border-box;-moz-box

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	downloaded
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4355
Entropy (8bit):	4.832378091699169
Encrypted:	false
SSDEEP:	96:RtK5CBR6AeSEINsgv+K1Rgjfqesn9owE9oUHoQQFtbRIFerAVzOGCa2KzcVIfKPW:/bH6jgv+mRgjfqesn9owE9oU2zuwAACv
MD5:	A4910B59A5466410AD31C21091B9A306
SHA1:	460B6E8E864BD8DAA14CFC507D05926DC8379792
SHA-256:	2193C373A9018D19DFEB993F4AE088B90F0DC5B757E52AF489A904D04FCA86BE
SHA-512:	AED7958BE69AA2F0CC77364075D8A7245FD7957103638D72AF6404458B73DA8FA80920EF3D502F9874383FBD794734119EBF7498C2AE4C8BAD301D89BF78A88B
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/3/DSC_HeadOverrides
Preview:	/* eslint-disable @lwc/lwc/no-document-query */.// SEO: Add meta description to Guides.document.addEventListener("ZMSetMetadata", (e) => {. createMetaTag("description", e.detail.description);.});..// Listen for event from Guides to report product tags to Google Analytics.document.addEventListener("ZMSetMetadataLabels", e => {. if(!e.detail?.length) return;.. let valueTags = [];. e.detail.forEach(metadata => {. if(metadata.content && (metadata.name === 'Product' \|\| metadata.name === 'Integration')) {. valueTags = valueTags.concat(metadata.content.split(';').map(tag => tag.split(',')[1].trim()));. }. });. if(valueTags.length > 0) {. window.dataLayer.push({ . event: "supportContentTags", . tags: valueTags.join(','). });. }.});..// Hide or show Qualtrics Feedback button based on url.// This is needed because Qualtrics targeting logic is not triggered on page change.function showHideQualtrics() {. const qua

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1874 x 242, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27224
Entropy (8bit):	7.902278294555033
Encrypted:	false
SSDEEP:	384:7ibbJjYWEcJ5PgD19JHOhV5P9fXU5QQqwMTs0+PGEd6NijNzP7dY34MFxMImiqX:7WE5p9JHObXMxqwyP+Pk6zRY34ME9iK
MD5:	89AD0DEB4CB385E07B81E27C0F3C2C0D
SHA1:	20A309293BB723D33FC31E845643B20A68A200E6
SHA-256:	EC5DF993D3C65FE0C164344C1C644FE3DBACB73FF4C1387CAC4E0E2B580EF3C5
SHA-512:	FCAD923E84EE140AD12C644F1BE95BBF1CD9FD2068518184DBA0A233DF5A55F1B9E4A26CC239D3DBF3A04E53E9CF6BDE8D2BB44E1EB6732D2CE79CA9D668C0DF
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/file-asset/DSHoriz_B_support?v=1
Preview:	.PNG........IHDR...R.................pHYs...........~... .IDATx..._l.W~/..q..H..fr...8..ln...9.{..y`[...".D...4 .)"eKo.....<"u.%"`6.X@4."..V\|...[..!...L.q...u.M...,.p}..NK-......wN....3..].........(.5.oll....0...`...:...c!""""""""""""..Jt.:6..`....P.f.@.@.^................$.A.:...a.D.^.....`.............\.. ul..`^z.)....`...............&.A...... .^.:./T................Q...V..Qm.W.:.UJ3.T.@./Y.Zs............. ..$e.@....Rj..4..#....z4.!......................06V..XNz0DQRJ..Ru.7qt...=............... ..M.X..XYz Dak.P..Y.JDDD.1.Tq.A.1.......%... ...p.cc%.%,-Ue.C...T.@.l/NDDD!RJ....P.....R........^.ixDDt.o..............o......g.A..{...f..+=."?B.P...n.CDDD.SJ...c..`..6....+a.......7...[.2...p.....5...+.....(.b.J..W....d=.T...7.{..T"""j-. .-........^....a..i./+<."""":X.......U.J...P5.~.....).....n...Q..R3.>Ex....XWJ.Bz=""j..7..k.w..Q....l.m9...s.......16V...Q.=...p...(a.s.T./..0.0..(\.~....e.............7.U.........U16.#=.J7.T.R..o.1.T"""...Q.~.`.JD..3.....""""

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713289394388&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy
Preview:	{}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24735
Entropy (8bit):	7.60306613036859
Encrypted:	false
SSDEEP:	384:n2LQE3dzJl5AoZ4HtsQzqBV4ACzY8/29CkvDfld3osYk:n20EPAoZ4HDzqB/V8/0ffl1v5
MD5:	7A6C6802AA3C2D92E0F951DE9E9154A1
SHA1:	F62F56AEE69CD4F32A6FA10E7A5619D69AB59E92
SHA-256:	9C04585BE058846C0121C04C744191476317105FD6167ACFA54A4DF64242CDEF
SHA-512:	DF7CB63A02DB8FC97BA887B7634A80485BC95D818C06017FC28EC9355C5F0BB6EA2FBF04D96D1099AA5120A8568D2C3F9F06ECD3C7AF338C6F61C9D798DB3F1E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a...`4IDATx.....\w]'..'..P.....().(......VE...a...&E\..)(.....*4..W$......t........6..e......._........\|nN&3w...w.....;s.33..9....................................................................................................................................................................................................................................................................................................................................0^...`j.?vxo..g.......X..........L.fl.......6..L...`.5...'O..~.....hA..0....d....F.....`.....S.C.6..F...`.............v..f3..=...N>....L.1....T...6..k.q..#q.Q............L....ULp...`..........`.....S..lfw.....7......a....).<th}......U.;..7.....`.....S..1.6#............I@..0.......?.......~..............L.f47.h6o.........hl...3.....y...UB..Q.^P4.....[.....V...=...c....[.Px..[u.@..........P..73$.............']....H..?O>\|rG..D..n.......

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=14f18f21-5e5a-4d14-815f-84932f0d5f20&sessionStarted=1713289442.911&campaignRefreshToken=15fd7d8d-e8b8-432e-b6de-28db75075323&hideController=false&pageLoadStartTime=1713289441539&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39948)
Category:	downloaded
Size (bytes):	328167
Entropy (8bit):	5.494040050939756
Encrypted:	false
SSDEEP:	3072:RETq+71vbz6HnwAC84np2LUF1eK5Uv522gY8pv1Hb+AnJ:WTq86HAe522v8pNHb+AJ
MD5:	67DAA4C575440751464C1302D2BC8261
SHA1:	D1A50C9B5D462522330BC8456C21DA71DA27E80C
SHA-256:	08E26EA34C69FB8E0A1A05390B69448E1565F79D42BBE3BEE7BC727D9E2A7D6F
SHA-512:	BDD1CD80DDCE9AE9F708CB9D985068BEF6A0D9498F0EB5278228C124847977C53BE728DC4228F25FDCA9C83BA1794DFDF2578A770CB360F38A7DE59DB5E1908B
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5MG82N9
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"202",. . "macros":[{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__k","vtp_decodeCookie":false,"vtp_name":"Zdgtm_disable"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":",C0001,C0002,","vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"pageLanguageCode"},{"function":"__v","convert_undefined_to":"null","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"siteLoginType"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"sessionId"},{"function":"__v","convert_undefined_to":"null","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"authSource"},{"function":"__v"

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	3.9878907834096475
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HH4yOE9HEEpGlyRHfHyY:YGKed2pHDIiEltDyY
MD5:	A1CB0B2D60ABD78CD4AFD51130704B14
SHA1:	73A4754A1DC9F006CABEFAE9E0713BD6A7EA4C32
SHA-256:	7137416AE47607DA7C495B7636C7B8C58C9DC2C393B936B394AE13BABB25E175
SHA-512:	A3AEBCCEF719900B9D6445F6DD91307B8426517D2A3F24A1778F9F621401829FAAE280BEA6E597DF99E6805E2E0A4C5E9303E20E37E6422B4CFA784DFCB7C97A
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 548 x 586, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36300
Entropy (8bit):	7.943983754851478
Encrypted:	false
SSDEEP:	768:Ne6bEJVfanHKOyTowvlZuxqPaJYEti2+b44ehtE8GsxTgn7tFBia5/XkXXXX5:ggEJJNHLfPa/x+8Jt7nxkn7/R5/XkXX5
MD5:	8D358B0AB4E42697B1563389A45E2AA6
SHA1:	049700E9C9FC729AEDB16B1BA4578F766D6A7DC8
SHA-256:	4E786EA49BBDBEBB1FA4899EE62FBFD3B227D01BC980C1874A3FFBBB7D04DCBC
SHA-512:	67FB8A38F6D69DDADDEDCD14D11583A93B9C95A304B5098BB76AB8691CF7DAE27458720659E9DDCF223493705AFB6959D87C84E75CAC7177A5C9618E31D10098
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...J.......^Z....pHYs...%...%.IR$.....tIME.....,..;. .. .IDATx...}t[.}...H.A.#ZN..l ..........>.......-...y.]Y.K...m. ...X=..F9.....4..t.....n..S..r.v.HS..6....t............O.IPW.>.sp$.../........\..CDDD.A-N7@DDDD.....8N.....8N.....8N.....8N.....8N.....8N.....8N.....8n......eN3=}.3...x.......$""rKiZ@r....g.?tl...l......'.......1G6{....N....<.........l+o....91]z4A.n...&8....A...=.J..f)....{oNs..CL.....o...M.........9.p..S.....Z.1.C..'....$.g...8./....5.".D.....{S..Q...H...!.[.v...I$.9.^.s%d...'.....1...\.b./..}.Z$""r.....A.n...[....:......@...Y..'..`+._.....n....s.c..n..<.A....p.9"""M..{H.9t.(.?x.%.$sY.tQ......?.q...g..{..S..ajf.72.l.Q....R.e..md.c....&-v...CY...-+...,...../...C...fn1..I.....g..[z..b`....~:.;Y3Q..a`..5.. ...a..b.{:.....?.!.00.sy.......E.......Ls..j.'.....Boo...}...Mb6.._...4.[...........j..aDI.i.,..y....,......x2..T9i.7........^.........s.:.""".V$ ..<.A3&...X.....O.....S.....p.X..{.4Z..#......L.......O..{UfgNp.<.J

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3429
Entropy (8bit):	7.848241773312019
Encrypted:	false
SSDEEP:	96:LySLYC0Jd+4kjIs94lJFTofWUkyfwVMSUwT:10T+3sbLofWUkyfwVBTT
MD5:	0D26DF8D62B0515D1DBFC983FF628FA5
SHA1:	CC4EEF914638B5574314BD89338D34B4C4016CDB
SHA-256:	82213C7339A1E45DCE1CD6911CE68D652E22244E562F5F67FD5316118EB5BB0C
SHA-512:	A6B902CD8E14B6E355658006A2DBBBE0BE622CD24C86A44980D47918C011BE271503F5E29AAE677C872728C8A3147DE8590B528CE71C70D8A48972CA07A651C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....Z......,PLTE..............................................................................sss666...uuu...lllEEE...111 ...,,,...XXX.........[[[..................ppp```UUU......\|\|\|......xxx???................NNN.......eeeKKK(((...........bbbQQQ......hhhGGG..................AAA999.........;;;III$$$...ddd........tRNS....[.....ujP.+.{....IDATx...g_.P..q....... 4.0e..%X.QQ......~....b.C.J.B...HBr...'s.v.wo.=.3..{a.z..s..s..-..[...%.7..3.g/l.1..^c.....\{i....s......H..?`..g..E$.A....9@...N.....?.0....D..1. 'g!.>.E..EL..n.....e......".aX...f.`]!..I\...=N_..`.......3.v....E..y.v.....f04#.b.....D$x\|..f.......%.H.............I.T...$.d.....2..,M.eX.X..`n.t.....3~..)9 .)Q..GE...~...mp.a........dkC.+...N...a..A#..1..5......._C.2.Y...IP...X.C..L._3\..P.[.=..)I....`..U..%e...9....K....R;].G.....&Q.G.....e..R..qK.P...j'..8.72..i2}.t.\|T.`.*.....+<...R8.4.r......].m.(.3..H..T.....(....p.C.x..<Wt..h...6.H.P..b...?<..'aO.2.".H

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4877
Entropy (8bit):	4.656032923236862
Encrypted:	false
SSDEEP:	96:vImyQ/2yWg8/2yWpQqfsBgaSxQylg6mmpduzI3ufYP/XgdLolwPB:vImyW2yq2yl6mmygP4LoeJ
MD5:	8EBFF36118550AB72BB17778C3E39C15
SHA1:	159AE64B4E1B7867CBD5290F63430E6210D3F88A
SHA-256:	2F85C90E77782C10A05C91E07326F05954BD6382318B1E4E7254CB2515F3ED70
SHA-512:	60A75357AE499C49619B4EC3D9807FC878040C746554E348A818D2C89BDCB0B9293E4883D3832565D2E692B97BF3F5945583857D48FB51FBEE8C55808E1C81F5
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/5njZgbUWn7OkNcxpuSgmD2/e3d0d77f6b7db47c01045121e5a13573/illo-agreement-trap.svg
Preview:	<svg width="516" height="688" viewBox="0 0 516 688" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_1503_89877)">.<rect width="516" height="688" fill="#4C00FF"/>.<path d="M299.787 409.264L31.7773 540.269L299.787 651.338L567.797 523.181L299.787 409.264Z" fill="#FF5732"/>.<circle cx="247.905" cy="168.726" r="84.7257" fill="#CBC2FF"/>.<path d="M37.0403 444.021L93.8482 443.453L34.8517 341.269L37.0403 444.021Z" fill="#CBC2FF"/>.<path d="M35.4922 342.367L122.58 391.708L94.4887 444.551L35.4922 342.367Z" fill="black"/>.<mask id="path-5-inside-1_1503_89877" fill="white">.<path fill-rule="evenodd" clip-rule="evenodd" d="M495.857 257.114L401.16 214.676L341.311 348.223L341.314 348.224C336.508 358.952 353.808 377.148 379.957 388.867C406.107 400.586 431.203 401.389 436.011 390.661C436.041 390.593 436.07 390.526 436.099 390.457L495.857 257.114Z"/>.</mask>.<path fill-rule="evenodd" clip-rule="evenodd" d="M495.857 257.114L401.16 214.676L341.311 348.223L341.314 348.224C336.508 3

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.091615510283559
Encrypted:	false
SSDEEP:	24:YD+u4l/ElD/yVQRSA6eU72GhZcHRVIsbA6eGdehL72PKr4D6lfJZ6Z3a:YDLGslDqVCS+ROsbKNWQya
MD5:	5236BCFCFF0CECB5FEFA2567E55DDF28
SHA1:	23F7654025A58A746FD17B697E8BB4FDF2F0A23E
SHA-256:	B66A3C6B9B0DDED0FAD92574EA0A964A4FA15A98509B7D8257EA70A2561CDFDE
SHA-512:	99EA2A90AE410196669F5C4CF226498861F43963FBEE5AF66CEE7D176A325210EE67FC2561CAD4E7AA1E6D9BA884E73887CC54BD5D2192F69D1CCF34826F011C
Malicious:	false
Reputation:	low
URL:	https://api-cdn.usw2.pure.cloud/webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/config.json
Preview:	{"id":"dc93ec4a-bc43-427c-9a83-8756e73f61dc","version":"5","headlessMode":{"enabled":false},"languages":["en-us"],"defaultLanguage":"en-us","apiEndpoint":"https://api.usw2.pure.cloud","messenger":{"enabled":true,"apps":{"conversations":{"messagingEndpoint":"wss://webmessaging.usw2.pure.cloud","showAgentTypingIndicator":true,"showUserTypingIndicator":true,"autoStart":{"enabled":true},"markdown":{"enabled":true},"conversationDisconnect":{"enabled":true,"type":"ReadOnly"},"conversationClear":{"enabled":true},"humanize":{"enabled":true,"bot":{"name":"DocuSign Bot","avatarUrl":"https://api-cdn.usw2.pure.cloud/uploads/v1/publicassets/images/e414a0f1-5e69-4229-b949-0947db2b6a10/fabcff32-9c6b-4ca7-94ef-d04eb08a0d0e.DocusignChatBotIcon.png"}}},"knowledge":{"enabled":false}},"styles":{"primaryColor":"#8930c9"},"launcherButton":{"visibility":"On"},"fileUpload":{"modes":[{"fileTypes":[],"maxFileSizeKB":0}]},"homeScreen":{"enabled":false,"logoUrl":"https://api-cdn.usw2.pure.cloud/uploads/v1/publica

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlhg0x_gGPpcxIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20426), with no line terminators
Category:	downloaded
Size (bytes):	20426
Entropy (8bit):	5.333536009628743
Encrypted:	false
SSDEEP:	192:QrYSlzX09IrLtW9rLvasGXEnbXpkzaD8l9mJsQ8pVqBWxMzVVQd7V6tvQ4xS:QrbXov3MEnKz08Fbqv7Qv2o
MD5:	481AAB9660002090188FEE60921B6EC7
SHA1:	8E2BEAC7E106ED5D0EF7612FA9C360F1407BF138
SHA-256:	D51A4C1C5D8E010E04D9EB59E04242C20557BC928BC36E401C157A05C0171788
SHA-512:	D6F02F8DF842EC114F15B427F3279A1F1930B6667F02A018B67E562D75ABA083E23206470A2336CA0B6C1FC27B08D6AC7BCD47FE375B2D60A8E7CE759CBFF449
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/28.caa75eae.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(i.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var n=Object(u.useState)(e),s=Object(r.a)(n,2),p=s[0],d=s[1],b=Object(u.useState)(void 0),v=Object(r.a)(b,2),g=v[0],h=v[1];return Object(u.useEffect)(function(){Object(c.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),a.a.dispatch(Object(o.f)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:p,clientInnerHeight:g}}},"2uLe":function(e,t,n){"use strict";var r=n("mj2O"),a=n.n(r),c=n("7SM1"),o=n("s8DI"),s=n("8ZCy"),i=n("VkHq"),u=n("ILQF"

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2961
Entropy (8bit):	7.876188909726169
Encrypted:	false
SSDEEP:	48:VvVe5e5QkDntvY2jl4qHftvx1qtZQ9J7kxzahysneTDLfZJDsbOWeKO4x:VvyWDtvYQtHfxKc7OnseTDLfZJDsR
MD5:	C863DB426897325CB4805B2C20F51F30
SHA1:	A426FE43F0CE1A489CE091CC27768CDCC2991210
SHA-256:	2A5179B8851C8E3DFC77D7DCB33B3963AFA037608336D6AE412ACAA38AD59D22
SHA-512:	90DA76303CDE0B81F183709D94DC96B5C3EA7B7766948AF5B81E1EBE4B887012FC611F6A0CFC50873E80AF7B73077F7CB8BD5F254A4F4848C632A68733522A68
Malicious:	false
Reputation:	low
URL:	https://na3.docusign.net/Signing/Images/controls/btn_arrow_u.png
Preview:	.PNG........IHDR..............2.....gAMA....\|.Q.... cHRM...........R...@..}y.....<.....s<.w...9iCCPPhotoshop ICC profile..H..wTT....wz..0..z..0... ..Q.f......Ml..@D...E......H..b!(.`.H.Pb0...dF.J\|yy.......g.s..{....$O../... .'..z8.W.G....x....0Y.A..@$/7.z........H..e..O...O.T...._..lN:K.."N.....3"..$..F../JP.rb.[.}..Q..d.[..S..l1..x{..#b.G...\N..o.X3I....[ql2.....$..8.x.......t..r.p../8...p...C...f.q....K.njm.{r2.8...?......).L^6..g.,.qm."[.Z[Z....~Q....7%.."....3......R..`.j...[.~.:.. w....!.$E}k...yh.y...Rm..333..........:..}.=#.v.....e...tq.X)I)B>==......<..8..X....9<QD.h..8Q.yl....sy....0.OZ.k.(...5..H....>.....yP..........:.8......p.........Lg....k.k...$.......t.!0.V..8.7....`.........2A....@.....JP..A#h.'@.8.....:....`....`......a!2D..!UH.2.. .d..A>P ..ECq...B.......Z....:.]..B..=h...~....L...2...........5p.......N..........:\|......@...QC.....!.H,.G6 .H9R.. ]H/r..A..w(......Q.(OT...JCm@..QGQ...-.(j...MF+...6h/.t.:.]..G7....w...7......Xa<1..

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	117066
Entropy (8bit):	7.7939549844340155
Encrypted:	false
SSDEEP:	3072:yYa/YXdx9nzprGkKSmi3B8BiJAkoTw350:LpNHzprGkIKBugry
MD5:	9F08B9201DC9B859DB68D324D5B206D1
SHA1:	D78C820D6A11FA5ACACCF965EDACEE1FB5E25C2C
SHA-256:	1A0C44BCD1A74092E437F8B41316C6963993452D585FBFCA06F3B47FA6603A6F
SHA-512:	8BC66346DBE0C6E8126E5DA60F67F58C06461F43661FA0C0CA25D0A3588A9C08119DFE18724EED38233C07CEBE2C0F21054D056B2574102A3DD7B5334D326E14
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................j.............................!1Q.."Aaq.2Rt.......#7Wru.....$3456BTVbds.....89Sv..%'CDGUe.E......Fc........................................O........................!1..Q..23Aaq......"5Rr...#4BST..%bs....6..C.$D..&7...............?..C.f...........[...kr...&.5.E&.v..0....B..3..g0!..L...I..w..B.s..lg0.A.....a...I..s....)0sT..9!..9...s.U..L...m....[..W......lg0......I..nR`U....Z.)0.o.S3.F..9.!....L..5.Y.S9..ng0sU..L#..w..&a.&....U.....45.g0.O......Q.....u..j...(........ZmU[{..l.U.O.]..>..t.m.qr.w..g..>9r(.M<..M.Z..R[m.Z..'...S.."9u.Jox...M....?(D<.M.BTrl..\.....aJd.9...r'.M.@..l.9...G2.K...{..f...8..z........x.u.........................%... A ...........5.I..&.Z...9...O..T.kc9.Pg0..s.R`C].&.JL......ks9.a.s.>a..kr...s...&..V.)0L!.....[...h.a....9..w.."aR.....`T.`

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphfz7c73b", last modified: Tue Apr 9 19:11:10 2024, max compression, original size modulo 2^32 43575
Category:	downloaded
Size (bytes):	11986
Entropy (8bit):	7.982450351626027
Encrypted:	false
SSDEEP:	192:YS268zKiFWcYMzpr0qMTcRAfBRzLl/NFkqiJI0qaIqJy7yuq0mmC67ycQKUegZ:89zKi9lpA4uptLNkxu0vsz0cQJB
MD5:	DBB9BE044FDB87BB792EB7B0B848A857
SHA1:	51DE9AA28D24A0DF7C8827D75FE5B73728DD1034
SHA-256:	EAFF9936C3AE7F53E15B2B26F2FB1B539A7A7D6F2C70042F93D1B46B22DBBE80
SHA-512:	4418C7D44E1AEC33DE9674663204C15598DC3425970FD1E9CC97D612830B195436D5FCC8026E09648AD9BC2F859C9FBEA2B42EF23BFA7AF51D827D1FC7EE187B
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/datalayer/v4/latest.js
Preview:	......f..tmphfz7c73b..}is.F..w....h.P...4.Rd9.-y%9yv..."..b....lE....{n..\|$....".....kzf...\|Z.E..w...^U...G7I.qV.r.............I<..>...&..wr..B...I.G/... ........!..../.......:..............v..G).Gd.......\|...)....(..,;(..}..a.Giv..'5o..D.Q..."K.P.MY,Ly..a:/.[...uZ7.cR.....n.=.....1.O..(.>..../ox.z..."..0ez...'<.I.....d....y....}y/.<....a.a..L.)..J...~....RUC.....V...)....2=7W.^.5.V.EX/.:y...f.J.K@..x.&yyQ{.b..p4.~J.%...x..^..a.n=X0T...~..Y../..4V\|.z.....Uq.+...VP......Rb.0..P].z)~cSP..y....c..x..0-..~...y..}.-8WI.Ud..#x<..b..X.j.\|.d......\.....#.o.......l..5RuWX....rz....y.\,..v.WQ.......gIy...%M.1...".D.w..j.,/..T..j-kz.Ue'o..[....U.........C..L~y7..D.=.......^.)Xn..@.%.;..<........y.,...._..a....\|..!.2...".....;.7<c....U.\............2...e..~8.>.....i../.F$...U........H.B..,.!)s....f.4..V..-....}.3~.....5..A.#........uz.e}8..e.).......o.`!......y..O...d.'.t.....T#;1.fU\..(.]..Q.dF.0Y1*.Qw.....V..A?./...8......e...O.3...eB.@..R.ZU.,...t.

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	downloaded
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/11.639238ba.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2645
Entropy (8bit):	5.292371822875529
Encrypted:	false
SSDEEP:	48:Ys/CNxvf5XkIIFvk5Xkt+IhBbwqTrfud76fpA+c/fpdieti0Ns2Wi/93ix:sx0T5A0zBFfWWfQf46q
MD5:	B323D4A648C0567D2485F6F50C9B3971
SHA1:	48E816DC4902963DE16FA3DDB8BFB54F769B4F36
SHA-256:	EB8DEB2C81E4BB679C2A956F95EA489C15DA96DF467BF9D6C4C08EC967A8FF67
SHA-512:	D8E6EFCEE976419D1FCBC5A7961CB90A22A6A091DC8778C4322B857D7899FA9EF45AD8518D1217728D87AAFA1ADCC083D005A3E43A01C6F2ACDCE9DE0BF78532
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"132fa8d7-54a5-49e7-bf4b-7f7f0b8e845a":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 0, 0, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrientationSetting\":\"right\"}","customizableUserProfileMenuEditor":"RSC_User_Profile_Menu","buttonTextColor":"","buttonTextHoverColor":"","buttonBorderRadius":2,"commThemeGroupId":"jepsonInnerHeader","buttonBackgroundHoverColor":"rgba(0, 105, 236, 0.8)"},"componentName":"forceCommunity:customizableUserProfileMenu","priority":0},"cad6600a-2401-4080-99e7-2c2387520fc8":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 105, 236, 0)","menuStyleSettings":"{\"selectedMenuStyleSetting\":\"iconAndName\",\"selectedIconSetting\":\"userAvatar\",\"includeCompanyName\":false,\"selectedTextOrie

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (941)
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	5.317481285246997
Encrypted:	false
SSDEEP:	24:U0paG7Zu4x+C0mFa2CWctfHP7CKzVbKTNS77OJsXI5PIoQUI2IkINAITIBISIPIz:U0paMDxcmFa2CxtfvucVbKT07csXOPFB
MD5:	CCD2F285B62CB74170797BE357B5669F
SHA1:	68E668F6B43B9A87B87017A5A8DB45671D550490
SHA-256:	5830F6B53E1EA91ABD5DE97EF219269702F413575CFE0DD6149712D68D7D61EB
SHA-512:	583069C4E0BCC29DAEF3D246E3B86474C84EBFEAD84B62CBB86963EE73748AD33D610309C2AAE7769B165C9003F965316FC8C27581FA23BFBFCE6B29F7A5E408
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/static/111213/js/perf/stub.js
Preview:	this["Perf"]&&void 0!==this["Perf"].enabled\|\|(function(window){'use strict';var a={DEBUG:{name:"DEBUG",value:1},INTERNAL:{name:"INTERNAL",value:2},PRODUCTION:{name:"PRODUCTION",value:3},DISABLED:{name:"DISABLED",value:4}};.window.PerfConstants={PAGE_START_MARK:"PageStart",PERF_PAYLOAD_PARAM:"bulkPerf",MARK_NAME:"mark",MEASURE_NAME:"measure",MARK_START_TIME:"st",MARK_LAST_TIME:"lt",PAGE_NAME:"pn",ELAPSED_TIME:"et",REFERENCE_TIME:"rt",Perf_LOAD_DONE:"loadDone",STATS:{NAME:"stat",SERVER_ELAPSED:"internal_serverelapsed",DB_TOTAL_TIME:"internal_serverdbtotaltime",DB_CALLS:"internal_serverdbcalls",DB_FETCHES:"internal_serverdbfetches"}};window.PerfLogLevel=a;var b=window.Perf={currentLogLevel:a.DISABLED,mark:function(){return b},endMark:function(){return b},updateMarkName:function(){return b},measureToJson:function(){return""},toJson:function(){return""},setTimer:function(){return b},setServerTime:function(){return b},toPostVar:function(){return""},getMeasures:function(){return[]},getBeaconD

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 33752, version 0.0
Category:	downloaded
Size (bytes):	33752
Entropy (8bit):	7.984139047245452
Encrypted:	false
SSDEEP:	768:8VyJ64rZFHKtB7wvkAKE0/40pQeOSHKOfITzE1SRSgyTAIW4l8:mbeZJOSvkFB/40p/HKOfI8gyTAcC
MD5:	4DE7535F6F5DF8D5437C21C068DDB0EC
SHA1:	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23
SHA-256:	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
SHA-512:	E2A9B45F69BD1CBCF0D5F3710BECFACF6A28AF0A9FD034262F6AF4803628DADCE4C2FCC385758F88130AB68D362F3694ED786D0971CF7FD7E8FAF6CD1C2860DE
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.3.40-5/fonts/maven-pro/MavenPro-Bold.woff
Preview:	wOFFOTTO...........x........................CFF ......Om......FFTM...h........Z...GDEF..T........ ....GPOS..TH..-....DiP}7GSUB..T(... ... l.t.OS/2.......H...`...Ccmap.......\|....#G..head...0...3...6....hhea...d... ...$.U.>hmtx.......Q...X.Xl7maxp..............P.name.......4....N...post........... .j.fx.c`d```d8...l<..W.n...8..2.F.../..)...:..&.(..v...x.c`d``../........g.2.EP.5.......P.....x.c`b.......u..1...<.f........p...).,fP`P...._....N.u05..X.@r.L.GP..x.m.1O.A.....(...XL...K....+.[...-..@.A....6..K...e#.x..\|.......^.p..PzV...s...=7q.O..z..+.xn.R=Q.....m.Y.......s..><........6n..c.lq@..klPC.....!".,AJ.`N.e.&.L....F..7g..&..w<.J...P..M-..@.Q.Kz.yn.)dRg...B..J...v:....gR.vFC..N.2....PF0..=.)V.,..{..LY.g"...;9..]p..2n!f....IW67..a.%.mO..-......iXax.c```f.`..F..8..1..,..........P..a)........L..(.(H).)().)X).QTz..........@....1.AU.+H(.UZBU2.................n...}.`...V=X.`.I...Q8.z....#..A.L.,.l...\.<.\|...B.".b...R.2.r...J..j...Z.:.z...F.&.f...V.6.v...N...n...

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (451), with no line terminators
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	5.458507142783503
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3+pVHFWSqwXESdd3I4mdKqlm1dxmqP+Nd6EpXjd6I:ZaiGmFMFVHFGwX7d5WKkm1dxmq2NFXjV
MD5:	B042F007C574FF6960AA794A7B048849
SHA1:	EB2089A6368E2B484A51589ACB6AE6C5CC219F42
SHA-256:	DA22107149B2EF5BFCEE26A7075C977635026B940D16A73DD6BC3025B7A0EB67
SHA-512:	3352EDC906D1ACE4439E779D4F3AEE571918B5D05D3774816B19EF74ACBF9B45BF7E3E14EE7DEAA24502A424ABDCDD53FD42ABD47A74969D8BC5FDAEA83AA3A2
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/35d1d58a1044879bd83c010cbbdbe30c4a199dcd/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/404":["static/chunks/pages/404-502801e88e907967.js"],"/_error":["static/chunks/pages/_error-5276d7836f3b57bf.js"],"/[...page]":["static/chunks/349f80dd-8f4d13fff1aeee64.js","static/chunks/938-1e9e46fa92cdfd1b.js","static/chunks/pages/[...page]-481876c04f95ef5a.js"],sortedPages:["/404","/_app","/_error","/[...page]"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 301221
Category:	downloaded
Size (bytes):	86174
Entropy (8bit):	7.996633837521117
Encrypted:	true
SSDEEP:	1536:sTjGBT+5GSALEyJHXqEHnihaK/9gSTYH4xGth/8e5pkQmlhrA:sPGBTvSyFhHFK/WYk4Yr35pYM
MD5:	59ACF392AA2C87D95D6EF613D1006F16
SHA1:	1A4244AB85CC0468298F73BCCB70B068E0A9CDA8
SHA-256:	4F1D735397B14EF7C6D045F2703DE4B953172E07BF7D2A97190E1131C839A6C0
SHA-512:	D1B8101C5DF2272B7E532F2A7ECE62A0BCD30CB2944639C43ACE0AD97ED58C005555632F95BD61889EE703429E63DCE3A12C7B09196842E93BBC10B4F98FCDA6
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/main.min.js
Preview:	...........mc.H.(.}.......aI~.....Iv.8.{&;... hI..4.l+F..VU7.H`{29g............o.[?n...cc...c.....(...lt...CA.. ff.g..x.7...p.xk.c.....h.8.$S..h.J8..D..d1c...fa....Z.4t.>;..C.Y...J...v...X...=u....\|.\|..C.o.....c.4.4.#[.Y..<.9..F.&f.....d....]{.X2..F...1{o$pf.F..5"......}......{..V[.Y.7G.O...%......l+.vo...1..$Dr..._...p.da8..nk.fxm.4.3c6.'~@f../V....^.k/B9.#@......F..f.R..2J...O...N..3<...g3..z....@.pk...Y.q....K~.2...>..,.:..#k......?..\.p.3.....aY...x..xG[F......YMZ-....U.!.0.@8.lIud=...z..m}......a...X..H..,M$..L..8..d=zf...FG....r...a".u.....x..g.......,Y.0.....(9.9....../..pQ.@.#...2`.....3....j.....f.iG..+.l...:.).........KUb'.f....3...%.2OF..E....p.X.n[...i6c. N.$....t...S(R..q.J+.g..ME.T.......{.8f..T..s]......3..s.l....x..J[6h....'V...V.......a..tc .N.2&.....1;.1P..nU..i.d...Tr....S...b*y...n%..;...A0..J..>.T.`.1.<.!...1.!0.[.h.1.l...J6$...dC..lW....4lwj".{....;.%4.4e.bL....+K..#.....(....i.B..0`.n.....}_w\|fGW..

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 23475
Category:	downloaded
Size (bytes):	8098
Entropy (8bit):	7.976115030484241
Encrypted:	false
SSDEEP:	192:XUhl0wpJ3Y3RmlAbZcr+l7bcZXKF6ZwxvcFhLaAP11VIV:khlJP3Y3uA9crqoq6ZKvcLuO6
MD5:	DB8D92DE3C253178A1B250BFC17106E6
SHA1:	AF8022B23EBFB3FBA19AB80CA001B50E05B07E99
SHA-256:	59D352D91D204E6F4FF8C9D928512FD00C174D7C98FE4E1D69667384EAC7C547
SHA-512:	F25A0D25A72B665AB446F0FD625ACA71670700B7E40BE7D70AA57B100760F0449B0A850FBAA60332C4A48F909353BF40191EC2934ED4C9292317612DDC224891
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/cxbus/cxbus.min.js
Preview:	...........<ks.F...W..,.XcXr..=.8.,.......J..C.....P.W....'@.q...S..1.~w..?m..{......o..UV..":....4......ZV....A1..}l..O.."..h.p&.G......'.X.y1...(E.no...b....z.....}..C>.r.n.k..]y.......a.x..]u..6....:...aq......bQ.]_.x...H......2\|.F...j..z=.lR$.y..M...S...z.Q.86...iP.`.>..a....j.G...<.$.~...#...G.m.juN..$...b.K..j.<_.x...<.1.\..:\C.e.B._...oi._.g.b.n.k$.KQf.....F........3B....]....^.j.Yk_NW$u...9h.v;... d.k..Q....a.&.../.#.F..e.&7(yx./.......J.z.\|x....oB\..._....2.GE..6y..".....f.+...^G}@i..+.P.Y.0.M.n...I.<Rs_.[.."...S.....W4.DUT ...(p..$...s.,I.....'..r.n.....j8..E...".z.I....".V.C...[.-p.r.A.l.9....n..Q&`.DQv]hj..v..-.X.a8.KE..]..oX.y....f]=.....@.z.M....F..YVq.%.<.."...(..;."...y6...z.......Xj...n.e.. .._............^vQ.%`t&R..>.....aF.p.!...`.s..?c................N.....%..GJR.....s..9h.c..n.]..}...&D='.to..."....%.\|..g.z..O ~^.L....._b.7...g..?-.t..R....q.V".Q$......G.b:..Bx.".zr0o.M9R.8..9..R.,.&\|p.-.E.jV.<....S.......M}.~.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29516, version 1.0
Category:	downloaded
Size (bytes):	29516
Entropy (8bit):	7.993944632054563
Encrypted:	true
SSDEEP:	768:YDWMT03T1/sy4Upj+7eLeD2qaWOJEPiAnKJ/JJzySg41:l35/syg7eLeD2PaiaKAV41
MD5:	5D66C3D97D4F69A2B3527E3997CBB66B
SHA1:	94EF4F31C1A1CD780A172EDFBF9E3DE61697EF5A
SHA-256:	1BF53B33743C5C45D6C944815F74CBF58B228806858FB6E3A0B86C1204F4BE06
SHA-512:	FEB229CF976DC037130CE7E7A6C0E32FA8BD0C63382B0FFAD82E4448767B88F8C17C431055BF834AF6A5E92E2D34A6EC7432AFDABCEA9FAE867517613AFD3621
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-regular.woff2
Preview:	wOF2......sL......b...r.........................?FFTM..6...l..t.`..V...e.....\..V.....6.$..(. ..Z..3..p[sDq....2.r...n....%2...z..q.Te-;@..%..I......;......{...Rk...@...HG.)G...8.U.x2.q.qZ.../....6".tQw..YVg9V.k.b.)...j.x..D4L_(.Y0.....k(.w...#U.. .;F.T8..j.v.x..p.:$-[o-.W.~~...{.u..3...)..J.<w..M.V.(a.......;..7g.,X.fu...............i.]..@..Y.[x......!....lG....a"...Nd../.k.V...Q...(.BPe.S.E...C$.........W....L.2.%.2.+O..D..TV...h"T.h/N!....,.gaX.....%...x..r.,.Zz....-...f^.T..sZ..e.Ed.8N....%:./...B...m3......E@A...#.....#.}.~.f,2..3.o_..wX.U.uRI...`i...../D.../~.3.......W..#....U2.r.2.u.B.{.]r"rP{M....V.........LhNU=..{L.......'.U...].0.`...$...4Y..RN...E/........i..<@Y.....:...X.-...R.]..@z...(....p...Y.....").N=...!....,..]D....Z.......o........N.y......g.t..1f#.........o.Y;.y..{...G.......K......>/.,.d.....NU.>7v..KQ....J..l..{w.FH..&..!..?4.q...1wY..7..RJ):..a....<..*..G.M.m..k......."Vhq..xsk...M\|...o..d.....w......F.(..(..(..(..(..(..(::

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	394714
Entropy (8bit):	7.974572383878547
Encrypted:	false
SSDEEP:	12288:bbBZsZExBTeczIKIBN7W8Le7Su4exbYott:bb/sWySBIBVW5SrEbb
MD5:	9DA4789E0313A20DD4DBC19ADBCFB333
SHA1:	C5C82BA2FB2C3E9AADA35EBC37E050011827F2BC
SHA-256:	D6D6F9EA0658D7C9DEDA30AD8CBA0BBAF40A31C11238DF5AB2001C8DCA332F89
SHA-512:	88A5DF7C6B39822AA040CA7EA5E90A57C40269E9FC58BCC718A0078400F3255BA7A03A68C5BC4532E943FF2868943490F0694E689AE431D18A40C0C9C3546E05
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/1tfVMQlUQ5vXChMqZ4Medl/cc629beb987d310b19d2657671ec6daf/productUI-docusign-clm.png
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx....xe.Y..~...JsI....Z.U.n......X......'...&..........}...nb.a.Cp...!...`.9F...G.n.....jQ...X..s........u.Q......V.......g..].`(!!!...Zk....o5?..?`.1........C...c;;;..W..w-;.V....>.a%......J m..}.c........yMM.YN{....^....].X~../y..!-....kr..#.E.........ssV...!.....V.....eu.5.......~......w......M.?y.y..mR..[}M............W...\&.q...../...]......y.:....J....9..A...._.KY....&...;.s...9........2...}..:L.....=[.....p......8..!.....{,..z..eey...&...m<...%$$$<O`(!!!...em...[.....p.....L...... tN......n<....\..'..D..I.......dc.MP.......Vr......fff+"p....RN,.t.....Pv.(..QF....f....sa..Y\O].N.(...:....8.2.\|t?.~D..Y. ta.se.bY......QV....9qX>..N#}..8..t.gZ.o.].s...4.Gq9.M-..eu...............bh.T 4f...k.....\|.....;-.~.7W~.....L.W$.-#..F..rO........ HHHx. .....wD.(.:..4r,.47.......#..2.!&.T.r-[.g.......].ee..&P6!....L.}9A..Q..:..<.C...0T.*.....&

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 252147
Category:	downloaded
Size (bytes):	74477
Entropy (8bit):	7.996648447633653
Encrypted:	true
SSDEEP:	1536:gsIdXB1OE9qmQsv3TsQdmit4ESF8M2OIVrGXCRuOhmR0aKU7:gpXcHsvn8oQ81BVhJUKA
MD5:	C6C4EDC52DF95AD8891299284FF3EFDB
SHA1:	59642ECE920EB8CB34EEA4B14C00A2F33941C161
SHA-256:	F438B252ABB6E5F8798EEDFC759A9D139B86900B93F4F9F788DFC636760A0DE5
SHA-512:	67CFD31E54D71AADC9FFA183694771970C61F80075B8CC248CFCBBDF4C944057934DDDA9778FF1A02DACEE113EAB1A29BA13137B8DEC9945605FB91F2A25C1DF
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/genesys-bootstrap/genesys.min.js
Preview:	...........{..6.(....2..1-K....D..nnO.t/....l..H..8....g...J..^.y..^.5D...`03.....k....v%B..&....... ..Z..[o.I0.a"..w...^L.(..^..Xhk.2.G).2.u..k.{....~#.f....Q.a6.S..[.`..V..Zw...68.g..Z.~.X.Y../.....Z..0.]kB.7.?.QZ..Q...3Q...77..8..8......L...usv...).V...W.......oLkA....zJO.6.fg.Z.]c\|9.#.....;.Vc...aG.....3...zRK.....m.T.R;......u'...u..}x.It.......>.c..I..>...&..K..,.......3;t3..i}t.L.+/.Aa.5..,(;..$.......q...wg.,..g.g1...,..ild..U...4.A2..H.F.l"j...+.}.....:.p_.......p..".".]......9.~-.DO....n.X,r..J..G..v..0....<..A.... ........e.%HY]T...?.5......i.b..dX.pc.>...ZO...o.z..:.nj.i.b.....o..v^.Wmvi.\|...$f.."....;..ny.I...@.p3(..TG..l..0\."ov..er.;.G#1."..L....@$.L.s...@.jB"&.]Y..K/<.;.q.~.'...~'..{?.O.C90..~.:!.Lj..@"a.....)..5...z....m1ID.r......#.....E...B.3%..._..D.W.u;...z..u".......q/..{..._...N:..W..u.......I.=.._.I.=Q......<.%x.Hy...[..x...]2...x.0w.......o...zE.d...&m...r..YUr...k3....2y.0....#.............a.a./..c...+.#LF..b..

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47916)
Category:	downloaded
Size (bytes):	48072
Entropy (8bit):	5.125359556406337
Encrypted:	false
SSDEEP:	384:q9WfwXwo1BJo6+HC0kKtEUnDcb7v97v6VfaEFnakhuVZQS1FF8w3lQIlWzn27vLF:q9z+lEjSbaQuVZQuFF84FyZ8o/w
MD5:	2BF0D0F71A3E905CAD779DD9E585DB25
SHA1:	530AEB93F927531C9BAFBD64415EE9E5EF580FC8
SHA-256:	289E7B81FEDB81DC4F639D186183E024E0B6A2F307CE6DC895E1207E96887519
SHA-512:	667F12D68E96D2E570F9C6D997EDAEF8B3129BC00A6591A4FE67BBBC779FCA4A1721E7D7B6BD4C28E6A987AAAD47D22697B92700EEAA01A6266F3674E8A05059
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-componentsCompatible.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..zen ul,.zen ol,.zen li,.zen h1,.zen h2,.zen h3,.zen h4,.zen h6,.zen form,.zen fieldset,.zen legend,.zen input,.zen textarea,.zen p,.zen blockquote{margin:0;padding:0}.zen h1,.zen h2,.zen h3,.zen h4,.zen h5,.zen h6{display:block}.zen li{list-style:none}.zen table{border-collapse:collapse;border-spacing:0}.zen th{text-align:inherit}.zen fieldset,.zen img{border:0}.zen input,.zen textarea,.zen select{font-family:inherit;font-size:inherit;font-weight:inherit}.zen legend{color:#222}.zen a{color:#015ba7;text-decoration:none}.zen-headerTop a{color:#015ba7;text-decoration:none}.zen-headerTop a:hover,.zen-headerTop a:focus{text-decoration:underline}.zen .zen-line:after{clear:both;display:block;visibility:hidden;overflow:hidden;height:0 !important;line-height:0;content:"."}.zen .zen-unit,.zen .zen-start{float:left}.zen .zen-unitExt,.zen .zen

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 657 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	117430
Entropy (8bit):	7.930590033178204
Encrypted:	false
SSDEEP:	3072:l5A2+hmapXEKFHWmaHp1E/e92Em3bxmaDIgUt/189JnAG75skM0:Mp112DpaEmPDxkG9Ft+kM0
MD5:	F82E873EEC69DCE505D23959A459CD4D
SHA1:	1D354D166E135DC9A222DFE91E79DD40780A49B0
SHA-256:	EDC202315EFDC193E09A7A4EA67903780C71A992EF705001F39A2E6BD6D48847
SHA-512:	82F0F46B9550DEAAF2C7925F1C5E0B4D037142B22E1A3D744567F2184D11362805A191A1C95ED9DF331BF823087A143F48ECADAEC87B2754E532C49C99D62367
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................{....PLTE...........'...w... /.....................{...'9.......... ...../.zo..&.#7''0.y`....."!(&2E....,B........r.....#..&,<......\|h}..":U..n.....}...}uj........s..................wb.qZ.wX/9L........r..............{...& .....q.4M.......gP.f?..w..........{.....}..........w.\|_4CW4("n........eQ4v....y.pU..~\|\D....u...pZ:...zo_..f1-10 .?2,.^3..........lH\|iRq~...k...v..33<b^=...}....x.....j.....s..~........&B`...qg@...6Mf.....~...Vm..wMyuM?;=`~...W[E0.....e..lmw.8".......\I%.Zu.>2.O0 ...u..c...]&PbrV}....iF........VKC......iikUQ1DCIuK7MNV.rSiiLywu.uMDd....JC%....m..t^7$l?.eGM;2......p.~]..W..\|.z...v~`..k..how.......}.ha[P.U6..]]`.d..IVd..^ldZ~F..R ..l..Kq....<Wt......n...mtX...].......J/v.................g.........G.............[y..t.....tRNS.@..f...dIDATx..OK\W..[.F.*...c..,.].,.m5.&$C.7........p.U)...e.Ah.nb..B...Mw..E.......>..wl.s.;......=.{.....D.kkk.Dk....h..lX....D........y......\|.....'..xrq.....Y...u

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 15625
Category:	downloaded
Size (bytes):	3702
Entropy (8bit):	7.943836583771556
Encrypted:	false
SSDEEP:	96:5rhNSdnLLFnoNBQwU6xMa8A65WaoScMRY:5rUHGNSwlRBafcwY
MD5:	020A1227B513DCB833482E5F322A09B1
SHA1:	38E2B3BD0EBB7C5907DF88DE82AB2999ED7756FA
SHA-256:	BB2C48F1AA5946A8CFDFA5940F9653AAD11FA85628DF62DC5437F06F4132799B
SHA-512:	37EED0DF3ED636C1835683125B7A30AC2297000C7A9848AB1B6A74B71DAEFE89EC1CA99037B7C9A8B3A80E4C3C8589325ABC10DFC99751E34D6C58F1BAEF6970
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/messagingMiddleware.min.js
Preview:	...........[mo....~..A+dV^....VF.^.&...$.VU..@....C.....x..x..V.+Ue.<.g.y?....j?. MA..... I.8.j.Z.....`...X.+.....<..e......!~...z.-!.3....z\|..,a..a..u.<.....F.f...!xO?Z..F.3.g.....4....oW.i.....tv.g.-.T..D.q.Z...O...t5'.).V.i.-l....IT;..y\|......6....I.....9...$p....Eb..e..+1C..UZ.....,.........r.D.....w.L4jmm`F.....+..%..Z1..)q\.zs..;.....A......ll...S..%6..>....s.{...a.A?[0va.\...FCg..5.w.=..c.$.S......@......J..b...y....l...K....mT.o\[..F..k.-..p.&vFn....#.a..C.C!....u..a].8m.@.~G.../g'..:N..M...h..F.b3o..C.\|._N.{....7.,............Z.........f.#.........vI.c....N.".,:......u3B.M.wh.~.b<.q.......6..d<c......jp...q..h.A.P.4P!ujWE.hl...J.... -c....{....J...._...Ep%v-`S.'..N..3..H.O...)Z...... .D....... .r.%...o........b..t..n....%~4....x..c_.}RD#.%......:;4..5..x?.........u~_....}....=I..?EX.I.8QJ<r.h]..#8\|....cS%xT.#...ceoj..sp.g..b..u...D..@..'...V;..f..*.p`.t.O.`=...r...R.$.M.....3.......R..............X..R.2.,...K[.

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31644, version 1.0
Category:	downloaded
Size (bytes):	31644
Entropy (8bit):	7.993065566948634
Encrypted:	true
SSDEEP:	768:QpME5mXXDrh5SBgD1LiXEBZiLKLWWPTO45o/fdQIdJAL:QpFEhFDRiXUoReOO4QId6L
MD5:	89C979CFF1EBCBD06171DCD15927EB3A
SHA1:	DDFB17DA64F896EA2682BEC12499ED9D8F65F69D
SHA-256:	F2C05D1D723BD31646C2C5ADB65C29F317FEAB778A02511FBDCBC180853CA042
SHA-512:	AD58C49E307E87D94BCD1AD7DD7D729B752817DC2451D5869A7ECB652622FDC0BE51C4BAA263747D986898756D6B178570BA9AC839AF748FA808DC9B7CECED9E
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-medium.woff2
Preview:	wOF2......{.......k...{1........................?FFTM..6...H..t.`..V.$..e.....$..S.....6.$..(. .. ..3..3[.M...iWu.........~s..`..ws.m...ao..B..U..g.............vl.1B...jf......).ir...Hi.y]Zwp0./QH...V%G.q.....p....f.M.\|.4.\.#....7..S.{Q,8sQ..E.J...e.K.i...z...w.j.Q.h..I.})...E-.mjw.~1.7p.\|...[...v[.y^.G......q.........,Mydu9..~._hF~..j...#.........j.~..w.k..j......LR..G+r..d.?!\.Mf.Sg...a.,...D_....`.{=./...........}...T.m.?.6.2`H.5.........=...}.JRI".D.1$..P).xrM.8?O.\|...R.TP..P.pX..W..U.Wi.]...t.......h6...l.-...R.EY....C...T...X1s.f....`..%.Q..CEf.......hu.{.........'".i.Q.....-.......T@.l.f^\|...\|...1....h...[..u...!.Q.....t...P......^8b....=...q.{6g.,b.....C!4B...m4..,z...4NB...2.C.......n.@..Jo.>).ULf........7U..#.-...TYx-...MH?.Q.....DpM.....3H..L..^......T.km....:.@.X...z....qosW..t.t.K..g(5.#4x..n.Z..d/$..i.....(..(..(..(..(.v.y.;..(...h4...n. .9. ...CC._k..R..x.}QY;..{..."%..EJ.A7qi....<C...&....m19..+..(-@../ P...X.._..O

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2961
Entropy (8bit):	7.876188909726169
Encrypted:	false
SSDEEP:	48:VvVe5e5QkDntvY2jl4qHftvx1qtZQ9J7kxzahysneTDLfZJDsbOWeKO4x:VvyWDtvYQtHfxKc7OnseTDLfZJDsR
MD5:	C863DB426897325CB4805B2C20F51F30
SHA1:	A426FE43F0CE1A489CE091CC27768CDCC2991210
SHA-256:	2A5179B8851C8E3DFC77D7DCB33B3963AFA037608336D6AE412ACAA38AD59D22
SHA-512:	90DA76303CDE0B81F183709D94DC96B5C3EA7B7766948AF5B81E1EBE4B887012FC611F6A0CFC50873E80AF7B73077F7CB8BD5F254A4F4848C632A68733522A68
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.....gAMA....\|.Q.... cHRM...........R...@..}y.....<.....s<.w...9iCCPPhotoshop ICC profile..H..wTT....wz..0..z..0... ..Q.f......Ml..@D...E......H..b!(.`.H.Pb0...dF.J\|yy.......g.s..{....$O../... .'..z8.W.G....x....0Y.A..@$/7.z........H..e..O...O.T...._..lN:K.."N.....3"..$..F../JP.rb.[.}..Q..d.[..S..l1..x{..#b.G...\N..o.X3I....[ql2.....$..8.x.......t..r.p../8...p...C...f.q....K.njm.{r2.8...?......).L^6..g.,.qm."[.Z[Z....~Q....7%.."....3......R..`.j...[.~.:.. w....!.$E}k...yh.y...Rm..333..........:..}.=#.v.....e...tq.X)I)B>==......<..8..X....9<QD.h..8Q.yl....sy....0.OZ.k.(...5..H....>.....yP..........:.8......p.........Lg....k.k...$.......t.!0.V..8.7....`.........2A....@.....JP..A#h.'@.8.....:....`....`......a!2D..!UH.2.. .d..A>P ..ECq...B.......Z....:.]..B..=h...~....L...2...........5p.......N..........:\|......@...QC.....!.H,.G6 .H9R.. ]H/r..A..w(......Q.(OT...JCm@..QGQ...-.(j...MF+...6h/.t.:.]..G7....w...7......Xa<1..

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	4.907629248595504
Encrypted:	false
SSDEEP:	48:LrOG1jV0Njrr6AVMj73iYVMjr3EeV0j74:Lrb1jV0xrr6AV273iYV2r3EeV+74
MD5:	94EFE1DF326362EF2423F447B0E07A42
SHA1:	C20C4A130A6C2BDF8D513FD82FDDF7EBE7050519
SHA-256:	FF2A6FD9F9B72C4D8292FD00F48D8BE351FFA3F81C0A25D0A4ED5D5296092765
SHA-512:	4E800BB76B3E3A84780700107456833394D7ABA46574C4619AFD694AF19D28CD1D88710F02C74DBF7054276C3B9E426277B0DF00C50C7B257F493185B631D36B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.3.40-5/css/font-faces.css?cs=6fe1c0b1d
Preview:	/ mix ins /..list-no-style {. list-style: none;. padding-left: 0;.}.@font-face {. font-family: 'Maven Pro';. src: url('../fonts/maven-pro/MavenPro-Regular.eot');. src: url('../fonts/maven-pro/MavenPro-Regular.eot?#iefix') format('embedded-opentype'), url('../fonts/maven-pro/MavenPro-Regular.woff') format('woff'), url('../fonts/maven-pro/MavenPro-Regular.ttf') format('truetype');. font-weight: normal;. font-style: normal;.}.@font-face {. font-family: 'Maven Pro';. src: url('../fonts/maven-pro/MavenPro-Bold.eot');. src: url('../fonts/maven-pro/MavenPro-Bold.eot?#iefix') format('embedded-opentype'), url('../fonts/maven-pro/MavenPro-Bold.woff') format('woff'), url('../fonts/maven-pro/MavenPro-Bold.ttf') format('truetype');. font-weight: bold;. font-style: normal;.}.@font-face {. font-family: 'Helvetica Neue';. src: url('../fonts/helvetica-neue/HelveticaNeue.eot');. src: url('../fonts/helvetica-neue/HelveticaNeue.eot?#iefix') format('embedded-opentype'), url('../fonts/hel

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	83016
Entropy (8bit):	5.169034180575166
Encrypted:	false
SSDEEP:	384:wGyNWJxr24JQMwAj2cPdILmvdsArbk3IyOcNn6F992S3Gme:/QMwAj2cPdIJOcNn6F992S3Gme
MD5:	F70B938691B182BE9D815C94F4C50FC7
SHA1:	D1058EC951E74EA0F4C739E2869D206D4C4A32AC
SHA-256:	3A12128F23632B8431F3ED64D93D98B6436F8BEAB19850B2373B6AA864CDEF35
SHA-512:	86CCFBEFC13D6018838A9593AE6153881BE1637C6D2FC58B653CC9E53AEA7E9DBC155798BC4E2FD120005B38597033EE35BB75669D1BC4A7367EC0ABB4648264
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom1.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..Custom321Tab .primaryPalette,.individualPalette .Custom321Block .primaryPalette{background-color:#265412;border-color:#265412}.Custom321Tab .secondaryPalette,.individualPalette .Custom321Block .secondaryPalette{background-color:#265412;border-color:#265412}.Custom321Tab .tertiaryPalette,.individualPalette .Custom321Block .tertiaryPalette,.layoutEdit .individualPalette .Custom321Block .tertiaryPalette{background-color:#008772;border-color:#008772}.Custom321Tab .bgdPalette{background-color:#265412}.Custom321Tab .brdPalette{border-top-color:#265412}.Custom321Tab .listViewport .subNav .linkBar,.Custom321Tab .mComponent .cHeader,.Custom321Tab .genericTable,.Custom321Tab .bSubBlock,.Custom321Tab .bPageBlock{border-top:3px solid #265412}.bodyDiv .mruList.individualPalette .Custom321Block .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23144
Entropy (8bit):	4.609989283730634
Encrypted:	false
SSDEEP:	384:ao0Hmh3q58PeYRwKBjrUxpuuh3q58PeYRwKBrYhkq58neYR2KB8O/babh3q58PeS:1L3YPxKBjrUxpB3YPxKBrakY3TKB8Omp
MD5:	F0C49B7F657C685F8856350167161D08
SHA1:	E30839010C9012F55C3727445B0F5CD181197FF0
SHA-256:	F61547DE93D90087E381250884A50F6B458B56C81501606DE9603FD9BB20DF26
SHA-512:	CFC46F8E567509C78DE83F3A1009EF890CC90AC6A8AC75BF57BBD05DD49A5C5BEEC7980A9A02F1070747052C02A0D86DCEE9592B8EA964289CC83DEED4D70140
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8335b-1f5b-415d-923b-2daa2d0de9bd","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","al","pr","dc","ny","ut","nh","ia","ok","az","hi","mp","oh","ri","id","wa","mt","nd","nm","md","ak","de","nv","wv","nj","in","tx","gu","il","ma","me"]},"LanguageSwitcherPlaceholder":{"ps":"ps","sr-SR":"sr-SR","pt":"pt","es-BO":"es-BO","en-AE":"en-AE","el-GR":"el-GR","en-AM":"en-AM","zh

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71782
Entropy (8bit):	7.872762967665871
Encrypted:	false
SSDEEP:	1536:wmZn9q57N+t1L6i7yXY/1z+weeN8+pBdADbp6n:wE987QLGip1z+we+8odAD1A
MD5:	D45931E558F345E8CE7C252B7AEA0CF2
SHA1:	C46FEA1E10741455A8F56E9F83D4BA045894AD4E
SHA-256:	354C32B42B1F8584A6C3477F6C673D7A24722F2BF51A4285089A47D4FB5F13C3
SHA-512:	263E39D3BF4E0B0ED500D2438DFCCC15218F9E2FF6C08525030BF6FA5BB9B169059C94C2F9D17182319564ACBBFB8C09A58E1E2E24BCB3121B2B70B2382D40B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx.....%Uy..U.(0 .N...#...MT$ri>.g...... &B....Q..%.p ..f.D.`....v#......(W'.M^....A.B........jU..s........9{..m=....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................;lk..&;...3...Iv.3n.d........N..:..\|...y..$IR..]....{.............w5..C...F...0t.....3......0..o>\|5....-C<s...w..:m..h.m.../&].U.&[}...5g..7m.....:.....3..\|47......'.......Gu..Y....o......J1.[AI6zo.)&.....5a. ^..G..b.y[.l..3jc.].W.}>.b.....9.g.g..x..x>..%.o...]...g..a...V..Wy...h...-..

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1204), with no line terminators
Category:	downloaded
Size (bytes):	1204
Entropy (8bit):	5.0956117717977225
Encrypted:	false
SSDEEP:	24:h8UXd+VLk5PrHrymW2G/uHa/7hcZLZ84RGuHLDRdRaLfsRxZ1RRVN6eQmtTh:NtmCjLTtGXwhDD3QLfsL/b
MD5:	1404B75DA8E2BB3DC0247B949A748AFE
SHA1:	FC2EFECAE571A65321BD83D116FA7D61FE4FB77A
SHA-256:	13F80D419A882B010BA8BA5D4FE4D3CBAAD417B0C684C90AE9D4BAF32532D897
SHA-512:	B5A538CCF0ABC3C84112EF00B633D5D365B25AC6274E4CD385C4F322166A80293811E1BD6AA364C1D6B1D556FDFC2DFF6DFE8F59D06798DE6C92A9C0040CF01B
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/messenger.html
Preview:	<!DOCTYPE html> <html> <head> <meta charset="utf-8"/> <meta name="viewport" content="width=device-width,initial-scale=1" http-equiv="X-UA-Compatible" content="IE=edge"/> <script src="newrelic/newrelic-agent.js"></script> <script>function loadMessenger(){["messagingMiddleware.min.js","defaultVendors.min.js","vendors.min.js","main.min.js","engage.min.js"].forEach((function(e,n){var s=document.createElement("script");s.src=e,document.head.appendChild(s)}))}</script> <script id="genesys-cxbus" childMode="true" onload="loadMessenger()" name="LauncherFrame" childMode="true"></script> <script>var modernBrowser="Promise"in window,ua=window.navigator.userAgent,bIEBrowser=/MSIE/.test(ua)\|\|/Edge/.test(ua)\|\|/Trident\/7\./.test(ua);if(!modernBrowser\|\|bIEBrowser){var scriptElement=document.createElement("script");scriptElement.async=!1,scriptElement.src="polyfills.min.js",document.head.appendChild(scriptElement)}var cxbusElement=document.getElementById("genesys-cxbus");document.location.origin&&"str

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	123719
Entropy (8bit):	5.469117993516426
Encrypted:	false
SSDEEP:	1536:WF9rJ8hCvDZGCMxNLxGrh2dpJ9ZMZZIXOpj+mL3opq1Yqh50:7xWg9SZZIXwfjopqLhS
MD5:	FB7ED336D2A3C1666E184A9C947D7194
SHA1:	EC3774175A71B0D0669DC2A219CC9934B5E7306E
SHA-256:	818FF65EE6FFDA8E167430133A5B0D96C2723CCA3247F046517E2AEC68C1A60E
SHA-512:	F1FDF2020DB0A5CCB520D3F6F79DF5FE1C1A1EFD8F4BA41A762394EF985A76F5E6B9991C5C70F62A3DDC890BD52C74996249FC9CAC4BF7007FC433A585150B60
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"295ac930-4585-45d7-b3ab-7962b3fd4b52","themeLayoutType":"Home","params":{"language":"","viewid":"eb9556a8-abd9-4d79-b20c-e81ba2526cfb","view_uddid":"","entity_name":"","audience_name":"","picasso_id":"","routeId":""},"includeLayout":true}},"version":"60.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"295ac930-4585-45d7-b3ab-7962b3fd4b52","themeLayoutType":"Home","params":{"language":"","viewid":"eb9556a8-abd9-4d79-b20c-e81ba2526cfb","view_uddid":"","entity_name":"","audience_

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	92476
Entropy (8bit):	5.1535955526844015
Encrypted:	false
SSDEEP:	1536:1GLNl4mJTfYN2hZRzC7mMeBn8cBIiNWp/WKpL5LJZJdNzSdexSmhHLobxVR4T/tO:XP3o
MD5:	EA301F0D513F78419DEAAE202168F4DE
SHA1:	AB4B9721A2AFC4FFDAAFA0A2C92BA5C53221CD3E
SHA-256:	96BABBDCBE86BC969E21CE6CF7F7CEF0D45D7887934B01684155EEEF57939D85
SHA-512:	050E53129AE9A6C0BD2431A6AEF630E78D7287CFF92D121FD48191869BA658BA607FAAED8BB3C94A2FC1DE540FBEE6E568F91624264A24A47874BE2A33FD1B0D
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1705602480000/Theme3/default/gc/extended.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.a{color:#333435}a.navSkipLink{color:#fff}a.navSkipLink:focus{text-decoration:underline;color:#015ba7}body .bPageTitle .ptBody a,body .secondaryPalette .lbHeader a,body .pbSubheader a{color:#015ba7}body a:hover{text-decoration:underline;color:#015ba7}body,td{font-family:Arial,Helvetica,sans-serif;color:#222}body.sfdcBody{background:#1797c0 url(/img/alohaSkin/gradient_body.png) repeat-x}.hasMotif{margin:0 10px}.errorStyle,.errorMsg,.importantWarning,.pbBody .errorStyle a,.pbBody .errorMsg a{color:#d74c3b}h1,h2,h3,h4,h5,h6{font-weight:bold}body .x-btn button,body .btn,body .btnImportant,body .btnDisabled,body .btnCancel,body .menuButton .menuButtonButton,body .menuButton .menuButtonMenu a,body .menuButton .menuButtonMenu input.theOption,h1,h2,h3,h4,h5,h6{font-family:Arial,Helvetica,sans-serif}body button,body .x-btn,body .btn,body .btn

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107348
Entropy (8bit):	5.264039514215191
Encrypted:	false
SSDEEP:	1536:ReqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:R1hZjKJ1y/Z4rbrwLPVAs
MD5:	114785899CEB423273FCC17AAAD202E9
SHA1:	CE53389286218FE6D7CE1EB86208074C024ACCA5
SHA-256:	C8C302716CF94980A0D77E614D9FB6C430F166B5EF7C42B7C382771955E52BA6
SHA-512:	6E357A327420598542BFFEDF8F03F7F4C327469CDC6CC52B39C0B542DA4EF09C6739F46161C8D2796BFA05193D94B47420308CF4F2A50A2F0DF73EE9712544A4
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/50.de3b5864.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1803), with no line terminators
Category:	downloaded
Size (bytes):	1803
Entropy (8bit):	5.205326896473008
Encrypted:	false
SSDEEP:	48:fbci9MVXFHvwICNSxJ7/SK46mMgyxsXSUdxAKDr:ky8H7s6sCaAc
MD5:	492A292AF349774AC90503DB7025D983
SHA1:	70A1FBC06ED17D3B255318F3392CF9F0B9D5627E
SHA-256:	B7268DFBBBF118CDC38C54DED726A7F844615B8292E5B79E9DDFBC0D07652102
SHA-512:	0F5ED3854BFB032A3D755209A097F0C65209E937F9A445C269F70980718D358EFE8463A45953E667BAB48F0757F8D36CEC52DC95F5B9ED8643BAC092803F4502
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/pages/_app-4a36b7240ff60e5c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888,451],{24451:function(t,e,n){"use strict";var r=n(28526),u=n(22624),o=n(85458),c=n(80065),a=n(75034),f=n(22073),i=n(75424);Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:function(){return _}});var l=n(43219)._(n(2784)),s=n(41950);function p(t){return d.apply(this,arguments)}function d(){return(d=i(r.mark(function t(e){var n,u,o;return r.wrap(function(t){for(;;)switch(t.prev=t.next){case 0:return n=e.Component,u=e.ctx,t.next=3,(0,s.loadGetInitialProps)(n,u);case 3:return o=t.sent,t.abrupt("return",{pageProps:o});case 5:case"end":return t.stop()}},t)}))).apply(this,arguments)}var _=function(t){c(r,t);var e,n=(e=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct\|\|Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(t){return!1}}(),function(){var t,n=f(r);i

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1032 x 774, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	394714
Entropy (8bit):	7.974572383878547
Encrypted:	false
SSDEEP:	12288:bbBZsZExBTeczIKIBN7W8Le7Su4exbYott:bb/sWySBIBVW5SrEbb
MD5:	9DA4789E0313A20DD4DBC19ADBCFB333
SHA1:	C5C82BA2FB2C3E9AADA35EBC37E050011827F2BC
SHA-256:	D6D6F9EA0658D7C9DEDA30AD8CBA0BBAF40A31C11238DF5AB2001C8DCA332F89
SHA-512:	88A5DF7C6B39822AA040CA7EA5E90A57C40269E9FC58BCC718A0078400F3255BA7A03A68C5BC4532E943FF2868943490F0694E689AE431D18A40C0C9C3546E05
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............4......pHYs...%...%.IR$.....sRGB.........gAMA......a....oIDATx....xe.Y..~...JsI....Z.U.n......X......'...&..........}...nb.a.Cp...!...`.9F...G.n.....jQ...X..s........u.Q......V.......g..].`(!!!...Zk....o5?..?`.1........C...c;;;..W..w-;.V....>.a%......J m..}.c........yMM.YN{....^....].X~../y..!-....kr..#.E.........ssV...!.....V.....eu.5.......~......w......M.?y.y..mR..[}M............W...\&.q...../...]......y.:....J....9..A...._.KY....&...;.s...9........2...}..:L.....=[.....p......8..!.....{,..z..eey...&...m<...%$$$<O`(!!!...em...[.....p.....L...... tN......n<....\..'..D..I.......dc.MP.......Vr......fff+"p....RN,.t.....Pv.(..QF....f....sa..Y\O].N.(...:....8.2.\|t?.~D..Y. ta.se.bY......QV....9qX>..N#}..8..t.gZ.o.].s...4.Gq9.M-..eu...............bh.T 4f...k.....\|.....;-.~.7W~.....L.W$.-#..F..rO........ HHHx. .....wD.(.:..4r,.47.......#..2.!&.T.r-[.g.......].ee..&P6!....L.}9A..Q..:..<.C...0T.*.....&

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.458694969562841
Encrypted:	false
SSDEEP:	3:mSnquSYsnLaY:mSquSbLaY
MD5:	5C92F512EF77BE90140D0648D72AC362
SHA1:	1C7EBBBCBFB453862F62505D17D4DBC34E0EE3B1
SHA-256:	9DAF867252268D644F0678C2377C7B85D65A66569F3DC379C3CF5FB202A803BC
SHA-512:	0A73B28D6764926E83DBD9DCAFED4959046052DF157149E636830BE0EA3DC453D0EDA683C4DCB00B7B3D002711CB4869D9A810C1B4AE9A101A673D94B0BE7CAC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmect6_7AfftRIFDVM7bOsSBQ37t9odEgUNpZM2JA==?alt=proto
Preview:	ChsKBw1TO2zrGgAKBw37t9odGgAKBw2lkzYkGgA=

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1286), with no line terminators
Category:	downloaded
Size (bytes):	1286
Entropy (8bit):	5.084103964495361
Encrypted:	false
SSDEEP:	24:h8UXak5PrHrPYG/uHa/P9X/IcZLZ84RGuHLDRdRaLfsRxZ1RRVN6eQmtTh:NKCjLPYGXXN/nhDD3QLfsL/b
MD5:	5E33C9DB52CEDE671FBD6CED2FA68603
SHA1:	C02EE3D45C37BC58BFF7DE6061D3E27FCB2141C1
SHA-256:	659BA08A409E32EA5CDF80BBABA138B7C14A6EB2D35515B11E497E66C508F6FE
SHA-512:	E5FD88C35B337B9265C0BFAD3AD2565494EA96FD07722BEF806B2F91AB3DB967A7FCB75BCF6A316117B83BE197F786B28FB38796A3AD03D2C5EB565865B1C043
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/messenger-renderer.html
Preview:	<!DOCTYPE html> <html> <head> <meta charset="utf-8"/> <meta name="viewport" content="width=device-width,initial-scale=1" http-equiv="X-UA-Compatible" content="IE=edge"/> <script>function loadMessenger(){["messagingMiddleware.min.js","defaultVendors.min.js","vendors.min.js","messengerrenderer.min.js"].forEach((function(e,n){var s=document.createElement("script");s.src=e,document.head.appendChild(s)}))}</script> <script id="genesys-cxbus" childMode="true" onload="loadMessenger()" name="MessengerFrame" pluginmap='{"MessagingService": "./messagingservice.min.js", "MessagingMiddleware": "./messagingMiddleware.min.js", "Messenger": "./messenger.min.js"}'></script> <script>var modernBrowser="Promise"in window,ua=window.navigator.userAgent,bIEBrowser=/MSIE/.test(ua)\|\|/Edge/.test(ua)\|\|/Trident\/7\./.test(ua);if(!modernBrowser\|\|bIEBrowser){var scriptElement=document.createElement("script");scriptElement.async=!1,scriptElement.src="polyfills.min.js",document.head.appendChild(scriptElement)}var cx

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	downloaded
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/18.9c1bd1fb.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46812)
Category:	downloaded
Size (bytes):	46968
Entropy (8bit):	5.192812106147978
Encrypted:	false
SSDEEP:	384:ZcFgFUnajOOFcWo+blaD77+eFsmdCI42Xk2QnvqrD:qFgFUnajvcz
MD5:	B27FD337C52750AF3E5006DAADE5FC6F
SHA1:	3A27540E2B84810F8BB40EEB1846DAA3D42406D7
SHA-256:	C37BF910E3B2638E0A1DE11CA1C2ED45674F31C562DD2BDE7C15A96BDEF29059
SHA-512:	734EF24CAD0E2B5B42BE2DB320BF727FE5527C561634DFAF47B94D49A8F807198796D281092C560A9EE839ED654950A2E664F03BD2896E56F1B992B088A7469A
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom2.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..Custom75Tab .primaryPalette,.individualPalette .Custom75Block .primaryPalette{background-color:#998c7c;border-color:#998c7c}.Custom75Tab .secondaryPalette,.individualPalette .Custom75Block .secondaryPalette{background-color:#998c7c;border-color:#998c7c}.Custom75Tab .tertiaryPalette,.individualPalette .Custom75Block .tertiaryPalette,.layoutEdit .individualPalette .Custom75Block .tertiaryPalette{background-color:#bfb19c;border-color:#bfb19c}.Custom75Tab .bgdPalette{background-color:#998c7c}.Custom75Tab .brdPalette{border-top-color:#998c7c}.Custom75Tab .listViewport .subNav .linkBar,.Custom75Tab .mComponent .cHeader,.Custom75Tab .genericTable,.Custom75Tab .bSubBlock,.Custom75Tab .bPageBlock{border-top:3px solid #998c7c}.bodyDiv .mruList.individualPalette .Custom75Block .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .Custom75Block .

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	110884
Entropy (8bit):	7.9493895649209225
Encrypted:	false
SSDEEP:	1536:v0Kegb1ruRxSKivEs9FFvE2KtJLHSk9jH43HzesEfPCavXIqMCckP8Gr7qe2:v0WbBuvSKivfPe7dL5XCUXIhAZn2
MD5:	70A935AE1B5A8AB4CB532D72F6A6AF56
SHA1:	E522825C653F1D71EFB5BEC5E93D14B62BC00ABD
SHA-256:	D05737920C20F3C9B626D40EC72493B52A7B7F9E4B9586892BBB56797E53C0FC
SHA-512:	52478C8AA1467DEC815992B5A45411305D8E630FF84F5A256578CA5425DC7F4C0F8D2E824F10177448A1ACA9166C727F33DF0A6A3DCC77BF53561ABA077079A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............RcmE....PLTE................."_B+X>)rV:cF-[@,...(.....jN1......nQ6$##...v[=\|_@.........fI1&..S:(fK,... !(......M6&.../!.......('* ..2% ...PC<......G1#rO0(.?}Z:......wU6 $0...#)89) ...J=7............x...qU^F5.........cG......*4HD83...iIA,!WJD::@658 .....P=...............-2.kN.eYrD1...^RM...HTl.VB...cP....6CZ.wWDGMAMd.R/.../<R...>1,....\F...<?I...nhd...POPaac........._N...>$.C@@..uagpYXYmVG...~K8........4..{......y^...MGFpmn.rf..}....\Q..P^r.........laNT^}SH.jY..tdO@dZUh=/vJ>3-)..fV]gu_MFLW...~.........wuxR......[..y...}fX.zo..hmbZ.....\|~.t..kE9..........pK]5&p{........(cv.......~fTd\|.\|mf>".\|Sjpz..}....{r..]m}.....r\|oeF..i~....Aa.._:.pZIy..rf......c..\|..CX}...vh.....`t.Ej.q..V..Yk...n.......#l.^.....)Ir.N..Z.[}.Or.x.%.4d.uc."1.+=.[h.>Q.=I.~j......4.`....IDATx..oP.Y..K...%..-..ZE4 ....dk.d.t..8#:.5...2.1....4.".6 .....P..Y....3R..!2(.....g.O.....9.{.....$oB6e...9....vH..C.f..s...%..../h.g.l=..6=...6^.d..........6D....tj

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34102)
Category:	downloaded
Size (bytes):	210602
Entropy (8bit):	5.29981192146341
Encrypted:	false
SSDEEP:	3072:4U3+tF7OMb1ibvJh4Aj+AhEJBjxP9UxtMaz5d1ruhpdPQ:4vzkkAj+AABZ9il5XoQ
MD5:	AC382439A1906EC25557036A918F08A6
SHA1:	1403A8B61F54C29FA9A56AE2310F30FFD7BA499E
SHA-256:	C378EDB7D69ADCBBF574853F9FF51988A8873846C97898DAA06C8C23EDC36C46
SHA-512:	0D272511BFBAA88486384EADB574A412FA6F1A18746B8EE4CAD9D9DFD1419F00BA39A47A10DC9B63A47B9885A672270A16033B923A344534520B93EA6CD6F408
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/framework-e9e659db89d286d1.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{1350:function(e,t,n){/*. @license React. * react-dom-server-legacy.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r=n(2784);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var l=Object.prototype.hasOwnProperty,o=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1077653
Entropy (8bit):	5.454810537476306
Encrypted:	false
SSDEEP:	12288:ffjxwyxrs/jn6cCspZNryN2Jh2utTKs6lt5OohdPP:ffjxwyps/jn6cCGyN2Jh2utTolHT
MD5:	E713FE7AC7E0BDCA71FB4CDF40E5F55D
SHA1:	66F473DB153125E7963D9EBA39D16EC3F570D77E
SHA-256:	BCF111704845C911B3AF54A0082C8C473FEB3E613D0D7A1ABA551BF7BAAC7787
SHA-512:	411BEF46690FEB6653AF84974D27522097BA5C070719248A4C551147DDEDA57E2CDDC234B64183E9AB2F7B19BA0B6672F52B376CBCF3F83DA0864C712DB0CAB1
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/938-1e9e46fa92cdfd1b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[938],{24179:function(e,t,r){"use strict";var n=r(2784),o=r(34153),i=r.n(o),a=r(35048),l=r.n(a);/! @name @brightcove/react-player-loader @version 1.4.2 @license Apache-2.0 /function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}/! @name @brightcove/player-loader @version 1.8.0 @license Apache-2.0 /function u(){return(u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}var c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f=["catalogSearch","catalogSequence"],d=["adConfigId","applicationId","cat

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 788 x 591, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8739
Entropy (8bit):	7.925138481694344
Encrypted:	false
SSDEEP:	192:cqbEkA4NlWkOiICMfzJPcgdvY7lKl8Ws3+gli0teVQSejn7k2cMS:nbJRNlWkObP7NfclG8Wo3XtgHpAS
MD5:	E259D49AD1B22D7F61343B11E3D63454
SHA1:	43CF47F1223CF0C69BB3C03974EC569BA7A812D9
SHA-256:	051DF612B9831A8AED7A441B878157B717C0AB1B374F3F0E89AF8BE2C6CC381C
SHA-512:	51B061A1242688F4283C951B87C63389DF9220AC3377573952BCC1661C42B59B88A6925A20465546FCA0B16D5987E9DB7955E1DCBF1F2DB44DC660E15CC802D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......O......cb#....PLTEL......W2...E......y..+...... C...R?W..&...e.......l1....c...LL.Aey.....!..`.9....@\'.T...a..L,...H.... ....`...\|I.]'.c ....\..tF..6.b .0...y.LI`I.....`!..,....y@....t.....dL...20@.................e`.........@.....B&...\...7 .m..7..R/d$.....U....XTpp&..vm.G).6..1.t=.Q..0..0...U...+..!.p=..rl.".z.^?....p..P......0...h7.Q....kX..n....&.h6.....FXP..@;T>.....<r..0&%0..4...<#P..h7...P.. ..0..Z-.D..y..!..v....y'6.r;L.. .IDATx...;N.1.......tPp.t..J.."......v'A.Y.v.......C.g....{.......&.....>..M..>..Aq....A.rP8.qP(@..6{.W..7...i.9...X.S.m...lUY.XUYf..T.iv..X.>.....s./.nOZ...=.?Q.=.?..{.A...;.'&t....[.........R..T0#..TPyJ!.`N.B...^s.w.^g.<.,`...ic..x...}..9...eZ.........v.W..Hl.DEVM.o...Pxad$.9m....3...s.z.......U.EK.A!(............V?Q..AA!(.....HN..`JP...Aas.....}bJPX..%..yOAC/9..Q...2Y..c...?....F..6....!Yl.(4.....C......BE..T.....'.'&..^`p.?T.9.i......<....`..y..0..H.D.l..!.6hm....Y2K..H.n elR)....{.x.~

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (509), with no line terminators
Category:	downloaded
Size (bytes):	509
Entropy (8bit):	5.027366178032786
Encrypted:	false
SSDEEP:	12:fbjrmrcWIqWAfzSxAU7bXyW+ZH/dA3CZxDWs05d02ayWA4HAsz026:fbjSrcPqHWxAU7bXyvZK3YFWU2ayH7ft
MD5:	07526B51026E33C9BF8AF0ED7453A7F4
SHA1:	6DA245A154497CDF0CECE38E7A8E47368448E20A
SHA-256:	F7106FBDFABAF49BE5EE54A0AA3C438FCCBA736E80705E7A9D24B9C5E3490DF7
SHA-512:	050B6F2748849A3DF4A43B5D8D6461C66A9814A18ACDE292338AA9E7E96BEFA50ADFC2FDB19BF7C257AF29F1910163C753E895107C3A2B181A31B6CE31162387
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/pages/_app-ef9da0a6572b3989.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return __webpack_require__(4297)}])}},function(__webpack_require__){var __webpack_exec__=function(moduleId){return __webpack_require__(__webpack_require__.s=moduleId)};__webpack_require__.O(0,[774,179],function(){return __webpack_exec__(1597),__webpack_exec__(880)}),_N_E=__webpack_require__.O()}]);

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	120484
Entropy (8bit):	7.977708945286498
Encrypted:	false
SSDEEP:	3072:Ibluyzp1ijkW2XkVzA5WK9Ag2k13fZvWVPSWWelaix2NReP:IxuOpkIKVzA5WK9A/oxteo+3
MD5:	A1D906DD351C2B8322A3C977E5323C21
SHA1:	7E41AC2667D58CC71187E0886CE552486A7644C8
SHA-256:	E16D4BF23D6F06EF372EF44E7281A89532141026AA884CB0CA67261E061355BA
SHA-512:	38BCE56A32141B0849D952FE5C6B5538760A009235015AB53280B167BF6D79F5A959421311902991ACF905E442C67F8BCF0821C92AFC5C6681D1FA6DD3CE32AE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............RcmE....PLTE................................................3l..................;t......C{..d........E.................N..!..y7.........% ...?L...............&[.......Y..))....`D...T:...sD(.......x..s.......?..J1....A$.I......j9".\&.....z....oR..@...jOq/..6..~e......O.....w...........,..........x..............g.6$.....cD...x]2............n..d..b...V.-7A;CL..ql4....uSZ.....{B....,.......h...X5...."....K+842..".....Aj.BTZ.O..~j...h..M...K..Vr..\....;.t.#...g.....t.E0!....6../..........wR3U..~_D.f(.LT@1...GbkTZ.\|nY.{e.....cTr{.....y.yt.5m{h.%(..t.HG.\|@.GeQDC.&.....S.@..y....bX...^jb..Ws.e.Z.y.w0.\|c..y.r.eG.~...Y...JD....b....K6\nJ.......t...R.....fd...Pc3.1#=X q........P..m....Hg.}....e.....E.........b......p....._IDATx..?l.i......kv......$YE.H...c..?....(. .s..)@n...).I.EF).Er.EB2 ..Ia.....kV.X..Dw.V.8...}.w.kc8x..3..;.....~...y.>.f...o..._.....S...I;.x}l,7...r{{mu.l.T,....qa.....E..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 656 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	146865
Entropy (8bit):	7.984328907199668
Encrypted:	false
SSDEEP:	3072:sagDQ69cVJklltpRLes8Kzdcbyuz3wP8i0El1D7vTZeNn0GxAPDQf064lT:o9cVClP7es8KzdIyshilp20JLQf06e
MD5:	F779F8DE4A8BB30625908B57933BB22C
SHA1:	1852708AEB59A20B389047B6659380693EF80884
SHA-256:	96FE7911FA7029BBAB6135710BA16AD72413DAC920DA5C2BB4A4E7A8944031C4
SHA-512:	AA4A3D1646BCBF14F577F91FB579FB30E315A07FD0E45A8707DF987C38B2A87948C11021F308E45C20ED070DBB101541BF071D9A7DC8D44633D4AC47779D3102
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/Dc0SziTJ1rmxyMSHdHWNP/c0da4fc6ab91424027973b8f9a557a81/woman-presenting.png
Preview:	.PNG........IHDR.............RcmE....PLTEog\kdZri_haW......d\R`ZPe^U...^WMPC8F;1TLCK?460(TH=vk`[TKB7-XPG......odZ...dYNOIA=2(i^SlaWMF=yod......HC<..z0+%% .ZMB.......u^RGD?8:5......smccUI........................xm?;4&!...xhX..rcR.\|o[H7...i[L.......!N.sg..4......nV?UD4.)h.$[..~lZ.....(.........3......u......A.?...o_M.......8.bP>..........."[..G..~v..............T...NLH....TQL.M....xeRwsl.z...p^eM7..q.&W...$?.wd...4)N.../`..z....sT.}t..g5".../e.QAd.qQM.V='C5R/4w.gH...d@).\|`WWS.q}.keK4".A..p.x.G7E%.\Mo.h.W<......A6g.}[jhd....WB...}f.dG...J@~.IEk_z.bH.\|..~`........~..[T.nz..Z............o`.....\j...uw.[)yH1.]e......\|q.#38bP...x0)..tpm0..I..i....i......Oc+.j...O.....K...PS..`..N^.*+.w+.b2..f.Np8R..fUpu.=5.{.-N..JMa.\|Imph.Da_.es?.% s..B...OZ..@i.4.o...YMJ($..:lIDATx...n3E..w....`.M`..Q.. ...(.R.E.A.>.'...D.K@...(.'...(.P..:...k.9.}...p<.;;3....93..?..3..o..........;..z...~x}}{..=<<<>.[w.....n?.`.l?.'.....O.......~.v..>Lv.t6......

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32180)
Category:	downloaded
Size (bytes):	84320
Entropy (8bit):	5.370493917084567
Encrypted:	false
SSDEEP:	1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb
MD5:	32015DD42E9582A80A84736F5D9A44D7
SHA1:	41B4BFBAA96BE6D1440DB6E78004ADE1C134E276
SHA-256:	8AF93BD675E1CFD9ECC850E862819FDAC6E3AD1F5D761F970E409C7D9C63BDC3
SHA-512:	EDA31B5C7D371D4B3ACCED51FA92F27A417515317CF437AAE09A47C3ACC8A36BDBB5A5E70F0FBFD82D3725EDF45850DDE8CA52C20F9A2D6E038B8EAACEEE3CF1
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/cspcommunity/resources/scripts/jquery.min.js
Preview:	/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,functi

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8798), with no line terminators
Category:	downloaded
Size (bytes):	8798
Entropy (8bit):	5.089726318453755
Encrypted:	false
SSDEEP:	192:lYRFIAAwwGRfQBMRV04Ip7LZzr9ZVkiiQK:mRFIZwwGRfPRitp7Fzr9ZVkrj
MD5:	C5EFCDC9E465604F32CF24AF10FD6C13
SHA1:	20FB642D2BFA7B5593CCF14AA11FFF2CCC3E8DF8
SHA-256:	862BAE5C822D87DB86D0B893F474177CA1D9A51309354F12CC0AB85CD9BD9CF7
SHA-512:	5D09DAC4F395C8682D3DEC65573CFF441BBF0C22CFC5ABF524DCC54693D0AFDFFDCF00B13010F6995DA81EC4AEC59FE315B5E131523EC2833B86C1A1704D7589
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}return function(){function class_1(){this.__entries__=[]}return Object.defineProperty(class_1.prototype,"size",{get:function get(){return this.__entries__.length},enumerable:!0,configurable:!0}),class_1.prototype.get=function(e){var t=getIndex(this.__entries__,e),n=this.__entries__[t];return n&&n[1]},class_1.prototype.set=function(e,t){var n=getIndex(this.__entries__,e);~n?this.__entries__[n][1]=t:this.__entries__.push([e,t])},class_1.prototype.delete=function(e){var t=this.__entries__,n=getIndex(t,e);~n&&t.splice(n,1)},class_1.prototype.has=function(e){return!!~getIndex(this.__entries__,e)},class_1.prototype.clear=function(){this.__entries__.splice(0)},class_1.prototype.forEach=function(e,t){void 0===t&&(t=null);for(var n=0,r=this.__entrie

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19263), with no line terminators
Category:	downloaded
Size (bytes):	19293
Entropy (8bit):	4.836597477496493
Encrypted:	false
SSDEEP:	384:spMUJ9AI2CDmfasNEl6oB3loL9cpNnlAQoOphSeXSOdtv1XSn:sR5LJBV4yL5VAn
MD5:	7C9E385B7BC928F066EB38E19880C5FF
SHA1:	6FCD841947FC423190E6CB0C8E1D9CF24DC4A6D2
SHA-256:	C24F5E3F6FD3F7A95281B6FFD17C4406F1F96E019E28E0313C2332AC09C4AEA9
SHA-512:	68158CC4AD5865F7EFAC1B5304840581CDABC11075D576270C4C65D9320E6B2399252C7DAF14067276AFEE8E5F1126CA2F8E1E6C107E92B7CA1F839D58660014
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/pages/drift-70616663443cb372.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[194],{5237:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/drift",function(){return __webpack_require__(5938)}])},5938:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.r(__webpack_exports__);var _emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_1__=__webpack_require__(4811),next_script__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(4298),next_script__WEBPACK_IMPORTED_MODULE_0___default=__webpack_require__.n(next_script__WEBPACK_IMPORTED_MODULE_0__);let DriftSandboxIframe=()=>(0,_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_1__.BX)(_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_1__.HY,{children:[(0,_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_1__.tZ)(next_script__WEBPACK_IMPORTED_MODULE_0___default(),{async:!0,crossOrigin:"anonymous",src:"https://js.driftt.com/conductor"}),(0,

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	651
Entropy (8bit):	6.830673513981089
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcf2:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHene
MD5:	C5D9EC48029FD19025B899713F1E8CBE
SHA1:	6925D92BB7EE4277973D6B6E7469F5B59547D4E6
SHA-256:	17A3AF3C93FAA955B12BB5E28E8D802092DEEAC54C0090E9DDC9203268C786A2
SHA-512:	0685D00B0309F8B3B19183B9F0C2C9D1175807E0D91BB45C96B1482DB3B665ECD5CE3E11F99FB7C7536ADAD815C00A72E28267ED27B3FC8FA366E47D32575DF1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..WK ..DU.N..6...UQ.94

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	121000
Entropy (8bit):	7.9034262613361435
Encrypted:	false
SSDEEP:	3072:po2ZGTbEdBVhTdZF8CJtVPngXV8wivjCO7dXaeP7shzKN:pJZGT8zdZF8OgX+wqmKLIVKN
MD5:	3C62E6A6FE57A891F75CBC1ABC2994EF
SHA1:	1B92CD824D62D037FC27FAE982D9286D22E0C9BA
SHA-256:	666C5EC0C76D900AB1EFBA1D01EB681A90ABE3E6DFF55950E3E3A6BBCAA3D4B7
SHA-512:	2F6BA9C3C407AEABB284EF022443ED3D2F53AA000DE8A5061F58F59CDA0D1084C6EA46C00F3AC92E7B22E40D6AD9610EB9A254FB3EBD835865C55698E613A1D7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C......................................................................................................................i............................!Q..1Aa"q..2Rt.........#$67TVWbru....34Bdsv....589Se.%'CDGc...EU..&F.......................................M.........................!1.AQq..."235ar......#R...%4BSTb...s...6C.$.D.7...............?..E.3=h@....@...U.T.,....F.UF..w.F...u.X!... .9,..,....F.R0.. .J..Uf.F.m..,....6.F...,.#...Q...Dp .K6...6.F...f....T.4W..6..A.Y.A.6.R0.. ..4....@.... ..Y.F.b..#+6.U.@.2...h.FVm.%H.DpG%.D.B.EB.Q.H....Thq .K6..}.t...9.........\..\|J.....vk.R....d.....7v.B.~..m7M.J.O.../.ND(.<Nm...C.@..ZW.Z..m(.w.p...[......\|..G.4..$.q..K...9..$......VH..S.i..$..+`./S.pP.[..........~-..o#..o..gui.Q..... .... .... .... .... .... .... .. ..(.)..@....@....@....2..!Q.T.4.Y....{.%.A.Y.T..@..Y...@.94..4....D.#+6.D,..x..EH#...6.#*.....Th4A.Y.AR0.h.B...4..

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	downloaded
Size (bytes):	11808
Entropy (8bit):	5.094303402754285
Encrypted:	false
SSDEEP:	192:ZCm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:ZCVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	C65DB597E762D33246CFBEC56B886523
SHA1:	DE968F5D5A9EBA6F17C47BEECBBAD50430C806C3
SHA-256:	DF3B4F7EE9B54DC67162D74792E3906D8888A0A83068B490FB6830CC6954D5C4
SHA-512:	36B33E0BDFA05937FB86CB2C5E6980CDBAEA9AD08533E50A71B75D8191D068C560957590265220ACEC17E838A3C3E3D1E0314A31F3D5DE5E2910705631B1CC08
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/42.f634da7c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	downloaded
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/29.31d09948.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81322
Entropy (8bit):	5.322186351369348
Encrypted:	false
SSDEEP:	1536:eofDMcb7ZZJ4XZM79ubX4w46N0cxoIeNh6KRlnhHqX:/Mcb7ZncxoIeNh66u
MD5:	A64476C6FE3674D0810193ABBD925B08
SHA1:	FB4FD8B526055812C823219DC585C773B0347B5F
SHA-256:	23F3B44BF5993406B730574A8E1D22F96C840FEB2CBCA25A03746F64419CC03D
SHA-512:	DBC1F5BC4CDA7ABFF522959C5A7D7B40CFADEE7EF1DDFF47A375F81B683614FBC1F922C70F67DB16E55A9CD30FFAE695819912A67BD0F1E761B316B0669C6965
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/1IEYtQv1.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(d){"use strict";var N,x=this&&this.__spreadArray\|\|function(e,t,i){if(i\|\|2===arguments.length)for(var n,o=0,r=t.length;o<r;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.slice.call(t,0,o))[o]=t[o]);return e.concat(n\|\|Array.prototype.slice.call(t))},n=this&&this.__extends\|\|(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])}),function(e,t){N(e,t);function i(){this.constructor=e}e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}),t=this&&this.__awaiter\|\|function(r,a,s,l){return new(s=s\|\|b)(function(e,t){function i(e){try{o(l.next(e))}catch(e){t(e)}}function n(e){try{o(l.throw(e))}catch(e){t(e)}}function o(t){t.done?e(t.value):new s(function(e){e(t.value)}).then(i,n)}o((l=l.apply(r,a\|\|[])).next())})},l=this&&this.__generator\|\|function(n,o){var r,a,s,l={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]},e={next:t(0

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://attr.ml-api.io/?domain=docusign.com&pId=6380132047284574994
Preview:	null

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17191)
Category:	downloaded
Size (bytes):	17994
Entropy (8bit):	5.352980770549444
Encrypted:	false
SSDEEP:	384:wuJ57bov6hzkglaVv6p+wF3g/d28bH1cCFTNAU:wuJuv6hoxwF3g/dFcCFTX
MD5:	E06DB588B9FDF04C058B69C0F06AD0E8
SHA1:	9B317BF7336190B11550AC9B5F7EE16E0BB56866
SHA-256:	785E9BC2E711751F9E29B9FC29DF025A5E4DF44982216AF9F7C81E1BA041224A
SHA-512:	0836E77A325116ECAF8D3506B3396C559707843A538F182364416011D1C394278798F90671689B7AF8781BE40D4F685E6E8ACC2332A7DE56ECC0E70F5AB5995B
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/events.js
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs". . var userIdCookieValue = "s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM". var userIdV2CookieValue = "s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4". var userIdV3CookieValue = "s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,tec_secs_passed:0,hidden:!1,host:encodeURIComponent(window.location.protoco

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 657 x 492, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	124834
Entropy (8bit):	7.944737206772905
Encrypted:	false
SSDEEP:	3072:ffZvvKpjdpURGYyeWPH0rx3ICZWTqMxIvBo0phI7kQl7/nC:tvcRpURGNeGH6NStxsot7kQl7fC
MD5:	9C4968FF679BAC7C9E4CC57772C759DB
SHA1:	7E1F8BC0BEE1C93034D5105F2BD64EF43F9D0BF1
SHA-256:	BC060EDD90B0C6945967C72C4FE9F1CBF8A782E9F87511B2C54CE5192354B38B
SHA-512:	9494144A8C1C2C44F466E46B6980BD29876DE32FDF756075AFBE8BB49A419422B32E77D38DFD93471F522518244F9E56AE0343041BADB3938047AD784BCD2DD0
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/7hPNoVpK42WsofxMBKVelX/99d08eabfa85820f15fcf7c6cc7ed73c/two-people-meeting.png
Preview:	.PNG........IHDR................{....PLTE............................................#0!............(....... $(.......Y6&.... ....`................h..e>).......O...u...W..........z1..T.\|S....GQ(..mF.fA.....M.9)....[C.......PN2#6......."5.xL.qH.p.%1.I.C'.V..vN< .{=#)-.a=. )]..F.!..pV8&.o+G#.v%..F..B..........tVg4 q6....=..J...1=.[!...C.....j!..X8.6./..x.O-..i,......a]...7..3.....lP.h&.../1529F.{[\|W>\|F.._!vP7.6. .;y2.9AQ^=.>....>mJ3.W4.dI...89<....e&...Z&..T...jAIZ-=OeC..P4bq..`...O.=2+.=.....&6F....o%. .Yf~.^8.._.....L.K<3...m..>Od.........X9MQ[NVi..wQ4GZW^rJ^zABEp?(..`x..qE._H.\|O.z.[?.nI..u.y*x...Ww.....YF;BVo.eA.g=.....].C..y.n.]...hhi.S!\|.....r]QJJMl..Qj...]]_..~.k...msx.........m....g.....R....hYiRD.sa.......D..t......zsm]QL.0!;UCS{ZJdQ$D1:.......tRNS.@..f...PIDATx..;.+E........<4.#Y...8.....2k.@p......WA8...;pBh....`..\..yT.....8.~......s.T...0o...........H....w....}...............x.....77..t:..o.../......~zz.....b

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 7704
Category:	downloaded
Size (bytes):	1891
Entropy (8bit):	7.896859718965606
Encrypted:	false
SSDEEP:	48:XjAg2SUVJTLHvg85RKb4ygwyiJBZje0J9KYoMsu:+SUV9LvwvSix5fKzMsu
MD5:	DDEAA293198C08E5381DC82949D57FF3
SHA1:	2DAB8562E28B7FF8B30DC78AE30AE19BD3B61C54
SHA-256:	389E6B0DC952D9951D06F0BDBD92E46903DFD2BCA0FE997BB7A631F57B3A0584
SHA-512:	457AFAE0FEBAB99078328C22C4A1E78C1C884C3A21F028E19D9A87BB8D19E5BBA382CBD094146A55404DC6D7B6A46348F6E1E135709C94D9A6CE35B261742987
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/s/settings/o-19DFBM-na1/v1/web
Preview:	...........X_o.8...O.h_..)4..aa..I......&A..1&G.c.....w?..e.cy....}hc..o....{r.....h.6.>>..K,`....q..q..d.=.M`..].E.6..J..A.A..e.h~>&..Z..2E+.s.RU&O.......F6.a.e....{r...S&.&\..=.......+..Ar..E.j%..~.1............G.........Rr...g[.....Bo..?{.?R%.J..;.....6..>...?.xZ .N.?..Y..5.C3.R"#.T.hF=H.&2IP.Z.0S..}.%..RU..qhR.C.j@k4'..D.e...r..+......n._..^.....,I.VR._"M.K.Q.....UI.c.3...J.....e....4...Q...K.A.. .-y:....-[.qC..~BY}tX...R(.N.S..\N...X..zyO.3..N.a;.Q>.....#j......68.8.x........_.0O{ei.R..r..5.U....x..r....LzL...~.=m..g.M<(.S.....2h.....~.5P..]7jS.ys!x.oT.V.#.Z..@.2...Yj.5.....gy...a.T~.y.z..e..oa.%n...D.,.os.......!....R.LI..>.\.]Qz3....j.M.......$C.8.Oh...J4D.........'.o{8.o..m.S.....\|?....7..../.>............k........u..A[.g.c..N..y..]..U..v%n..dk=..&.;,.._....H\|p\.......>...[wGe.... .Cn.XM...'..O m.....oI.........j...4...TT.{.;.0d.]...l..I~ME.v..3i..k.._.WMv.&B..C....?2...}~.. U...p.^.R.....{.....[z..5.....fh...-..............

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1835
Entropy (8bit):	4.817583651763044
Encrypted:	false
SSDEEP:	48:0JGltqv9vq6U5wdGGSCMWQuBK850+XQyyjlIe4Nq:0OtqpqC/QW159Qyyjlr
MD5:	F323A2877968FD48F2BCD7773396AC53
SHA1:	1F9132C363769EEE00D7310AA231DC62D25A422F
SHA-256:	71BA1835B8C0F4A8A0FC7C090D9018B1FFD155C45370359870D625E4BBBDBA07
SHA-512:	E71AC3DF267919AFBBEC463E5DDAE108F2FB755F826F3B9A4C4D0618B743B6E4FE6CC840CEE409E0AFB7D45E1313395C3335E7DB549DDF4010596E38518BE6D1
Malicious:	false
Reputation:	low
URL:	https://rs.fullstory.com/rec/integrations?OrgId=o-19DFBM-na1
Preview:	(function(FS) {. var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL();. function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) {. var totalTimeExpired = 0;. var wait = 64;. var resultFn = function() {. if (condition()) {. callback();. return;. }. wait = Math.min(wait * 2, 1024);. if (totalTimeExpired > maxWait) {. FS.log('warn', failureMsg);. !!timeoutCallback && timeoutCallback(failureMsg);. return;. }. totalTimeExpired += wait. setTimeout(resultFn, wait);. };. return resultFn;. }. function loadSession(key) {..var lastSession = window['localStorage'].getItem(key);. if (!lastSession) {. lastSession = FS._cookies()[key];. }. return lastSession. }. function saveSession(key, session) {. window['localStorage'].setItem(key, session);. }.. function runIntercept() {. try {. QSI.API.load(). QSI.API.run(). FS('stat'

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2897
Entropy (8bit):	4.977448347226262
Encrypted:	false
SSDEEP:	48:ATnCzyHVM0G/cVMDOT2IVMyxp29fipOlcV7YwqY9o9wNN7Vn:2nCzyHVxucV2OT2IVLps41Y0TVn
MD5:	2400CAA2AA3609641173DBE8AF0B2513
SHA1:	1DF2A081CE86244403EC72318B809FA44CE9FE36
SHA-256:	84DE4EB68C1B124D4D0EDE73E2764319FEF467102FDE76D2027FF1DE75B9FDB7
SHA-512:	9808A5EE34F10B0E72E601BBFFDEC105E7AF542ECA17950A36722FCD6DBD23E358C3E518C60F3238FF7CE0221EF912D5537DB6BB9BD3849547F94068E893CE2B
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/3LWVrC9oDrGbQmlAS6i7uN/9670d83c92fb7522216623add9fb430d/illo-docusignIAM.svg
Preview:	<svg width="1092" height="649" viewBox="0 0 1092 649" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_880_116615)">.<rect width="1092" height="649" fill="#CBC2FF"/>.<path d="M560.984 717.055V602.152L667.115 552.122V666.303L560.984 717.055Z" fill="#CBC2FF"/>.<path d="M454.785 559.483L560.938 602.133L560.999 716.997L454.845 673.081L454.785 559.483Z" fill="#2E009B"/>.<path d="M560.982 507.944L454.852 558.949L560.982 602.192L667.112 552.296L560.982 507.944Z" fill="#4508F4"/>.<path d="M560.984 505.596V390.693L667.115 340.664V454.845L560.984 505.596Z" stroke="white" stroke-width="3.41937" stroke-linejoin="round" stroke-dasharray="6.62 6.62"/>.<path d="M454.785 348.024L560.938 390.674L560.999 505.538L454.845 461.623L454.785 348.024Z" stroke="white" stroke-width="3.41937" stroke-linejoin="round" stroke-dasharray="6.62 6.62"/>.<path d="M560.982 296.485L454.852 347.49L560.982 390.733L667.112 340.837L560.982 296.485Z" stroke="white" stroke-width="3.41937" stroke-linejoin=

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17043
Entropy (8bit):	4.760557546588692
Encrypted:	false
SSDEEP:	192:hMAC/QcoYzYs781juHYdL0NgGvQESj0POwvfsg7sZqSilNS/cy7cvfcgeANcEDDS:hG81Ruw
MD5:	30A37CA417736D32B4A4D1FF9E817F6F
SHA1:	FC37884CDE42A87BDDE560D08ECC6097633B54DA
SHA-256:	CEEFED0AEA7D71E9CD6443F08FB079B68E7CC72ACEBA4924883BF18EFCDD6624
SHA-512:	1FCD6F4B0A01069F1C41B8BF192D16CCED94CA8DBC406F28FD4C959D6DD9A027816CEBA2137988A2A9AE0D051CE14779A9F5AE92BCE385679D68A58D00A2AB48
Malicious:	false
Reputation:	low
URL:	https://rs.fullstory.com/rec/integrations?OrgId=12BP4E
Preview:	(function(FS) {. var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL();. function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) {. var totalTimeExpired = 0;. var wait = 64;. var resultFn = function() {. if (condition()) {. callback();. return;. }. wait = Math.min(wait * 2, 1024);. if (totalTimeExpired > maxWait) {. FS.log('warn', failureMsg);. !!timeoutCallback && timeoutCallback(failureMsg);. return;. }. totalTimeExpired += wait. setTimeout(resultFn, wait);. };. return resultFn;. }. function loadSession(key) {..var lastSession = window['localStorage'].getItem(key);. if (!lastSession) {. lastSession = FS._cookies()[key];. }. return lastSession. }. function saveSession(key, session) {. window['localStorage'].setItem(key, session);. }...window['_dlo_appender'] = 'fullstory';..window['_dlo_telemetryExporter'] = (function(FS) {...

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 840x840, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39638
Entropy (8bit):	7.9947154754289835
Encrypted:	true
SSDEEP:	768:vSfQyQTd6ax9f/9ZXV93ME3BNLwjtSHRY2F89P6eC0pAN38jCUf4ItXEIH2:2A6w9n/V9hRNLhHRzF8RfpAd8jWIt0IW
MD5:	6DEF8A47BDAC6CC263E9371F1EEFEB9D
SHA1:	5EE742D3681E08C5980C4F920F88CE756FE6B2E1
SHA-256:	30036DFB346FFD1A784D57C2C4F53B33DF2346709A4971A853BCA800C5AE46F0
SHA-512:	953C8815EF463F4691CAC40C301803B9768A00613617BB5F198A2B1B16D1BF2C752CB27D7243AD8AEEECC94E62177ABB1160096E60F1674CD1EE77AD7AFCF7B6
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8 ...0E...H.H.>.R.L.$....[Y...en k............b...d..w!?]...]........5>>.....2.3}....._..Y6. ..........}..=4.O^......3....~z....a...{...y~...{v..../..RGuD.4....B...THf......5[...J#.....+.'^..w...x\|.L..)...).........j..........MC=........=...p.Qn...1...... ...L........5(.R.AS..:{..E...X.:.{7.h...6G....b[.y.y.p...Q..zK...7:..R3.....G=....RN..<..N.r.n.,@u..G..B..oT(....kr.-_.Su......iy...@.B2........Dl.0.. ..%......3........=p.....;.......z.....N........4..>.l....K........+.P0#..+U...G.cm..)I...4.0.X....9H..#..%.N=.....b +0...~..p.UC...L.s....=.+&....7.)W~S.8z\|J..$.&.?.....(kxFX.\|...2..-..v..Uj..R..c.=!..]...T..}.Z..y c{g.l....[=.w.....S\..@..r0.5..1..&..%......m.xQ.mk..F.W6....W.2]......A.aB.*2pC..+,.......2...`.I..a.7...L.XF.1...j.([...w.....h..3.A.~lS........Ra.p...j.B[}Dzu..!.un.....l.'.=..=.8..P....js.0.....D.K.F.x^4..v.l..L}..]_K.D.....h.d\|..P..H.m........0<O.H.j.G.C.......B.3...s .\..&.n<....gAr...tW. !.`...

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4194), with no line terminators
Category:	downloaded
Size (bytes):	4194
Entropy (8bit):	5.342447584719384
Encrypted:	false
SSDEEP:	96:B2HkTE9qkuWlRvkNJU7E8jNVCzLBYVDW5Sc2W5CSL3bo3:B2Ew9+WllkrUFjN8mwH5PQ3
MD5:	440347CCE3DFB8BA354A0FD323E95D29
SHA1:	934F293CD969F970904CCEBAECFDF014E46AC9D9
SHA-256:	994E227834DD1C0B65CE1B6420AE0FDBB7BB9163EA12A44044D0FC270F52E451
SHA-512:	698507797D47A64C1DE66B982201A515C5FCD06667F0F5E612C36B58C6F5FD7779E63554E61A74CDF44E19CC558C3F8DFF18CD412D5F498874E3C491F3932C27
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/webpack-f98fc4d273fb2b74.js
Preview:	!function(){"use strict";var e,t,n,r,o,u,i,c,a,f={},d={};function l(e){var t=d[e];if(void 0!==t)return t.exports;var n=d[e]={id:e,loaded:!1,exports:{}},r=!0;try{f[e].call(n.exports,n,n.exports,l),r=!1}finally{r&&delete d[e]}return n.loaded=!0,n.exports}l.m=f,e=[],l.O=function(t,n,r,o){if(n){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[n,r,o];return}for(var i=1/0,u=0;u<e.length;u++){for(var n=e[u][0],r=e[u][1],o=e[u][2],c=!0,a=0;a<n.length;a++)i>=o&&Object.keys(l.O).every(function(e){return l.O[e](n[a])})?n.splice(a--,1):(c=!1,o<i&&(i=o));if(c){e.splice(u--,1);var f=r();void 0!==f&&(t=f)}}return t},l.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return l.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},l.t=function(e,r){if(1&r&&(e=this(e)),8&r\|\|"object"==typeof e&&e&&(4&r&&e.__esModule\|\|16&r&&"function"==typeof e.then))return e;var o=Object.create(null);l.r(o);va

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	69869
Entropy (8bit):	5.123971948698804
Encrypted:	false
SSDEEP:	192:I4ctkJMEkmN7AmghapM3UeRmncMnaLAa8LDZkEU3CO1hHvDxCRtrbcvL5WQUMC8g:I4u4PMLYD
MD5:	58E0A7339BC59027FB6EFC0AAE29FA13
SHA1:	BF19340454C8795699D213BBFA00F0B49D60C6DC
SHA-256:	C23AB10D05500268BA8D30C05AF248ABA660E4C44049CE6C41B10E2D7082BCDA
SHA-512:	4D331AB5AF26772E9355E6435BF38FDF103735C8D3FA8D3865D0E89099ACF48C39A68595518B272E25172953BF8C627D55BB7302BFD7174230DB6E7592F30E61
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom0.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..Custom1Tab .primaryPalette,.individualPalette .Custom1Block .primaryPalette{background-color:#ff6d66;border-color:#ff6d66}.Custom1Tab .secondaryPalette,.individualPalette .Custom1Block .secondaryPalette{background-color:#ff6d66;border-color:#ff6d66}.Custom1Tab .tertiaryPalette,.individualPalette .Custom1Block .tertiaryPalette,.layoutEdit .individualPalette .Custom1Block .tertiaryPalette{background-color:#e08885;border-color:#e08885}.Custom1Tab .bgdPalette{background-color:#ff6d66}.Custom1Tab .brdPalette{border-top-color:#ff6d66}.Custom1Tab .listViewport .subNav .linkBar,.Custom1Tab .mComponent .cHeader,.Custom1Tab .genericTable,.Custom1Tab .bSubBlock,.Custom1Tab .bPageBlock{border-top:3px solid #ff6d66}.bodyDiv .mruList.individualPalette .Custom1Block .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .Custom1Block .secondaryPalette

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	3146
Entropy (8bit):	5.583974074163684
Encrypted:	false
SSDEEP:	96:1VgV+UGOf3S7ynrDdBCIgoKO1U9VZkr/B+wBhkPc:oUUGOf3S7ygoKO1Uxkr/Mc
MD5:	04F1DE15D6DC5E13AECE1445B1162D58
SHA1:	C316C22E7B6117BAAF23065570A17005F7D2A118
SHA-256:	162A48A89746944D3BA05BF21BDA05A16A227F552015B39AF6AD25BCC371A46F
SHA-512:	FA5A6FF91002A385C5FA27150516E809846FC788509B59DA9966E7469624BAED6745E5865CB4272223838B3201B4CEEB896B3A70072E46A6E58518F939451355
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/jslibrary/1698336664248/sfdc/NetworkTracking.js
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.var NetworkTracking={timerId:null,queue:[],hasPerfLogged:!1,config:{URL:"",DEFAULT_LOG_NAME:"",DEFAULT_PAGE:"",LOG_LINE_PATTERN:'{"logName" : "{0}", "logLevel" : "INFO", "logAttrs" : {1}}',ATTRS_PATTERN:'{"pageId": "{0}", "viewId": "{1}"}',LOG_LINES:"logLines",MAX_BUFFER_SIZE:100,FLUSH_SIZE:100,FLUSH_INTERVAL:1500,AUTO_FLUSH:!0},init:function(a,b,c){this.config.URL=a;this.config.DEFAULT_LOG_NAME=b;this.config.DEFAULT_PAGE=c;a=this.logMetrics.bind(this);setTimeout(a,6E4);window.addEventListener("unload",.a)},queueMessage:function(a,b){var c=this.config.LOG_LINE_PATTERN.replace("{0}",a).replace("{1}",b);this.queue.push(c);this.queue.length>this.config.MAX_BUFFER_SIZE&&this.queue.shift()},startFlushTimer:function(){if(!this.timerId&&this.config.AUTO_FLUSH)if(0<this.config.FLUSH_INTERVAL){var a=this;this.timerId=setTimeout(function(){a.

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/26.04e7f30b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	4.4842572184389935
Encrypted:	false
SSDEEP:	12:jgUXW9q9X+lavXirAkyxbued/OAdottVacdgnQiNkTAYRFiyaiQkk:hXLXaoXir5sbuelOA2LyrOTA+iyaiQl
MD5:	FC6A97BC81D9B1B2B0DAF6A76678DF97
SHA1:	472075C5D1B81644A61613C02C9E759048487706
SHA-256:	4E1CCB730E4E3CE40DC6DBE8DE1A1AB49D74D492C298E0E910F19C7AADDE31F1
SHA-512:	D21006DB5B7DD8366C574C64A6FE5830A00F4E1CC146A478073F6DB1282BCCF2C72F9F7D3D9C3D8C8410B278111A2AB2D6372C30F0D170CCF9098381C90651AC
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/resource/1639079103000/zoomin_app__iepolyfills
Preview:	// Polyfill for Object.assign IE 11.if (typeof Object.assign != 'function') {. Object.assign = function(target) {. 'use strict';. if (target == null) {. throw new TypeError('Cannot convert undefined or null to object');. }.. target = Object(target);. for (var index = 1; index < arguments.length; index++) {. var source = arguments[index];. if (source != null) {. for (var key in source) {. if (Object.prototype.hasOwnProperty.call(source, key)) {. target[key] = source[key];. }. }. }. }. return target;. };.}

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1273
Entropy (8bit):	5.006116795611962
Encrypted:	false
SSDEEP:	24:+PwVp/h+0GtBFFtkEnZ5AHettzfyz8trSRTblmrbK4:+QhjGpkYZSHe7zKzwilm/K4
MD5:	A0D608A3FC807F1F481AF95C084E239B
SHA1:	487391078B274855BDB41FFD510BC881D954A22D
SHA-256:	E34936FBB0DA5C88DD342C621515A8B9748666FEB034796E6209F5C46AAB4379
SHA-512:	20B108BBF8BCF9C45A906FFAC7B7369D81C3F462F07B45970C9C736ABD9139DC096371405C594CEB7C4AA1624B0F7E1C875AAB21D4C969BB97DD0F583E60F457
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/123456789/RSC_ChatBotCookieCheckScript
Preview:	let intervalDuration = 500; //milliseconds.....let getActiveGroups = function() {....return.window.OptanonActiveGroups ? [...window.OptanonActiveGroups.split(',')].filter(activeGroup=> activeGroup.indexOf('C')> -1): new Array();...}.....let checkOptanonActiveGroups = function(counter){....counter = counter +1;......//we are checking for the window.OptanonActiveGroups and it takes time for the groups value to populate....if (getActiveGroups().length>0) {.....//raise event on document so we can trigger chatbot display.....document.dispatchEvent(new CustomEvent('optanonLoaded',{detail:{wrapper:getActiveGroups()}}));..........//This event is triggerd when the cookie consent is changed and sends the new cookie values to the "optanonLoaded" event of chatBot Component.....window.Optanon.OnConsentChanged(function(event) {......document.dispatchEvent(new CustomEvent('optanonLoaded',{detail:{wrapper:getActiveGroups()}}));.....});.....return;....}....else{// call again.....if(counter>10){......re

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.996538855882997
Encrypted:	true
SSDEEP:	24576:ttskfY/DJP5fxFc45KWWWbVPFqoFwXwn4tFG5dTk7/FFEk0Q:Lskgx5fxFRttH5cFGfTStFELQ
MD5:	68BCD9B83E0E82433917702420474DDC
SHA1:	F89222962204BA21C36E5D1C18B77E9281B02676
SHA-256:	9B17CE05572F1B0AF4B56B1B72791FF01437C3F1AB38BCA11864317F2F0D8301
SHA-512:	B80E94050157DAC8C0AB44FD145A6B10FAE5589A1A82DA52ED785098E2AC6A5A7EB107C9563A039AF529C832DF9C2DFCC62ABD32DD25DC49F25A51C3EC166F1E
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:3
Preview:	Kg...\|....@$..A.=..S^..!O.....R.]w.<..]7.V..T..."...{~..8.........I&....o...9.m.;v$....\|.AyF.I S..ZZ.<.=x......Y..:3...$..i.D..xVT...F.H...J.K...9'M..[-.:..&bL..h.d"...}.jem..e...XVj.P...@....."...".....)<AQ...?.p..v......j.t6..n...:z.(.,.....j.b.).....{.Go.3..6..ly`U.I....!.l....rNg5x....0G..1;..Q.g13.@.....@.....Q^........9Bw......,.6o\|.R...o'.Fi..4..3...)j......\..g.>.+..Q/\....'...F@...YS...6.._.....}y4.qvKG....j<.V.7.........+......a.......\|]......h.$gwHs.YQ.~.B.......Nzkm'X.g...!Tm$J..._.!0.......=...K..sP[.....T.z.._IS0...z....[.~..W.%.K..\|.[..+tTI.M.W....Bb.a.E.T-.B.<....=.UhR.Z........k.7o.=....U......d.>T...c)......Jo.-..\|V.a....Z..o.J^.,..+.....=..Q2.......y......Gq....b...IL...(..[-\|...,....r.....l.DRW..E.....\|.I..n_.5....E.j...@P.J..Nw2/V..w.t-..~t.-f....P.(0^........Y.....N...d..1...y-.S.z5.~].....&R.U..........Y.....d...C:U.......1....=y(.ZA.z......j.V..nI.egX%H.%.6.[.i.\|.2...f.x&...s..E.....o...-.."...H.M

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-icons-favicon-default-16x16.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999723014435373
Encrypted:	true
SSDEEP:	24576:pjfcUZKEojihxD5bLhrN8+5TjCCh5zHOiSAALA5M3w88hmg1:pEUME4ihxhLdN8EjCKzVc1Avwi
MD5:	7A20F05C56A5EF72AE7DC185D6A1CE46
SHA1:	8329CB26D71EAFBEF4EFFA20461E4A447273C5C7
SHA-256:	F362571B54442B400C3008A15097124C74D14CDE0FF0DABFC7975AF70C72D9A6
SHA-512:	6318EC41FCAB367234120D2666DA9930F1E3D96B5A23B0662725A5908932D9ED5F5869D06EF9F0461C21EE288C8209FF81ECCF11FC93A7D630A736D0189994F8
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:8
Preview:	.........-. .^......js..}........1..\|....dP]...?Xg..+N........5`.e...nX..fL&...5T....Y.\.e..d5........b...# .....Y...3........._6.]..r17.oG....sz{\|.H..>V........0.dEM...R.3tAN..@....PK.B`...#.]..`.........M.......5..=..=G...I....X..1]......i.N.....D>\.<3j<.7.E.a....nSheo..}....i.~..mM.e2AD=.x..4Hm...rK..!......S.R.[...u.bE.'..N..n.B........UY5..h~V.`T\|n.f...-...G.E..JWkp`.@Y).2.....m...W...p.Y.'X#..:.AOh....H.R.k.(.C2.Z..(...<._b..4.....A.....j&...Y..9.mIX..!..n,.v......{..&...].n..N>....v...Nk.._t...I..\m.(.....I..rB^..8.J.++..v3gE..gGM...O..+...,.:t...k.2..Z......0,1D<..$f. 5.q...D...v ..Q...@.\..\....'A...1...Ej.v.c.gF{.......T.f.D$.3..c.B..K.eV......Z....tL..p...=..3..Q...M....Q.9.......... .\|.3.e~k.....d...c.=...GN..XV.A.....z ....run(....$...J.k./....w..&.g.M..a,,?.... ..R7.)....;T...E.uU.z+..%...e..%......G...e.x......5.e^..H....;.v.L.?..#E@....cb&e.........*.oKb.C..-..u..O.....ub~P...i.l.d.[.~..&..k...[`..Y./...0F#.....e....[$.

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.996816060485083
Encrypted:	true
SSDEEP:	24576:4Nf4+J3IH0aQ+R0AthaSShjxR3iYVlyQJhve7JdF:m/3IH0aQ5YhaSShjDyYCuKJ/
MD5:	86DE1438D0DFE5D14E7119D2481E1260
SHA1:	A824C577E3BEC783861EB70AE2C227EBE8F9BF0D
SHA-256:	BC0AD0B972DCD99F45798E0EC81B6A9C50D9BFD4B108D7FCCCEC7EE4E0405B63
SHA-512:	FAC857182A7BE8084B54CA579A9785FB97ACEA0F0FD521A47105A0FA495E2016F8C6A87E2D6BE89A460878B1A749135F3D2AA41F953480259972C43B69CA1934
Malicious:	false
Reputation:	low
URL:	https://videos.ctfassets.net/0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4:2f74d091a89617:4
Preview:	^..6....L&..!.w.....S8>uc../._..K.S..5.?^S.2U..Q...1..,....'.0..D..0.>6n#....0.N....]E...~.w\.Tf...<{..j.:uf.#yNF....J!)&............@..e......jb%...W.).<T..%..]..&r.@..QG'...U.h...(.(.......o...i.b.......?K.y<X<..f..\|}n.=F,8..D3....Vd...kO.IAOy\..lA/..Yt.....}.H.].Bv6.....22...=..JDf.0..jFc..!?)....J.8.L.mxBP..&w....#...]..V9.Q(...v.`1I...[\|BN..%.':..M...?......sL.fVh...M..2....10...".[..r[.k?.6.&..7..;m..l.bz..U..xD....=Zh.i.3..p.9.LQ.dx!..S..j>L.$l\|........=...Kt..P.....)\|.Q~1..x6.ubZ'.L......f.J..h.=.I......&}Y&.Y@V. ...%U.....~.1>.....Q.]..f.....z.C3!.{.Z..6.^.k....U+....).......xf=..$.ZA.k>...9...s.5.._0b;.{...,:..-kt.yQ.?u.........W..b'......k.....U....=.TB.1......_..\|..)..#..5.8.....e.r.Q_"=..N.t..fg..=_v.F..<.k.k..:....6.^.M%&....z.^..J.....2..~.;.~T.6.J$Q..h0.y.r.u......M...<.D...{..:Ac.Rh.)m.9...`..o..s7%1.&.+.a.O.~'i....>..q..?.#...[m.6.xX:r'.wM...{..)$jhp~d...S."...T...Uy.....ud~...2..V%.X.....@.<....\|..Gz........:@s.

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	123098
Entropy (8bit):	5.307263521497999
Encrypted:	false
SSDEEP:	1536:KjfIOJe2RcAFEV8WaIIURxIZF9Esdwv0yFm9McHJ96G196:4e2K4URxIZF9EdJuRp196
MD5:	B481CAC2657584EEEC6CB46DDF750890
SHA1:	0AAFD440DCFCC791570B0F755AAAFA087207CB20
SHA-256:	EF79802452C1E4657E54CC81DF50C42B831A19000BA6988CE31DE740E7E5782E
SHA-512:	21ACD3806E560915C83FE8D5EB0B8E63C20DF0773B9C70D6FA8D8692E9343843D55C489659F78C7C4C0F545960802A7ABBF8C8D3F8CCDA8A5B9CD1C00A860CD3
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/_next/static/chunks/main-96f41e99722bcfe8.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[377],{26783:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addBasePath",{enumerable:!0,get:function(){return a}});var n=r(67891),o=r(69291);function a(e,t){return(0,o.normalizePathTrailingSlash)((0,n.addPathPrefix)(e,""))}("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},96484:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addLocale",{enumerable:!0,get:function(){return n}}),r(69291);var n=function(e){for(var t=arguments.length,r=Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];return e};("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Objec

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	78073
Entropy (8bit):	5.288656876651884
Encrypted:	false
SSDEEP:	1536:xMaUtq4xGJDEGE2crOVzBz9Yr4eN0OfIIiMzmJaPGh:GaUGDEwcr4BWr4e2wIIiomJxh
MD5:	50FF460817C14CC3CDB0112CF58F1456
SHA1:	E3505D6AEECDFCE7355024EF6F1FFED1D5503D17
SHA-256:	B2CFFB3D4620DDEB697BA04E787B68C7749EFAA66614D9C6D16BC6082444F3BB
SHA-512:	85DA1FBD2496F00629267E28861BB37B0D568C0F2D37DF6B43A2067D27E688736B81FD8EBFAD3606507D4DA2974373365415CA0F8163FDED004842FE4F9F8193
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa.1097a448-1.238.0.min.js
Preview:	/! For license information please see nr-spa.1097a448-1.238.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.238.0.PROD"]=self["webpackChunk:NRBA-1.238.0.PROD"]\|\|[]).push([[111],{1199:(e,t,n)=>{n.d(t,{R:()=>s,z:()=>r});var i=[];function r(e){if(0===i.length)return!0;if(void 0===e.hostname)return!1;for(var t=0;t<i.length;t++){var n=i[t];if("*"===n.hostname)return!1;if(a(n.hostname,e.hostname)&&o(n.pathname,e.pathname))return!1}return!0}function s(e){if(i=[],e&&e.length)for(var t=0;t<e.length;t++){let n=e[t];if(!n)continue;0===n.indexOf("http://")?n=n.substring(7):0===n.indexOf("https://")&&(n=n.substring(8));const r=n.indexOf("/");let s,a;r>0?(s=n.substring(0,r),a=n.substring(r)):(s=n,a="");let[o]=s.split(":");i.push({hostname:o,pathname:a})}}function a(e,t){return!(e.length>t.length)&&t.indexOf(e)===t.length-e.length}function o(e,t){return 0===e.indexOf("/")&&(e=e.substring(1)),0===t.indexOf("/")&&(t=t.substring(1)),""===e\|\|e===t}},2573:(e,t,n)=>{n.d(t,{o:()=>h});var i=

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	downloaded
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/19.6f85b843.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	1624530
Entropy (8bit):	5.045613208886389
Encrypted:	false
SSDEEP:	49152:TQDET0qTteHRwKadG22ULK9AKJjDC3aBTSj6O0VtuuRLLo05GVL9JO2UEng/S0X3:+
MD5:	783F1553CBB5C32B953D062BEF3AC030
SHA1:	FD0C925EFD12D5E37A402CE8049824D01FCAEBBC
SHA-256:	6A447451993DF13A4D5718474A5F67EBA3D2F462ECA67238CCE76C749F922C43
SHA-512:	68B9A7105F092025E85F7FA822E21AE92B9A2B05092F9C8F5DB55A8539F3ACD6D878F478236CC30F26EE7E8273B1C77E3FB1BB161F913A3E3015C47CD02872B2
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/sCSS/60.0/sprites/1710411414000/Theme3/gc/dStandard.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..ExpressionSetObjectAliasTab .primaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .primaryPalette{background-color:#7e2600;border-color:#7e2600}.ExpressionSetObjectAliasTab .secondaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .secondaryPalette{background-color:#7e2600;border-color:#7e2600}.ExpressionSetObjectAliasTab .tertiaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .tertiaryPalette,.layoutEdit .individualPalette .ExpressionSetObjectAliasBlock .tertiaryPalette{background-color:#995905;border-color:#995905}.ExpressionSetObjectAliasTab .bgdPalette{background-color:#7e2600}.ExpressionSetObjectAliasTab .brdPalette{border-top-color:#7e2600}.ExpressionSetObjectAliasTab .listViewport .subNav .linkBar,.ExpressionSetObjectAliasTab .mComponent .cHeader,.ExpressionSetObjectAliasTab .genericTable,.Ex

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65316)
Category:	downloaded
Size (bytes):	525006
Entropy (8bit):	5.589768973802045
Encrypted:	false
SSDEEP:	6144:YP09PlJX7Afdtq8yH1YY7tvH722v8pNHQBf9F:rZ7AffqVYetvKQJ
MD5:	29CDE187DD5A696AD169CE18ED602E6E
SHA1:	66619E529E826EB6F80B7874114E728732E00DD8
SHA-256:	73B6BECFE4B4E08C76806FD473061FFB9A32369D965E882D5762A90C6488CC54
SHA-512:	C8A0A96FAB2DD0E0CC474A32D5FB62270B7D066572CA634FA6B1144E23B68F63256E5CFCD85001AA96F87D0D493D730AE3780ECE1317A15F27255FC750A385CA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WPK6FN5
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"740",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=\/(?:qa\|cn\|int\|es)\\-(docusigncommunity)\\..\\.force.\/i;return a.test(",["escape",["macro",1],8,16],")?\"support_testing\":",["escape",["macro",2],8,16],".replace(\/.docusign.*\/gi,\"\")})();"]},{"function":"__c","vtp_value":"www"},{"function":"__c","vtp_value":"support"},{"function":"__c","vtp_value":"momentum"},{"function":"__c","vtp_value":"developers"},{"function":"__c","vtp_value":"go"},{"function":"__c","vtp_value":"esign"},{"function":"__

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 4999
Category:	dropped
Size (bytes):	1402
Entropy (8bit):	7.862368797076385
Encrypted:	false
SSDEEP:	24:XsGohN4vpAy1zcnQPvj1wpKDqG1kIGkh4lsI+3HQkAVL6uq+FCr1CUyYwcbkYLaw:XShN4CeFvj1cyqGyI3gq3QkAh6uesUya
MD5:	E04797D2F51D534478A443D4E40145EE
SHA1:	7C9691921CE2110A41C536472F318D1C3AA874FD
SHA-256:	5BE187868CEB988B37E561D5206F637B8C683462E1345BF762331B161D18492A
SHA-512:	4B7E205B3F11A7CB76981220C959CAA5ECA26D853AB845004AC39809F849D0CA9E5EDBD68ACFD0E1D55F3F4625A594B0398C2326280F702483F71AA5521720AE
Malicious:	false
Reputation:	low
Preview:	...........WMo.<...X0...h.(....h..6).....I.)R;.....}AJv$EN......3.p.....]>....E....'...9..[....2.c.'.Yc....V....E..[bc.LY...la...{ .\....(.......J.Ld.Mj'.S....&.....d...........`...z.a.g..d=Y'.-@.8...{.X,F....-X.2.:2.f/.FP..b9......z`..$........a..0\|ou.-..yR...$a.^}1va...T.:.C.u.JpnaI..]Y..x6NA;L..D6>]'.......{....(5z.u!..;.r.....<J...U..~.Z..P>...a....}m...lg...}...+.j.......C.\...iP.A.BaI.5.>=....Z..S..J.^x.{..5..v.~...P6.z.~A,...J.-.\|.w"..A+.^Y...58.;...Ze.o.?.......pi..}..}.]zOjZy...V..d..e...$aw..1;f..gH..9.,a.".....w.Rpns.m.N.i/YoF.....#.....R.S.Z."...A.C.E.b..E..;.?'L../5...H.......A......[..\|..f.9.j'.....Q^...WO.o....MZ?Uo....&.2Z..xN....k...fJ.Ty7..7..H...h.j.w.;[..9.W.C.Jo#..........B..$......c..W.3.!...?\.@..i.4.Je.gD........b.8..}OVs.'.......y=C.....=\|[cP4..0..5...-...k}...%!....%......H.].R..`Q)/.....R..%w...1c..}.L..P..7..,.,..J....tC..>D..V..CV7LU...fm..g.d.B,...{..J.m.]....Zw........B.&h.t.ei......?......x..;l.y.....

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	4.787114349566797
Encrypted:	false
SSDEEP:	3:k0WYL12AoJTeW6QfpX/W6Qen:UYR2AY6EpXO6h
MD5:	A63B3FF3178BC6BB6B93E0BA67FD0406
SHA1:	455519DED7CB02961EBAE0E5654A3E66E4DBE2CC
SHA-256:	587CEB3B7372C1EC7E1D260EBD92FB648B148632E2CEF0AD87E759B9A25685C7
SHA-512:	3DB96F92FF313A65779E338508311AF064DCCD42991CE475F5EDD17B47D8AFB3F03B02B5CB75DC11D69F9937AE21805659DA0D0F5AE7231AC855117C8DB38D6D
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/35d1d58a1044879bd83c010cbbdbe30c4a199dcd/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set(["\u002F[...page]"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	851230
Entropy (8bit):	5.379610767388464
Encrypted:	false
SSDEEP:	12288:JGDvou9l3nDjguB5udfNg7WMtLlVjlf24rZR1mIypayIEFyQuQySJl1Z7Up4GVPU:GT3nDjguB5umtLl54tmVNatiET
MD5:	226AA0193067A76F03205E70C6FA5535
SHA1:	140E73E939E9948BC5617C81C55C76F6C4412A15
SHA-256:	B5AAED0AE57D491936CE7C9C4C14EDBDFDD3A7A102B7DD162B6487313F6F8694
SHA-512:	2080086D2CCDDFCFAC81E5B42183552C903D6A5B44CC79F27C12377CA0461399B2E13D5DA59053736C2A31F63920629F85A2F76B66710E8D9EFEEA26FE53124D
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	window.Aura \|\| (window.Aura = {});.window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});.window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/[0]","attributes":{"values":{"schema":"Published","authenticated":false,"ac":"","formFactor":"LARGE","brandingSetId":"52bff5e6-866e-4e63-8c44-d79144c0db18","uds":false,"language":"en_US","viewType":"Published","pageId":"bfd6e0ae-cd7e-4358-90c8-87f8de2344ca","themeLayoutType":"Home","priv_themeLayoutReady":true,"isHybrid":false,"includeInstrumentation":true,"publishedChangelistNum":193}}},"components":[{"componentDef":{"descriptor":"markup://siteforce:baseApp"},"creationPath":"/[0]/$","model":{"appConfigData":{"allLanguages":["en_US","pt_BR","ja","de","fr","ko","nl_NL","es","it","zh_TW"],"isHybridApp":false,"activeLanguage":"en_US","cmsSettings":{"isPersonalizationEnabled":"true","isEnabled":"true"},"cmsConnections":[]},"googleAnalyticsAnonymizeIpEnabled":false,"googleAnalyt

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8586), with no line terminators
Category:	downloaded
Size (bytes):	8586
Entropy (8bit):	4.980754057922192
Encrypted:	false
SSDEEP:	192:j/c/K/iNadyZ8MUB+lE9Y8MUB+dFVJkEE+Zg23nIXs:ZdyZ8MUB+lE9Y8MUB+Dks13nJ
MD5:	E7107BC29CCB3C6D928F0F8F10A0F22D
SHA1:	7F4B6237B2D74DE5F5A83C77841070A797BA4276
SHA-256:	7849BA1748F8188749DF28E9D59CA4E570A8495684353D8DF4715FA70A81E787
SHA-512:	38A7259987C29A4DC349AC812656318F45BE7D8E34D0C9B39AE7AF13DDADCFA0CCBD624440A09F3C0FB08CD0B9C8014DBE14B29304821072CABAB0AB703ABCB5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css
Preview:	.drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);-moz-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);opacity:1}.drift-widget-close-button--align-right{margin-left:-14px}.drift-widget-close-button--align-left{margin-left:4px}.drift-widget-message-close-button svg{display:table-cell;text-align:center}.drift-widget-message-close-button svg path{fill:#fff}.drift-widget-message-close-button:hover{background:#414141}@media (max-width:367px),(min-device-width:320px) and (max-device-width:480px) and (-webkit-min-device-pixel-ratio:2),(min-width:369px) and (max-width:380px){.drift-widget-message-close-button{opacity:1}}.drift-widget

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36856, version 1.0
Category:	downloaded
Size (bytes):	36856
Entropy (8bit):	7.993883940500875
Encrypted:	true
SSDEEP:	768:ZMNiZomgSZAxUurD9OcKO3dN/r/S8LApyz4cHyvHYvYOEJXqxAmY:ZEGopSZAxUudOcfN/rK8YyNCHHUAmY
MD5:	7A2C08DE38AC8690D31237D40D6C0891
SHA1:	D3886C8C85B8AD7D7D18524E420071953BB3665E
SHA-256:	EF24F3F9D60DEB7BF6B8E0E7EE58E98BFE723B260DB5EC08F047CAC9DE384ED3
SHA-512:	5297DAE050EC5ED80EADB6BB930B63173B30AF558C083A1B1F9B2DE6B285ECD0A97DB7C7707F80E5B6EAA111158DCD7F4695B6CD989E8DC2CA5D6F9F9216321A
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-lightitalic.woff2
Preview:	wOF2...............@............................?FFTM..V........`....:..e.....<..T..j..6.$..P. ..4..q..5[,.q'r.7.J..N....jz.7w......Z....n.[.......5.$.v..m..D..Q)4.....A...,.g.v....VG....;.....H...)p(hIa.(......0e.ge.a.]T.4.3.t...Ux.-a.M..N..Y.N.E..k..8.>.U..3....(.....a....,y0....N3>....l.r.w..f...FD.W..U.."s...u.r.VIe9...7{.D-.nZ..1(..:..WL........&M..ve.Ep.._l<.`..?B..[.{.L.l.V._h..w..........(2.........{t.s_.QEe.....T.kQ..U.S.,,.!...#...Cl...f."...40rm0cvb`c.vNQ....~.2.8'^&.Jo..))...7qj. .......j8@`Q0j..A`..+.cQ.....F...- ..F..0.k..C/.;.J/.P..k.f.....xwf...^..&.0I.I...:....................(.(..C...d..uOU?v.. .Gh..n.#.d.uc.....[.......*Y....MT...N....!a..e.iy`.).=...T./.Fu`.\|.$.a...c..8.......z..B.........w..R...F.B.:wPgV.e.0w....G.......!.u&.e..r.O.~..?.;.\l..."".o.IC..4M....5......^..?.j./....L.....<%.....=.`y.............T.. R .........3w.]p/..e.[Oo..b,.X^.\...<...+Ww.......9.O.b...Q....95.....vWJg.......$.cZ.Rr..[..g...2.4Kp...4J.7.offf

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.437147921986512
Encrypted:	false
SSDEEP:	3:Yh2/vWGcVIGL+EQVAVAnhdfH4:YB5BjIw
MD5:	AD8E7F787E2449DA06FFCAB830442C93
SHA1:	FED86D513CBBF9A9C2FAA8870A2C0FBB472A5BF4
SHA-256:	49CCC65B6080D2177EB19DB1B8387CF3E21739CFAB00836D520895326840DD1D
SHA-512:	390899E78746D9E8BEE6DAB0713A16E79B03DB19620C0044081A66365C411BB410D890B444BDC2ED8932F1C78F757A126BB1CF25E851F4CBAD93DE79CFA14047
Malicious:	false
Reputation:	low
Preview:	{"DS_A":"305622db-cab4-46c0-8a17-15a582e0ed4c","DS_A_C":""}

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2897
Entropy (8bit):	4.977448347226262
Encrypted:	false
SSDEEP:	48:ATnCzyHVM0G/cVMDOT2IVMyxp29fipOlcV7YwqY9o9wNN7Vn:2nCzyHVxucV2OT2IVLps41Y0TVn
MD5:	2400CAA2AA3609641173DBE8AF0B2513
SHA1:	1DF2A081CE86244403EC72318B809FA44CE9FE36
SHA-256:	84DE4EB68C1B124D4D0EDE73E2764319FEF467102FDE76D2027FF1DE75B9FDB7
SHA-512:	9808A5EE34F10B0E72E601BBFFDEC105E7AF542ECA17950A36722FCD6DBD23E358C3E518C60F3238FF7CE0221EF912D5537DB6BB9BD3849547F94068E893CE2B
Malicious:	false
Reputation:	low
Preview:	<svg width="1092" height="649" viewBox="0 0 1092 649" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_880_116615)">.<rect width="1092" height="649" fill="#CBC2FF"/>.<path d="M560.984 717.055V602.152L667.115 552.122V666.303L560.984 717.055Z" fill="#CBC2FF"/>.<path d="M454.785 559.483L560.938 602.133L560.999 716.997L454.845 673.081L454.785 559.483Z" fill="#2E009B"/>.<path d="M560.982 507.944L454.852 558.949L560.982 602.192L667.112 552.296L560.982 507.944Z" fill="#4508F4"/>.<path d="M560.984 505.596V390.693L667.115 340.664V454.845L560.984 505.596Z" stroke="white" stroke-width="3.41937" stroke-linejoin="round" stroke-dasharray="6.62 6.62"/>.<path d="M454.785 348.024L560.938 390.674L560.999 505.538L454.845 461.623L454.785 348.024Z" stroke="white" stroke-width="3.41937" stroke-linejoin="round" stroke-dasharray="6.62 6.62"/>.<path d="M560.982 296.485L454.852 347.49L560.982 390.733L667.112 340.837L560.982 296.485Z" stroke="white" stroke-width="3.41937" stroke-linejoin=

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	887
Entropy (8bit):	4.6483906881299175
Encrypted:	false
SSDEEP:	12:M1TqwtwSk77fgTOQdLd0OSIjOiu9Ka74bCwtiTYpKfhuiEMgIhaMvMirnMRLn:MZnk77612cjJuKQEkfwiEEhamMibyLn
MD5:	90A89DE6A39A218737670C9D9D088856
SHA1:	99808FF0804B5567C84D29333A8E86814F4FF3B1
SHA-256:	71A8646369FB268018E843C6E4B4DC9005547B94E8D13B23F5B97207103C5510
SHA-512:	6EAE8F0CA37D3588C789D4AB24F92D2B6F69CBBBF02AF6B45B88C0CB8B406B57A6E723546717F2FDD68E7CDE1540F1E5470648E0E857376F735C5FA81E68413A
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/1709165610000/DSC_ZoominZMSetMetadata
Preview:	//script that adds tags to zoomin content.document.addEventListener("ZMSetMetadata", function (event) {. const appendMetaTagToHeader = function (metaTagName, metaTagContent) {. var metaTag = document.querySelector('meta[name="' + metaTagName + '"]'); . if (!metaTag) { . metaTag = document.createElement('META'); . metaTag.setAttribute("name", metaTagName);. } . metaTag.setAttribute("content", metaTagContent); . document.head.appendChild(metaTag);. } . //zominPrefix: leave blank if you want to remove the prefix, e.g. var zoominPrefix = ''; . var zoominPrefix = ''; . var titleElName = zoominPrefix + 'guidename'; . appendMetaTagToHeader(titleElName, event.detail.bundleTitle);. appendMetaTagToHeader('description', event.detail.description); . appendMetaTagToHeader('robots', event.detail.robots);.});

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfXJ:YGKe+
MD5:	4AB1B2FAFAC8446E3F329B0B0DB9808C
SHA1:	BEF639CD408A77648D92883866A353078DF08752
SHA-256:	66B9C90C1C910938928F03A3CB23264C4976BB4786313664CA05CF4DE33E60C5
SHA-512:	3EE8010C1BF0B4D34FA190F69C12A7D4C65ECF21D526E1225E27732E1C63CB290DFD73EF0F75BB78CB7BCAC4B7BF65A88F31D382882A387E6F0D022047AB681B
Malicious:	false
Reputation:	low
Preview:	{"country":"RO"}

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1133000
Entropy (8bit):	5.073080995581343
Encrypted:	false
SSDEEP:	12288:jPu/b6GGn95mBzvULyzMESGU4xnA+MThnJsj2B:zu/b85mBzvUeN3Q
MD5:	B65A28029BDB7E84D3D4FDB6363EA4FC
SHA1:	56942F317BEAADB6EA500470AB32B53CCB5083E9
SHA-256:	EFEBB85C09C7F4A26E81C21C76085D86CDACDF594C5E596F2306B81ABC959BF5
SHA-512:	4F0A59A234A6FB3C7D39A917DC195C9A23BC2A6B67C574F2B5A17202F41813C64CA566247A7362E6DD7D3686AFD1E555952126645F2FC618A51AA5678AF7A081
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--lwc-mqHighRes:only screen and (-webkit-min-device-pixel-ratio: 2), screen and (min-device-pixel-ratio: 2),screen and (min-resolution: 192dpi),screen and (min-resolution: 2dppx);--lwc-mqSmall:only screen and (max-width: 47.9375em);--lwc-paletteIndigo10:rgb(32, 6, 71);--lwc-popoverWalkthroughHeaderImage:;--lwc-zIndexDialog:6000;--lwc-colorPickerSelectorWidth:14rem;--lwc-nubbinSizeDefault:1rem;--lwc-navigationItemVerticalPadding:var(--lwc-spacingXSmall);--lwc-paletteCloudBlue40:rgb(5, 98, 138);--lwc-brandNavigationColorText:var(--lwc-colorTextInverse);--lwc-colorBackgroundContextBarInverseItemHover:rgba(255, 255, 255, 0.2);--lwc-dropZoneSlotHeight:0.25rem;--lwc-colorTextTabLabelSelected:rgb(0, 95, 215);--lwc-colorStrokeBrandActive:rgb(3, 45, 96)

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 62105
Category:	downloaded
Size (bytes):	15948
Entropy (8bit):	7.986170812734313
Encrypted:	false
SSDEEP:	384:B55LsI244RkFjpm3QFKxVtWspxWLLWL893Fs2yYQ7bsXh:Js1R1gFKBjWmq3+2y1MXh
MD5:	24581E9BA60B8B29EEAC6C54CF9FB485
SHA1:	4D865D614287DC82CD62E196465D3391B254CB23
SHA-256:	EA14ACB9234FF01C593792FC33B5EF0C9AFE2D50399F259552F2B0899BF1DF87
SHA-512:	84217525D42B27509F0102BEF117903FA38F27FCFD4BC3E85CF19015B4038B9210821919863C9C550CA7E76F862582E2057663044E6761956400C143B59E4A29
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/journey/messenger-plugins/journey.min.js
Preview:	...........}}[.....S.?=.U.I..&..aY.....l.S.a..$..;..X....g.f.v l..{.}....4..fF3._.u..E'.1....l.....y..$b...........4.~c.......^.?..W....Q.r~......?..fY.M..sL..bC.. .N\|..)...".I.K..q...a/......C~7%..C.q.K.1...8..t-..n..ni..Ch%....O(...c.....y0-r.C.aFn;{E..(.k.z..M..dw..Q.I!2=.lTk..o;P?..*q.z;.v_.......u........w?............:.....nn?....o=y...?..f}..p..W.k....s.9.i8'Y.'d`.M.S^.l.S.y.._{..~\|..b3..q..n7...0Q........N.g<....z....8........A.i...Q6&......a.8.....!.R.....Op.z..F..&y.....^.C.C.@G.yBv.?C/^..c..C..5.q..."q..~..u.........u...\|..j$=wS.?.fhX.>+..V...~.\|_.....@.s.{Z.......zh....g....../......B....i..X..."(.4.b...!.Ve...4.{./J.Sj3....."....b..?....;...6...L...0.2...9.'AN:.u..w.(H..;..6....{......p}=.....q@..\|<..DOO...a.....~E...l}..O.].XW.....zWM....Y..\|.ol}.u.#d.(..).....zA.+.79M:.0.}Vm~4W5.2..4.aWpL.Z,\|C.B.J...I....(.Zc..vj.s..v.(.l...BM..n..E1Du\....z.>{....n....=......^...?......V.-5.6..36.}...z..u{h]..h...gO.....q....40?.....h.

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	117066
Entropy (8bit):	7.7939549844340155
Encrypted:	false
SSDEEP:	3072:yYa/YXdx9nzprGkKSmi3B8BiJAkoTw350:LpNHzprGkIKBugry
MD5:	9F08B9201DC9B859DB68D324D5B206D1
SHA1:	D78C820D6A11FA5ACACCF965EDACEE1FB5E25C2C
SHA-256:	1A0C44BCD1A74092E437F8B41316C6963993452D585FBFCA06F3B47FA6603A6F
SHA-512:	8BC66346DBE0C6E8126E5DA60F67F58C06461F43661FA0C0CA25D0A3588A9C08119DFE18724EED38233C07CEBE2C0F21054D056B2574102A3DD7B5334D326E14
Malicious:	false
Reputation:	low
URL:	https://docusign.file.force.com/sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTTL&operationContext=DELIVERY&contentId=05T8Z00002WJU0Y&page=0&d=/a/8Z000000GYqS/LAWu8kNCayWAEvdGd0FtNaVbu5rBG.VBRGsbheRWGmo&oid=00D300000000bS4&dpt=null&viewId=
Preview:	......JFIF.............C....................................................................C......................................................................................................................j.............................!1Q.."Aaq.2Rt.......#7Wru.....$3456BTVbds.....89Sv..%'CDGUe.E......Fc........................................O........................!1..Q..23Aaq......"5Rr...#4BST..%bs....6..C.$D..&7...............?..C.f...........[...kr...&.5.E&.v..0....B..3..g0!..L...I..w..B.s..lg0.A.....a...I..s....)0sT..9!..9...s.U..L...m....[..W......lg0......I..nR`U....Z.)0.o.S3.F..9.!....L..5.Y.S9..ng0sU..L#..w..&a.&....U.....45.g0.O......Q.....u..j...(........ZmU[{..l.U.O.]..>..t.m.qr.w..g..>9r(.M<..M.Z..R[m.Z..'...S.."9u.Jox...M....?(D<.M.BTrl..\.....aJd.9...r'.M.@..l.9...G2.K...{..f...8..z........x.u.........................%... A ...........5.I..&.Z...9...O..T.kc9.Pg0..s.R`C].&.JL......ks9.a.s.>a..kr...s...&..V.)0L!.....[...h.a....9..w.."aR.....`T.`

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 37560, version 1.0
Category:	downloaded
Size (bytes):	37560
Entropy (8bit):	7.986336222628645
Encrypted:	false
SSDEEP:	768:LFg7GVJ6kU5VXtwAmsgqioep+spJaIKsuo+e4dc+csTfC/DuRD6rSNN:Gxp3SnsGDdEIZmxTq/Du6sN
MD5:	B9D0556A2C620A939D54C63BE3DF6C6C
SHA1:	97968884D4C5A93C46AB1334CE9E9156C694EA4D
SHA-256:	90973DB3F26FE86B648EC735F3183B44902E5CEDF2B1A042402BAC39DA70404F
SHA-512:	37B59878D38EC5E9CEFB9877E53D616696FE430298CE4F26D61DBBD7402F2867554E25DBD78BA95C445BC145EA469895BE43E2BD30C1906B8D27D8AF14E84EDA
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.3.40-5/fonts/helvetica-neue/HelveticaNeue-Bold.woff
Preview:	wOFF..............=4........................LTSH............F.jOS/2...8...V...`e<..VDMX.......m....sPz.cmap...............cvt .......>...>....fpgm...........b2Msfgasp................glyf......m'...h/z..hdmx..u@.......(..'.head.......6...6..2.hhea....... ...$...Ghmtx...(.......x.j..kern...$.......<...loca.............i.vmaxp....... ... ....name.......e.......post........... ...2prep... ............x.5.!..0.....6.....y......"d...H8.....;...vg."3.v../..^.,...m...c.d[.N5.. ..x...xSH...I....H...g.,(.....[J.80.#.a...M<.......n.....)..}J.F.qc_1N....iD?....x.c`f.a.........................9X.@....A_......\|<...........N0.g...3..X.N1(.!...J.h..x...c`.....w.....m.p..m..k..Zm............@..#..N..N...d...$3.Yf!.."..ld....s....IN..\27.e....4.O.'.,@.Y.....,....E(".RT....P...%dIJ.R...)m...,KYY.r.<.e.X...(+QIV..T...J...Ue5...2..T.5.!kQS...Cm...ud=.....R_6.....a#...4.Mh,...biFS.f...eKZX...R...lMk.FF.6..me{.......`Qt...L'..+]d7.Z$..&{.]....EO.^.A.z.....+.....@.9..r...

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1874 x 242, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27224
Entropy (8bit):	7.902278294555033
Encrypted:	false
SSDEEP:	384:7ibbJjYWEcJ5PgD19JHOhV5P9fXU5QQqwMTs0+PGEd6NijNzP7dY34MFxMImiqX:7WE5p9JHObXMxqwyP+Pk6zRY34ME9iK
MD5:	89AD0DEB4CB385E07B81E27C0F3C2C0D
SHA1:	20A309293BB723D33FC31E845643B20A68A200E6
SHA-256:	EC5DF993D3C65FE0C164344C1C644FE3DBACB73FF4C1387CAC4E0E2B580EF3C5
SHA-512:	FCAD923E84EE140AD12C644F1BE95BBF1CD9FD2068518184DBA0A233DF5A55F1B9E4A26CC239D3DBF3A04E53E9CF6BDE8D2BB44E1EB6732D2CE79CA9D668C0DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.................pHYs...........~... .IDATx..._l.W~/..q..H..fr...8..ln...9.{..y`[...".D...4 .)"eKo.....<"u.%"`6.X@4."..V\|...[..!...L.q...u.M...,.p}..NK-......wN....3..].........(.5.oll....0...`...:...c!""""""""""""..Jt.:6..`....P.f.@.@.^................$.A.:...a.D.^.....`.............\.. ul..`^z.)....`...............&.A...... .^.:./T................Q...V..Qm.W.:.UJ3.T.@./Y.Zs............. ..$e.@....Rj..4..#....z4.!......................06V..XNz0DQRJ..Ru.7qt...=............... ..M.X..XYz Dak.P..Y.JDDD.1.Tq.A.1.......%... ...p.cc%.%,-Ue.C...T.@.l/NDDD!RJ....P.....R........^.ixDDt.o..............o......g.A..{...f..+=."?B.P...n.CDDD.SJ...c..`..6....+a.......7...[.2...p.....5...+.....(.b.J..W....d=.T...7.{..T"""j-. .-........^....a..i./+<."""":X.......U.J...P5.~.....).....n...Q..R3.>Ex....XWJ.Bz=""j..7..k.w..Q....l.m9...s.......16V...Q.=...p...(a.s.T./..0.0..(\.~....e.............7.U.........U16.#=.J7.T.R..o.1.T"""...Q.~.`.JD..3.....""""

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4122
Entropy (8bit):	7.906100259481781
Encrypted:	false
SSDEEP:	96:L6dUUUoz8b4lDAqZUzvEXpeXcV/hPN2L0hXKdE:2SxclBpesN32L0t
MD5:	3C5F851C455BADA111C434545ABF9263
SHA1:	F65580803EC30072F0D9D562687AB4D2A88B2509
SHA-256:	DE57FF946D44291CFF4122EF129D6954911C749F52CD897859401322839C88D2
SHA-512:	11723B1C0395A9FC205ECBC9CC9F13E8355CEDB7C7BEB56FEA2054C86ADB2939B2B8871E8DD1E8864E1D95EDF6AE9C744E95815D309481FC7DA349BF69483501
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png
Preview:	.PNG........IHDR.......T.....Z.......PLTE......................................................nnn......>>>.........................3........N.......TTT............S..FFF......V..!!!...............E.....$.....:::......^..Y.....P..J..@..7..)...{.......H.....vvv..f[[[o....hJJK...a..}}}'''...f.....B../..fffOOO. 6444......k..[......u......e..c```BBB+++c.....:.....-........001. 0h........<......miii..a..%.....o.sss..b."T. ;666.55{.....s........yyy..i.$a.!N. D. @.12.%,w..b.............$i.$ZLLL.!I.....cdbXXX.)9.,/U.o.=.......ppp.!+}.x.....$rkkk.._.4X.&$......o..R..h..)..Bu..m.b:..I..y.....y.Zn.fH`P..._..R..B...t...}]^\|.fx..p.Mg"A;p..h..6..i.....h}..x..rsXrZVha.`ALVrGV.}Q%VJ.pH.>Da=7BN5xJ.I).m."....=..\..n....m.....@...}.}.\|..{..uk.u?.t.ytz\|h>xe.faVNZ.iO.c>.S2....;......tRNS....[.....ujPO.+.....IDATx...klKa..._....V..U[.f..%e.sYL.0Y%.bl...K....q}...A..!. "q.#A...K.....3+9..4.}..mr...}z....U.1.h.S..).M......m...5....:.X.(RV.+..; .uhgh......)...=RZ{.R\K..

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 7704
Category:	dropped
Size (bytes):	1891
Entropy (8bit):	7.896859718965606
Encrypted:	false
SSDEEP:	48:XjAg2SUVJTLHvg85RKb4ygwyiJBZje0J9KYoMsu:+SUV9LvwvSix5fKzMsu
MD5:	DDEAA293198C08E5381DC82949D57FF3
SHA1:	2DAB8562E28B7FF8B30DC78AE30AE19BD3B61C54
SHA-256:	389E6B0DC952D9951D06F0BDBD92E46903DFD2BCA0FE997BB7A631F57B3A0584
SHA-512:	457AFAE0FEBAB99078328C22C4A1E78C1C884C3A21F028E19D9A87BB8D19E5BBA382CBD094146A55404DC6D7B6A46348F6E1E135709C94D9A6CE35B261742987
Malicious:	false
Reputation:	low
Preview:	...........X_o.8...O.h_..)4..aa..I......&A..1&G.c.....w?..e.cy....}hc..o....{r.....h.6.>>..K,`....q..q..d.=.M`..].E.6..J..A.A..e.h~>&..Z..2E+.s.RU&O.......F6.a.e....{r...S&.&\..=.......+..Ar..E.j%..~.1............G.........Rr...g[.....Bo..?{.?R%.J..;.....6..>...?.xZ .N.?..Y..5.C3.R"#.T.hF=H.&2IP.Z.0S..}.%..RU..qhR.C.j@k4'..D.e...r..+......n._..^.....,I.VR._"M.K.Q.....UI.c.3...J.....e....4...Q...K.A.. .-y:....-[.qC..~BY}tX...R(.N.S..\N...X..zyO.3..N.a;.Q>.....#j......68.8.x........_.0O{ei.R..r..5.U....x..r....LzL...~.=m..g.M<(.S.....2h.....~.5P..]7jS.ys!x.oT.V.#.Z..@.2...Yj.5.....gy...a.T~.y.z..e..oa.%n...D.,.os.......!....R.LI..>.\.]Qz3....j.M.......$C.8.Oh...J4D.........'.o{8.o..m.S.....\|?....7..../.>............k........u..A[.g.c..N..y..]..U..v%n..dk=..&.;,.._....H\|p\.......>...[wGe.... .Cn.XM...'..O m.....oI.........j...4...TT.{.;.0d.]...l..I~ME.v..3i..k.._.WMv.&B..C....?2...}~.. U...p.^.R.....{.....[z..5.....fh...-..............

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17679)
Category:	downloaded
Size (bytes):	18274
Entropy (8bit):	5.641324572550196
Encrypted:	false
SSDEEP:	192:KxwRrAxpw8cV7uhFfUAlCxnBLdIpU1fkucU+lKuoC5O6j8eae50W55TvQF8BbyHw:2s/uhaqGTs7HoCseae50eZ42BbuhK
MD5:	92312DFE3B3C5E1A20BC7E8D8158BD9C
SHA1:	7574B3E0548EEBD164BBEBBF3C44A1842469DEF4
SHA-256:	293035AA813B643CF4E54BB31819ACEC2566B82DF8B19E279D7C0D8E0D3AE4FA
SHA-512:	BB6056A556A98CCC0BDA9DFE52E7A72543970B731A9857D071AFA9A95E53DA7A4AA7C7F29664769502BCD7B3E9967F4B1EF7A68EC472E16BDF9F0284FB9E1A1A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var M=function(J){return J},d=this\|\|self,K=function(J,T){if((J=(T=d.trustedTypes,null),!T)\|\|!T.createPolicy)return J;try{J=T.createPolicy("bg",{createHTML:M,createScript:M,createScriptURL:M})}catch(t){d.console&&d.console.error(t.message)}return J};(0,eval)(function(J,T){return(T=K())&&1===J.eval(T.createScript("1"))?function(t){return T.createScript(t)}:function(t){return""+t}}(d)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var JV=function(J,T){return[function(){return J},(T(function(t){t(J)}),function(){})]},P=function(J,T,t){T[X(t,J,T),TA]=2796},tV=function(J,T){return T[J]<<24\|T[(J\|0)+1]<<16\|T[(J\|0)+2]<<8\|T[(J\|0)+3]},Mm=function(J,T){return k[J](k.prototype,{call:T,document:T,prototype:T,console:T,pop:T,length:T,replace:T,floor:T,parent:T,splice:T,stack:T,propertyIsEnumerable:T})},x=function(J,T){if(J.P)return dK(J,J.

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124492
Entropy (8bit):	5.273006124300861
Encrypted:	false
SSDEEP:	1536:fFAOlIn7x+HjHwpoKLP8eVno2YkObV/nHsSXO79ABLrjjcViK955M1jL//aUFQM:fF+meno2KbV/HLzcgoDqdT
MD5:	4B3C998169D377850AF9762C0F9D90B2
SHA1:	82CF5B5D421B2A3DE2940C37D9F8FAA1615F5FA8
SHA-256:	85E40D540127A759D102AB27F165CBEFE8E59F24968349FB687A45E0F34CE174
SHA-512:	8C8E9857CA175F5723C270612B6AD37C0BD8BBB766C3E47CB5BBFDDE3E701ED57D806AF149257683D804E897AC88A992EB92A10B8E0707B3E2407483CAE8D19D
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/main-5848164edc7f05e2.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(__unused_webpack_module,exports){"use strict";function asyncGeneratorStep(gen,resolve,reject,_next,_throw,key,arg){try{var info=gen[key](arg),value=info.value}catch(error){reject(error);return}info.done?resolve(value):Promise.resolve(value).then(_next,_throw)}exports.Z=function(fn){return function(){var self1=this,args=arguments;return new Promise(function(resolve,reject){var gen=fn.apply(self1,args);function _next(value){asyncGeneratorStep(gen,resolve,reject,_next,_throw,"next",value)}function _throw(err){asyncGeneratorStep(gen,resolve,reject,_next,_throw,"throw",err)}_next(void 0)})}}},6495:function(__unused_webpack_module,exports){"use strict";function extends_(){return(extends_=Object.assign\|\|function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source)Object.prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target}).apply(this,arguments)}expor

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.197845823084412
Encrypted:	false
SSDEEP:	3:YEHqZlL6RX7LthQ+V:YEKZlWpnQ+V
MD5:	BD0B814B289C55FD0F2D0CD84CA3ACD5
SHA1:	3C8C7DC6993D9715666D0B8A06EA10AB94054881
SHA-256:	78BD6EE8A2FCE4C0294729FA7DB73D0D370298F2F5738B53ECBF229F85171942
SHA-512:	F97E9DD29BD879ACE6209421E59119A888DCC9951BD9289770451F5DDD7FCF134A8A797344226BA5D46C0D5166D0EF0C247F4093CB4185A4C9263A90F044720E
Malicious:	false
Reputation:	low
Preview:	{"allowAllDomains":true,"allowedDomains":[]}

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 528204
Category:	downloaded
Size (bytes):	136387
Entropy (8bit):	7.9977882290446844
Encrypted:	true
SSDEEP:	3072:aNAxtG1G/ptku02wkX5qKj+zm0KvkF0CnjW0cU8LwqA:gAxE1GRZZz+10y8O
MD5:	10F8D6D1314D8F24CE392DCFAABC242F
SHA1:	B97D5BB3A022473A539935EEFA142C3F99F552BA
SHA-256:	7B9C1F2C6C1E77FB252524B8E07936FB25DF9FCBC57535068332973AEDF46549
SHA-512:	64B4966A001549DBA8F3B1C0C64201B7B4A49963C13D14BB449DCF956701B1E2993E264275FB67DAECB62F18D1FF6C58B67AABE1A2ED7E3253EA9FB606D79638
Malicious:	false
Reputation:	low
URL:	https://apps.usw2.pure.cloud/messenger/defaultVendors.min.js
Preview:	...........kc.6.(....[.u..V$.M/...4I..n...)...P.BR..Y......o....y.....0...3.......Z{.6.iJ..M..?.4I.8..:...{....Rj..H#..k.4.^<Y{..R.x.....,..0...Zw..)..k)..........\|....}.)....V./...]...t......>. ..,.2`.MIF.k..t-...ZGI.og.5h.......fI...,....."...k7Y......o..~.v..#/..l.u........v..Xmjml.....S`.$p......Z.94.;...1.P;.$...l..B.E.\|s..].Om..(..X..rg{..@E..Z.m.U......^s..)..D.p.-.....D../..c....4.Q..3.f.:.]k......]..F.,f.(/....@...r....w\|.\..y....0..N..$.y...,..{...........P...$..d!~d.q.r...b.Y$...<..Z\|$.....j9.[zL.e.$.{..R....JO.ww..-.X..d......1.`.......D.......%.&..8...I.........7J.q2........\4...3z.7z.>...DuXa....#S.b6.IH.X*k.'h.H.m/@..81.U..y{0.9.%..yK.+.9...u....b-....ql...x.......PC...$...0...P. K../.UO......E\.Z.... .......\='....t.....v2.s.w3w3.i..-...+.K..!...7..A.'4.).....d......".o.w&t.C.....@. .B!.m.'.v..]...v..m.oL./.[....'S...N.l.?H.A./...I.'v.......s.@._-2.= .^..... ....Z<.........Iq.e.._.EY......N...TI.s...........~.`rO.

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1931
Entropy (8bit):	4.802659305811804
Encrypted:	false
SSDEEP:	24:C54FMcXt7I5sZ8F8GKk/+ptFAzIJTU/wDIlpw+AYfAQ69AxBtbTcXQTzAk:CGMav4/0tFKIJ10Lw+dfx69UbrzF
MD5:	BCDAAA0D6F5D7F544DC586A2A14B123D
SHA1:	BC27CA6E7EEA9D237AF04C4BAF7F53EE0471CE9F
SHA-256:	8AA63B6BC4B7F0B63F22E81D7E092B4E6EC7BDB5D4222F7602C8A9AC94BF27D7
SHA-512:	76C08BC000D1CD4B91AD3F116CA0C995A44682692B332B1E87D2254A1180ED3085805BA35D6BD7B676B76F27DE2A75AEFFA7DFDE65480D9BE6B7C90D06659AE8
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/s/sfsites/c/resource/RecaptchaHeader
Preview:	var grecaptchaReady = false;..var onloadCallback = function(){ grecaptchaReady = true; };....var verifyCallback = function(token) {.. document.dispatchEvent(new CustomEvent('grecaptchaVerified', {'detail': {response: token }}));..};..var errorCallback = function() {.. document.dispatchEvent(new Event('grecaptchaError'));..};....var expiredCallback = function() {.. document.dispatchEvent(new Event('grecaptchaExpired'));..}....let initializeRecaptcha = function(e){ //// retrieve the site key and initialize other handlers.... let siteKey = e.detail.siteKey;.. ...if(siteKey == null \|\| siteKey === undefined){....return;...}......// initialize handlers on the document to listen for recatpcha events......document.addEventListener('grecaptchaRender', function(e) {.. onloadCallback = function() {.. grecaptchaReady = true;.. grecaptcha.render(e.detail.element, {.. .. 'sitekey': siteKey,.. 'callback': verifyCallback,.. 'e

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	278439
Entropy (8bit):	5.572389832215031
Encrypted:	false
SSDEEP:	3072:FAN4evQq+71vbzwHn2A9jX8rvp2LUF1eFS+MCY55CgY8pv1HkcnLP/w222ho0/cL:W4hq8wH2OanVL55Cv8pNHkCLn22K
MD5:	2429A18533BA76677BAF4696A177695D
SHA1:	B1A3E94A318F45766B0712A76F0BB006B863FBC8
SHA-256:	0E2BBA5D47E9F43D6A538020DBAAAA45249CC688F85C9CC1DE339828ED75EAD7
SHA-512:	09BB695DF5C0CF7B2CBF882C7F2A0E845CFB34D52C26A622B41DE2A34B34467A54CA2258CA9D5FE4567086530DFBC3D4A64B65709E1102B3AF98BD9FC79E02C1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=G-1TZ7S9D6BQ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","docusign\\.(com\|ca\|co\\.uk\|com\|com\\.au\|com\\.br\|de\|fr\|nl\|in\|jp\|mx\|es\|sg\|net)$","docusign\\."],"tag_id":112},{"function":"__ogt_ip_mark","priority":11,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":114},{"function":"__ogt_referral_exclusion","priority":11,"vtp_includeConditions":["list","docusign\\.com$","docusign\\.(ae\|ca\|co\|co\\.uk\|com\|com\\.au\|com\\.br\|com\\.es\|de\|es\|fr\|in\|it\|jp\|lt\|lu\|mx\|nl\|no\|org\|pl\|se\|sg)$","docusign\\.net","^(apid

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=f9d8335b-1f5b-415d-923b-2daa2d0de9bd
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://support.docusign.com/img/s.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310122
Encrypted:	false
SSDEEP:	3:HE9vZ6n:SMn
MD5:	0C5DAD92482D9A7C7C253510F5082465
SHA1:	534B458F99B4D0BB90C2CF2C4BB3703EF44A52BF
SHA-256:	5DBAF0A4FF0F8AC8C1B67550EEE84390B089604FFAF71183E417636C7E183AC5
SHA-512:	3B889A1DB2E3D3184886111A1B20FC54E6F14B006DB29B1D92741AF5C0A5B8299E78CDF6939437915F2B350E0BFC781BB8E96D4119172FF0CD2CB178487D71E0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/16.22abfce0.chunk.css
Preview:	body{margin:0;padding:0}

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	27198
Entropy (8bit):	2.459230633161204
Encrypted:	false
SSDEEP:	48:Bu111111111w1111111111Y1111111111Y111h11n1i91nYk1nZ1ocJ1i1gn111W:BZAvF892d5TaAtMH3LOCaGshCaGsu
MD5:	1904FDCB027ED618D24601BFE5121096
SHA1:	3384FA317742DD9B6D6C8995AB6B0131579311B3
SHA-256:	300AD21B2AFE161BE399D3C4034131DEEF4FC22A9BE39FA70AC3716295DAFDB9
SHA-512:	3E9D51836FEB63D18D2B05592F80A8B79FF627DD2E1F50C68520D4C180647E7A12E6B73BFA081CD368D5C43F13AAE69696E071F0B191701E17A13E7E7197E766
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/images/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......00.... ..%...D..(....... ..... ...........................L...L...L...L...L...L...L...L...L...L...L...L...K...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...M...M...M...M...M...M...M...L...............L...L...L...L...:...&...&...&...&...&.z.#.k.f.RT.cRR."__..TT....L...L...L...M.w.#.........................&&v.SS..RR..RR.EQQ....L...L...L...M.v.#.........................&&v.SS..RR..RR..SS.,..L...L...L...M.v.#.........................&&v.SS..RR..RR..RR....L...L...L...M.v.#.........................((\|.SS..RR..RR..RR....L...L...L...M.v.#.......................3.CC..SS..RR..RR..RR....L...L...L...M.v.#...................3.BB..SS..RR..RR..RR..RR....L...L...L...L.k.i.%&v.&&v.&&v.((\|.CC..SS..RR..RR..RR..RR..RR..............UT..RR..SS..SS..SS..SS..SS..RR..RR..RR..RR..RR..RR..............TT..RR..RR..RR..RR..RR..RR..RR

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1202), with no line terminators
Category:	downloaded
Size (bytes):	1202
Entropy (8bit):	5.218913682873316
Encrypted:	false
SSDEEP:	24:haHLkjW7OPGrVJ8Jut0JQJ40IJ2Jm+XJHLuJDX/ZlEOIzh1I:/q7OPY8uOYiKTZrCz/ZlZIw
MD5:	DE889D2C9485D968DE00B5137D1ABE34
SHA1:	6CA6FE05F396BF062403D0AA502FC9B4D7929910
SHA-256:	989F66EB1C90DF97DA6DC0870D5B7DFE05C72A74215FD33049CAA711FA89B07B
SHA-512:	8263A764D0E98B015D3F704B92B1866CFCD5B983A5A40A2AC186122C4B5942C669549B0699398CBB4E27BA85593E6DBFE8BB6033F4E3C1554B7E3EC100DE357D
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-a0deeec5c85c92d3.js" defer=""></script><script src="/_next/static/chunks/framework-ffee79c6390da51e.js" defer=""></script><script src="/_next/static/chunks/main-5848164edc7f05e2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-ef9da0a6572b3989.js" defer=""></script><script src="/_next/static/chunks/885-d6ecc87b4abc63e3.js" defer=""></script><script src="/_next/static/chunks/pages/drift-70616663443cb372.js" defer=""></script><script src="/_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js" defer=""></script><script src="/_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js" defer=""></script></head><body><div id="__next"></div><script id="__NEXT_DATA__" type=

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-logo-default.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32029), with CRLF line terminators
Category:	downloaded
Size (bytes):	97185
Entropy (8bit):	5.374276891254097
Encrypted:	false
SSDEEP:	1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOa99Twkxb7/Jp9s:y4J+03jL5TCOaLTwkxFdnCVQwKa98Hrc
MD5:	2B6294333DB8EEB65BC7717144357D23
SHA1:	74EF185A3CBA75AF7F4E1B3DCAF1B32B0DB5C1AF
SHA-256:	4946FCF019E50CF850A0344E45B3A8F93D5EAD5E1DADE33695025EF732913AF1
SHA-512:	BF4197F2ECA58ED25DFDD82D518FB0A6F900695318DC5A47E2039273C3BDA02B1D73249D5EA7D047BFBDA3A692606B430C836912E043F87751FDD900576BEC9C
Malicious:	false
Reputation:	low
URL:	https://na3.docusign.net/Signing/client_scripts/jQuery/jquery-1.12.3.min.js
Preview:	/! jQuery v1.12.3 \| (c) jQuery Foundation \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.c

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 19:42:54.657278061 CEST	192.168.2.5	1.1.1.1	0x6739	Standard query (0)	na3.docusign.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:54.657546043 CEST	192.168.2.5	1.1.1.1	0x342e	Standard query (0)	na3.docusign.net	65	IN (0x0001)	false
Apr 16, 2024 19:42:56.837869883 CEST	192.168.2.5	1.1.1.1	0x7099	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.838336945 CEST	192.168.2.5	1.1.1.1	0xff60	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 16, 2024 19:42:56.854301929 CEST	192.168.2.5	1.1.1.1	0x4259	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.854891062 CEST	192.168.2.5	1.1.1.1	0xfd9f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:42:57.629920959 CEST	192.168.2.5	1.1.1.1	0x9b26	Standard query (0)	na3.docusign.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:57.630160093 CEST	192.168.2.5	1.1.1.1	0xcd49	Standard query (0)	na3.docusign.net	65	IN (0x0001)	false
Apr 16, 2024 19:42:57.857757092 CEST	192.168.2.5	1.1.1.1	0x989f	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:57.858063936 CEST	192.168.2.5	1.1.1.1	0x9678	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 16, 2024 19:42:59.599020004 CEST	192.168.2.5	1.1.1.1	0xe0c	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:59.599416018 CEST	192.168.2.5	1.1.1.1	0x72b2	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:00.191076040 CEST	192.168.2.5	1.1.1.1	0x7d1b	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:00.191612959 CEST	192.168.2.5	1.1.1.1	0x8776	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:07.125725985 CEST	192.168.2.5	1.1.1.1	0x201f	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:07.125866890 CEST	192.168.2.5	1.1.1.1	0xe3d5	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:08.465950966 CEST	192.168.2.5	1.1.1.1	0x17a3	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:08.466267109 CEST	192.168.2.5	1.1.1.1	0xd50c	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:09.695235968 CEST	192.168.2.5	1.1.1.1	0x784e	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.695606947 CEST	192.168.2.5	1.1.1.1	0xd6ee	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:09.738886118 CEST	192.168.2.5	1.1.1.1	0x554b	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.739027023 CEST	192.168.2.5	1.1.1.1	0xece9	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:10.932950974 CEST	192.168.2.5	1.1.1.1	0x57d5	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:10.933113098 CEST	192.168.2.5	1.1.1.1	0xa4fa	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 16, 2024 19:43:10.933527946 CEST	192.168.2.5	1.1.1.1	0x85f2	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:10.933665037 CEST	192.168.2.5	1.1.1.1	0xc63e	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:10.934032917 CEST	192.168.2.5	1.1.1.1	0x24ae	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:10.934175014 CEST	192.168.2.5	1.1.1.1	0xa7e	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:10.934505939 CEST	192.168.2.5	1.1.1.1	0x16bf	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:10.934627056 CEST	192.168.2.5	1.1.1.1	0xfe8e	Standard query (0)	img.en25.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:11.519563913 CEST	192.168.2.5	1.1.1.1	0xb0de	Standard query (0)	track.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.519771099 CEST	192.168.2.5	1.1.1.1	0x7cac	Standard query (0)	track.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:11.785976887 CEST	192.168.2.5	1.1.1.1	0x29b5	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.786242008 CEST	192.168.2.5	1.1.1.1	0x4c7e	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:11.792026997 CEST	192.168.2.5	1.1.1.1	0x83fe	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.792300940 CEST	192.168.2.5	1.1.1.1	0xd994	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:11.957448959 CEST	192.168.2.5	1.1.1.1	0xf6ca	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.957572937 CEST	192.168.2.5	1.1.1.1	0xeb98	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:12.054337025 CEST	192.168.2.5	1.1.1.1	0x69c0	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 16, 2024 19:43:12.054337978 CEST	192.168.2.5	1.1.1.1	0x2613	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.099904060 CEST	192.168.2.5	1.1.1.1	0x1890	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.100215912 CEST	192.168.2.5	1.1.1.1	0xfb45	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:12.696183920 CEST	192.168.2.5	1.1.1.1	0x55f7	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.696394920 CEST	192.168.2.5	1.1.1.1	0x8464	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:12.847368002 CEST	192.168.2.5	1.1.1.1	0x9b67	Standard query (0)	track.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.847606897 CEST	192.168.2.5	1.1.1.1	0x2a25	Standard query (0)	track.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:12.876306057 CEST	192.168.2.5	1.1.1.1	0x8e2f	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.876451015 CEST	192.168.2.5	1.1.1.1	0x624d	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.125134945 CEST	192.168.2.5	1.1.1.1	0x7d66	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.125349045 CEST	192.168.2.5	1.1.1.1	0xd724	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.132405043 CEST	192.168.2.5	1.1.1.1	0x8c2a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.132694006 CEST	192.168.2.5	1.1.1.1	0xaced	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.139681101 CEST	192.168.2.5	1.1.1.1	0xef46	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.140012980 CEST	192.168.2.5	1.1.1.1	0x5e84	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.140587091 CEST	192.168.2.5	1.1.1.1	0x8791	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.140727043 CEST	192.168.2.5	1.1.1.1	0xdf90	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.145129919 CEST	192.168.2.5	1.1.1.1	0xaf25	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.145329952 CEST	192.168.2.5	1.1.1.1	0x3ddc	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.146095991 CEST	192.168.2.5	1.1.1.1	0xe88f	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.146388054 CEST	192.168.2.5	1.1.1.1	0xaf3a	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.777241945 CEST	192.168.2.5	1.1.1.1	0x6899	Standard query (0)	chat.docusign.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.777750969 CEST	192.168.2.5	1.1.1.1	0xd4bf	Standard query (0)	chat.docusign.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:14.778886080 CEST	192.168.2.5	1.1.1.1	0xe2fe	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.779093981 CEST	192.168.2.5	1.1.1.1	0xe8c1	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:15.047657013 CEST	192.168.2.5	1.1.1.1	0x3031	Standard query (0)	s.ml-attr.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.047787905 CEST	192.168.2.5	1.1.1.1	0x7a29	Standard query (0)	s.ml-attr.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:15.286288023 CEST	192.168.2.5	1.1.1.1	0x9fde	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.286648989 CEST	192.168.2.5	1.1.1.1	0x1ff7	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:15.294039965 CEST	192.168.2.5	1.1.1.1	0xf307	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.294255972 CEST	192.168.2.5	1.1.1.1	0xaec2	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.398612022 CEST	192.168.2.5	1.1.1.1	0x5c9	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.399319887 CEST	192.168.2.5	1.1.1.1	0xaca8	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.405661106 CEST	192.168.2.5	1.1.1.1	0x5ffd	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.405776978 CEST	192.168.2.5	1.1.1.1	0xee42	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.464277029 CEST	192.168.2.5	1.1.1.1	0xc005	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.464631081 CEST	192.168.2.5	1.1.1.1	0xa60b	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.556500912 CEST	192.168.2.5	1.1.1.1	0x2207	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.557017088 CEST	192.168.2.5	1.1.1.1	0x9d05	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.557643890 CEST	192.168.2.5	1.1.1.1	0x10de	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.557995081 CEST	192.168.2.5	1.1.1.1	0xfb20	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.562500954 CEST	192.168.2.5	1.1.1.1	0x9eb8	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.562629938 CEST	192.168.2.5	1.1.1.1	0xc9b3	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.564387083 CEST	192.168.2.5	1.1.1.1	0x30ef	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.564496994 CEST	192.168.2.5	1.1.1.1	0x22f0	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.578838110 CEST	192.168.2.5	1.1.1.1	0x5ab4	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.579014063 CEST	192.168.2.5	1.1.1.1	0x1e50	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.614878893 CEST	192.168.2.5	1.1.1.1	0xdb96	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.615066051 CEST	192.168.2.5	1.1.1.1	0x21c	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.638916016 CEST	192.168.2.5	1.1.1.1	0xf4d3	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.639127016 CEST	192.168.2.5	1.1.1.1	0x7fc	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:16.640678883 CEST	192.168.2.5	1.1.1.1	0x2fe6	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.640894890 CEST	192.168.2.5	1.1.1.1	0xf99f	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.456084967 CEST	192.168.2.5	1.1.1.1	0x70ac	Standard query (0)	support.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.456293106 CEST	192.168.2.5	1.1.1.1	0x161	Standard query (0)	support.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.486696005 CEST	192.168.2.5	1.1.1.1	0xe31c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.487374067 CEST	192.168.2.5	1.1.1.1	0xd70	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.489846945 CEST	192.168.2.5	1.1.1.1	0xe53c	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.490235090 CEST	192.168.2.5	1.1.1.1	0x1e9	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.493664980 CEST	192.168.2.5	1.1.1.1	0x2eb4	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.493984938 CEST	192.168.2.5	1.1.1.1	0x61e8	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.705271006 CEST	192.168.2.5	1.1.1.1	0x2130	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.706059933 CEST	192.168.2.5	1.1.1.1	0x7935	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.788091898 CEST	192.168.2.5	1.1.1.1	0x9b7c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.788389921 CEST	192.168.2.5	1.1.1.1	0xd7fa	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.790059090 CEST	192.168.2.5	1.1.1.1	0x208f	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.790406942 CEST	192.168.2.5	1.1.1.1	0x473	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.797765970 CEST	192.168.2.5	1.1.1.1	0x21c7	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.798350096 CEST	192.168.2.5	1.1.1.1	0xe2bf	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.801522017 CEST	192.168.2.5	1.1.1.1	0xe572	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.801865101 CEST	192.168.2.5	1.1.1.1	0x7598	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.804189920 CEST	192.168.2.5	1.1.1.1	0x4e25	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.804383993 CEST	192.168.2.5	1.1.1.1	0x611d	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:17.807996988 CEST	192.168.2.5	1.1.1.1	0xb684	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.808458090 CEST	192.168.2.5	1.1.1.1	0x1c0d	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.030086994 CEST	192.168.2.5	1.1.1.1	0xbce8	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.030328035 CEST	192.168.2.5	1.1.1.1	0xecfa	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.176372051 CEST	192.168.2.5	1.1.1.1	0xa985	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.176697016 CEST	192.168.2.5	1.1.1.1	0x3d62	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.193881989 CEST	192.168.2.5	1.1.1.1	0xb7f3	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.194103956 CEST	192.168.2.5	1.1.1.1	0xfe1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.278987885 CEST	192.168.2.5	1.1.1.1	0x9a5d	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.279469013 CEST	192.168.2.5	1.1.1.1	0x2d06	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.348968983 CEST	192.168.2.5	1.1.1.1	0x6fbd	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.349323034 CEST	192.168.2.5	1.1.1.1	0xe7e2	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Apr 16, 2024 19:43:18.420423985 CEST	192.168.2.5	1.1.1.1	0x88df	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.421008110 CEST	192.168.2.5	1.1.1.1	0x7879	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:20.939414978 CEST	192.168.2.5	1.1.1.1	0x1f13	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:20.939681053 CEST	192.168.2.5	1.1.1.1	0x5741	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:20.988305092 CEST	192.168.2.5	1.1.1.1	0x77cf	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:20.988500118 CEST	192.168.2.5	1.1.1.1	0xba90	Standard query (0)	customer.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:20.988903046 CEST	192.168.2.5	1.1.1.1	0x66f2	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:20.989013910 CEST	192.168.2.5	1.1.1.1	0x1038	Standard query (0)	conversation.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:20.989417076 CEST	192.168.2.5	1.1.1.1	0xa939	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:20.989537001 CEST	192.168.2.5	1.1.1.1	0x1458	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.006819963 CEST	192.168.2.5	1.1.1.1	0xc354	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.006968021 CEST	192.168.2.5	1.1.1.1	0x2247	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.164398909 CEST	192.168.2.5	1.1.1.1	0xd3b9	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.166013002 CEST	192.168.2.5	1.1.1.1	0x42fa	Standard query (0)	targeting.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.209664106 CEST	192.168.2.5	1.1.1.1	0x566c	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.209805012 CEST	192.168.2.5	1.1.1.1	0xae90	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.210414886 CEST	192.168.2.5	1.1.1.1	0xbfd7	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.210705042 CEST	192.168.2.5	1.1.1.1	0x6a58	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.211323023 CEST	192.168.2.5	1.1.1.1	0x103c	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.212317944 CEST	192.168.2.5	1.1.1.1	0x9e2b	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.212776899 CEST	192.168.2.5	1.1.1.1	0x4e1f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.212909937 CEST	192.168.2.5	1.1.1.1	0xd3dd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:21.751610041 CEST	192.168.2.5	1.1.1.1	0x6070	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.751719952 CEST	192.168.2.5	1.1.1.1	0x26e7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:24.293943882 CEST	192.168.2.5	1.1.1.1	0x4261	Standard query (0)	cdn4.mxpnl.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:24.294060946 CEST	192.168.2.5	1.1.1.1	0xfe5a	Standard query (0)	cdn4.mxpnl.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:26.994626045 CEST	192.168.2.5	1.1.1.1	0x6730	Standard query (0)	support.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:26.994626045 CEST	192.168.2.5	1.1.1.1	0xe910	Standard query (0)	support.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:27.741125107 CEST	192.168.2.5	1.1.1.1	0x1466	Standard query (0)	api-js.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.741421938 CEST	192.168.2.5	1.1.1.1	0x7258	Standard query (0)	api-js.mixpanel.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:27.968358040 CEST	192.168.2.5	1.1.1.1	0x7bfd	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.968413115 CEST	192.168.2.5	1.1.1.1	0x9571	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:28.069753885 CEST	192.168.2.5	1.1.1.1	0x7aa3	Standard query (0)	apps.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.069753885 CEST	192.168.2.5	1.1.1.1	0xd12e	Standard query (0)	apps.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:28.571108103 CEST	192.168.2.5	1.1.1.1	0x8ce0	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.571343899 CEST	192.168.2.5	1.1.1.1	0xca52	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:28.710345984 CEST	192.168.2.5	1.1.1.1	0xab18	Standard query (0)	event.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.710582972 CEST	192.168.2.5	1.1.1.1	0xea8	Standard query (0)	event.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:29.772054911 CEST	192.168.2.5	1.1.1.1	0x3da8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.772545099 CEST	192.168.2.5	1.1.1.1	0x185f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:29.773032904 CEST	192.168.2.5	1.1.1.1	0x39ed	Standard query (0)	docusign.file.force.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.773317099 CEST	192.168.2.5	1.1.1.1	0x7baa	Standard query (0)	docusign.file.force.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:30.476026058 CEST	192.168.2.5	1.1.1.1	0xb771	Standard query (0)	api-cdn.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.476480007 CEST	192.168.2.5	1.1.1.1	0xe562	Standard query (0)	api-cdn.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:30.617077112 CEST	192.168.2.5	1.1.1.1	0xf68a	Standard query (0)	docusign.lightning.force.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.618160963 CEST	192.168.2.5	1.1.1.1	0x9e1	Standard query (0)	docusign.lightning.force.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:30.869503021 CEST	192.168.2.5	1.1.1.1	0x8470	Standard query (0)	event.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.869718075 CEST	192.168.2.5	1.1.1.1	0x33b5	Standard query (0)	event.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.108057022 CEST	192.168.2.5	1.1.1.1	0xae01	Standard query (0)	docusign.file.force.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.108258963 CEST	192.168.2.5	1.1.1.1	0x1f64	Standard query (0)	docusign.file.force.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.168842077 CEST	192.168.2.5	1.1.1.1	0x966	Standard query (0)	api-js.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.169058084 CEST	192.168.2.5	1.1.1.1	0xb27b	Standard query (0)	api-js.mixpanel.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.292152882 CEST	192.168.2.5	1.1.1.1	0x8a17	Standard query (0)	docusign.my.salesforce.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.292469978 CEST	192.168.2.5	1.1.1.1	0xba92	Standard query (0)	docusign.my.salesforce.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.382428885 CEST	192.168.2.5	1.1.1.1	0xd2b9	Standard query (0)	api-cdn.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.382579088 CEST	192.168.2.5	1.1.1.1	0x65a8	Standard query (0)	api-cdn.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.406820059 CEST	192.168.2.5	1.1.1.1	0xdbb4	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.407027960 CEST	192.168.2.5	1.1.1.1	0x42fb	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:31.866214991 CEST	192.168.2.5	1.1.1.1	0x481	Standard query (0)	47616-16.chat.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.866802931 CEST	192.168.2.5	1.1.1.1	0x7aec	Standard query (0)	47616-16.chat.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:32.174520016 CEST	192.168.2.5	1.1.1.1	0x469c	Standard query (0)	apps.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.174890995 CEST	192.168.2.5	1.1.1.1	0xc5c0	Standard query (0)	apps.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:32.391041040 CEST	192.168.2.5	1.1.1.1	0x7a5f	Standard query (0)	docusign.my.salesforce.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.391309977 CEST	192.168.2.5	1.1.1.1	0xdc74	Standard query (0)	docusign.my.salesforce.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:33.913064957 CEST	192.168.2.5	1.1.1.1	0x5ec5	Standard query (0)	api.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:33.913666964 CEST	192.168.2.5	1.1.1.1	0x5b7	Standard query (0)	api.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:36.593072891 CEST	192.168.2.5	1.1.1.1	0xa8e2	Standard query (0)	api.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:36.593209982 CEST	192.168.2.5	1.1.1.1	0x5fc3	Standard query (0)	api.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:37.479161024 CEST	192.168.2.5	1.1.1.1	0x3485	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.479399920 CEST	192.168.2.5	1.1.1.1	0x187a	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:37.706912041 CEST	192.168.2.5	1.1.1.1	0xb228	Standard query (0)	log.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.707206964 CEST	192.168.2.5	1.1.1.1	0x4691	Standard query (0)	log.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:43:38.231280088 CEST	192.168.2.5	1.1.1.1	0xf06	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.231583118 CEST	192.168.2.5	1.1.1.1	0x1f90	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 16, 2024 19:43:38.801609039 CEST	192.168.2.5	1.1.1.1	0xb50b	Standard query (0)	apps.usw2.pure.cloud	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.801762104 CEST	192.168.2.5	1.1.1.1	0x91a5	Standard query (0)	apps.usw2.pure.cloud	65	IN (0x0001)	false
Apr 16, 2024 19:43:38.865155935 CEST	192.168.2.5	1.1.1.1	0xa9ab	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.865308046 CEST	192.168.2.5	1.1.1.1	0x5835	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 16, 2024 19:44:02.617427111 CEST	192.168.2.5	1.1.1.1	0xc09f	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:02.618729115 CEST	192.168.2.5	1.1.1.1	0xfba6	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:08.650269985 CEST	192.168.2.5	1.1.1.1	0xa946	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.662364006 CEST	192.168.2.5	1.1.1.1	0x97a	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:08.834574938 CEST	192.168.2.5	1.1.1.1	0xe692	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.835254908 CEST	192.168.2.5	1.1.1.1	0x53ae	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 16, 2024 19:44:11.188750029 CEST	192.168.2.5	1.1.1.1	0x2ee5	Standard query (0)	videos.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.189075947 CEST	192.168.2.5	1.1.1.1	0x172f	Standard query (0)	videos.ctfassets.net	65	IN (0x0001)	false
Apr 16, 2024 19:44:11.543447018 CEST	192.168.2.5	1.1.1.1	0xfd03	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.544419050 CEST	192.168.2.5	1.1.1.1	0x6a9	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 16, 2024 19:44:11.977190971 CEST	192.168.2.5	1.1.1.1	0xb016	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.977680922 CEST	192.168.2.5	1.1.1.1	0x315f	Standard query (0)	img.en25.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:11.982853889 CEST	192.168.2.5	1.1.1.1	0xc539	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.982980967 CEST	192.168.2.5	1.1.1.1	0x477e	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:14.286196947 CEST	192.168.2.5	1.1.1.1	0x7853	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.286196947 CEST	192.168.2.5	1.1.1.1	0x326d	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:14.403439045 CEST	192.168.2.5	1.1.1.1	0xeccb	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.404325008 CEST	192.168.2.5	1.1.1.1	0xc5fc	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:14.410305023 CEST	192.168.2.5	1.1.1.1	0xb279	Standard query (0)	track.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.411077976 CEST	192.168.2.5	1.1.1.1	0x2e3b	Standard query (0)	track.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:14.416135073 CEST	192.168.2.5	1.1.1.1	0x2c49	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.416135073 CEST	192.168.2.5	1.1.1.1	0xee3f	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:15.179971933 CEST	192.168.2.5	1.1.1.1	0xd550	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.180129051 CEST	192.168.2.5	1.1.1.1	0x7767	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:15.396543980 CEST	192.168.2.5	1.1.1.1	0xb16d	Standard query (0)	chat.docusign.net	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.396752119 CEST	192.168.2.5	1.1.1.1	0x3c7e	Standard query (0)	chat.docusign.net	65	IN (0x0001)	false
Apr 16, 2024 19:44:18.320168018 CEST	192.168.2.5	1.1.1.1	0x5518	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:18.320255995 CEST	192.168.2.5	1.1.1.1	0xd250	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:19.301635027 CEST	192.168.2.5	1.1.1.1	0x706d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.301790953 CEST	192.168.2.5	1.1.1.1	0x9f8f	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:24.387820005 CEST	192.168.2.5	1.1.1.1	0x9365	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Apr 16, 2024 19:44:24.387820005 CEST	192.168.2.5	1.1.1.1	0xb0ef	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 19:42:54.765372038 CEST	1.1.1.1	192.168.2.5	0x6739	No error (0)	na3.docusign.net	na3.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:54.880942106 CEST	1.1.1.1	192.168.2.5	0x342e	No error (0)	na3.docusign.net	na3.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:56.944029093 CEST	1.1.1.1	192.168.2.5	0xff60	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:56.944163084 CEST	1.1.1.1	192.168.2.5	0x7099	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.959033966 CEST	1.1.1.1	192.168.2.5	0x4259	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:56.960366964 CEST	1.1.1.1	192.168.2.5	0xfd9f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 19:42:57.734934092 CEST	1.1.1.1	192.168.2.5	0x9b26	No error (0)	na3.docusign.net	na3.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:57.854285002 CEST	1.1.1.1	192.168.2.5	0xcd49	No error (0)	na3.docusign.net	na3.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:57.962866068 CEST	1.1.1.1	192.168.2.5	0x989f	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:57.964169979 CEST	1.1.1.1	192.168.2.5	0x9678	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:42:59.704410076 CEST	1.1.1.1	192.168.2.5	0xe0c	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:59.704410076 CEST	1.1.1.1	192.168.2.5	0xe0c	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:59.704410076 CEST	1.1.1.1	192.168.2.5	0xe0c	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:42:59.704410076 CEST	1.1.1.1	192.168.2.5	0xe0c	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:00.295461893 CEST	1.1.1.1	192.168.2.5	0x7d1b	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:00.295461893 CEST	1.1.1.1	192.168.2.5	0x7d1b	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:00.295461893 CEST	1.1.1.1	192.168.2.5	0x7d1b	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:00.295461893 CEST	1.1.1.1	192.168.2.5	0x7d1b	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:07.230892897 CEST	1.1.1.1	192.168.2.5	0xe3d5	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:07.230937958 CEST	1.1.1.1	192.168.2.5	0x201f	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:08.570724010 CEST	1.1.1.1	192.168.2.5	0xd50c	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:08.571736097 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:08.571736097 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:08.571736097 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.89	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:08.571736097 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:08.571736097 CEST	1.1.1.1	192.168.2.5	0x17a3	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.150500059 CEST	1.1.1.1	192.168.2.5	0x29da	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:09.150500059 CEST	1.1.1.1	192.168.2.5	0x29da	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.800206900 CEST	1.1.1.1	192.168.2.5	0xd6ee	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:09.800220013 CEST	1.1.1.1	192.168.2.5	0x784e	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843225956 CEST	1.1.1.1	192.168.2.5	0x554b	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843225956 CEST	1.1.1.1	192.168.2.5	0x554b	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.138.106.48	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843225956 CEST	1.1.1.1	192.168.2.5	0x554b	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.138.106.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843225956 CEST	1.1.1.1	192.168.2.5	0x554b	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.138.106.44	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843225956 CEST	1.1.1.1	192.168.2.5	0x554b	No error (0)	d3orhvfyxudxxq.cloudfront.net		108.138.106.75	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:09.843399048 CEST	1.1.1.1	192.168.2.5	0xece9	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.037698984 CEST	1.1.1.1	192.168.2.5	0xa4fa	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 16, 2024 19:43:11.038392067 CEST	1.1.1.1	192.168.2.5	0x57d5	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.038392067 CEST	1.1.1.1	192.168.2.5	0x57d5	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.038852930 CEST	1.1.1.1	192.168.2.5	0xfe8e	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039156914 CEST	1.1.1.1	192.168.2.5	0x24ae	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039156914 CEST	1.1.1.1	192.168.2.5	0x24ae	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		44.234.203.160	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039156914 CEST	1.1.1.1	192.168.2.5	0x24ae	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039156914 CEST	1.1.1.1	192.168.2.5	0x24ae	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039442062 CEST	1.1.1.1	192.168.2.5	0x85f2	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039442062 CEST	1.1.1.1	192.168.2.5	0x85f2	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.163.210.43	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039442062 CEST	1.1.1.1	192.168.2.5	0x85f2	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.039442062 CEST	1.1.1.1	192.168.2.5	0x85f2	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.040982962 CEST	1.1.1.1	192.168.2.5	0xc63e	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.041409969 CEST	1.1.1.1	192.168.2.5	0x16bf	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.089392900 CEST	1.1.1.1	192.168.2.5	0xa7e	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.626060009 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.626060009 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.628150940 CEST	1.1.1.1	192.168.2.5	0xb0de	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.628150940 CEST	1.1.1.1	192.168.2.5	0xb0de	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.628150940 CEST	1.1.1.1	192.168.2.5	0xb0de	No error (0)	p01k.hs.eloqua.com		192.29.14.118	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.894926071 CEST	1.1.1.1	192.168.2.5	0x4c7e	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.894942999 CEST	1.1.1.1	192.168.2.5	0x29b5	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:11.894942999 CEST	1.1.1.1	192.168.2.5	0x29b5	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		44.234.203.160	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.894942999 CEST	1.1.1.1	192.168.2.5	0x29b5	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.894942999 CEST	1.1.1.1	192.168.2.5	0x29b5	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:11.900427103 CEST	1.1.1.1	192.168.2.5	0x83fe	No error (0)	logx.optimizely.com		34.111.140.246	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.062850952 CEST	1.1.1.1	192.168.2.5	0xf6ca	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.062850952 CEST	1.1.1.1	192.168.2.5	0xf6ca	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.062850952 CEST	1.1.1.1	192.168.2.5	0xf6ca	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.163.210.43	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.062850952 CEST	1.1.1.1	192.168.2.5	0xf6ca	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.062876940 CEST	1.1.1.1	192.168.2.5	0xeb98	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.159033060 CEST	1.1.1.1	192.168.2.5	0x69c0	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 16, 2024 19:43:12.161041975 CEST	1.1.1.1	192.168.2.5	0x2613	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.161041975 CEST	1.1.1.1	192.168.2.5	0x2613	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.204636097 CEST	1.1.1.1	192.168.2.5	0x1890	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.204636097 CEST	1.1.1.1	192.168.2.5	0x1890	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.204776049 CEST	1.1.1.1	192.168.2.5	0xfb45	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:12.800825119 CEST	1.1.1.1	192.168.2.5	0x55f7	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.800825119 CEST	1.1.1.1	192.168.2.5	0x55f7	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.802469015 CEST	1.1.1.1	192.168.2.5	0x8464	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:12.952852964 CEST	1.1.1.1	192.168.2.5	0x9b67	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.952852964 CEST	1.1.1.1	192.168.2.5	0x9b67	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.952852964 CEST	1.1.1.1	192.168.2.5	0x9b67	No error (0)	p01k.hs.eloqua.com		192.29.14.118	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:12.952902079 CEST	1.1.1.1	192.168.2.5	0x2a25	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.952902079 CEST	1.1.1.1	192.168.2.5	0x2a25	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.981858969 CEST	1.1.1.1	192.168.2.5	0x624d	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:12.982933998 CEST	1.1.1.1	192.168.2.5	0x8e2f	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		52.200.95.225	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		44.217.99.30	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		34.197.111.80	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		52.5.72.128	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		3.213.194.231	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.229594946 CEST	1.1.1.1	192.168.2.5	0x7d66	No error (0)	tags.srv.stackadapt.com		35.169.250.226	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236907959 CEST	1.1.1.1	192.168.2.5	0xaced	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.236974001 CEST	1.1.1.1	192.168.2.5	0x8c2a	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.243894100 CEST	1.1.1.1	192.168.2.5	0xef46	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.243894100 CEST	1.1.1.1	192.168.2.5	0xef46	No error (0)	scontent.xx.fbcdn.net		31.13.65.7	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.244369030 CEST	1.1.1.1	192.168.2.5	0x5e84	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.245263100 CEST	1.1.1.1	192.168.2.5	0xdf90	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.247730017 CEST	1.1.1.1	192.168.2.5	0x8791	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.249392033 CEST	1.1.1.1	192.168.2.5	0xaf25	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.249392033 CEST	1.1.1.1	192.168.2.5	0xaf25	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.249475002 CEST	1.1.1.1	192.168.2.5	0x3ddc	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.250365973 CEST	1.1.1.1	192.168.2.5	0xe88f	No error (0)	tag.demandbase.com		18.160.10.89	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.250365973 CEST	1.1.1.1	192.168.2.5	0xe88f	No error (0)	tag.demandbase.com		18.160.10.76	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.250365973 CEST	1.1.1.1	192.168.2.5	0xe88f	No error (0)	tag.demandbase.com		18.160.10.40	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.250365973 CEST	1.1.1.1	192.168.2.5	0xe88f	No error (0)	tag.demandbase.com		18.160.10.55	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.887342930 CEST	1.1.1.1	192.168.2.5	0xe8c1	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 16, 2024 19:43:14.888468981 CEST	1.1.1.1	192.168.2.5	0xd4bf	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.890129089 CEST	1.1.1.1	192.168.2.5	0xe2fe	No error (0)	googleads.g.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.890129089 CEST	1.1.1.1	192.168.2.5	0xe2fe	No error (0)	googleads.g.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.890129089 CEST	1.1.1.1	192.168.2.5	0xe2fe	No error (0)	googleads.g.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.890129089 CEST	1.1.1.1	192.168.2.5	0xe2fe	No error (0)	googleads.g.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.899863005 CEST	1.1.1.1	192.168.2.5	0x6899	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:14.899863005 CEST	1.1.1.1	192.168.2.5	0x6899	No error (0)	docusign.netlifyglobalcdn.com		54.156.13.12	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:14.899863005 CEST	1.1.1.1	192.168.2.5	0x6899	No error (0)	docusign.netlifyglobalcdn.com		3.212.91.35	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.152498960 CEST	1.1.1.1	192.168.2.5	0x7a29	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:15.176764011 CEST	1.1.1.1	192.168.2.5	0x3031	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:15.176764011 CEST	1.1.1.1	192.168.2.5	0x3031	No error (0)	s.ml-attr.com.pxlsrv.net		68.67.153.60	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.391130924 CEST	1.1.1.1	192.168.2.5	0x9fde	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:15.398551941 CEST	1.1.1.1	192.168.2.5	0xf307	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:15.398551941 CEST	1.1.1.1	192.168.2.5	0xf307	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:15.398684025 CEST	1.1.1.1	192.168.2.5	0xaec2	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:15.398684025 CEST	1.1.1.1	192.168.2.5	0xaec2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503226042 CEST	1.1.1.1	192.168.2.5	0x5c9	No error (0)	analytics.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.503992081 CEST	1.1.1.1	192.168.2.5	0xaca8	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.510294914 CEST	1.1.1.1	192.168.2.5	0x5ffd	No error (0)	stats.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.510294914 CEST	1.1.1.1	192.168.2.5	0x5ffd	No error (0)	stats.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.510294914 CEST	1.1.1.1	192.168.2.5	0x5ffd	No error (0)	stats.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.510294914 CEST	1.1.1.1	192.168.2.5	0x5ffd	No error (0)	stats.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.571652889 CEST	1.1.1.1	192.168.2.5	0xc005	No error (0)	api.company-target.com		3.161.150.40	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.571652889 CEST	1.1.1.1	192.168.2.5	0xc005	No error (0)	api.company-target.com		3.161.150.129	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.571652889 CEST	1.1.1.1	192.168.2.5	0xc005	No error (0)	api.company-target.com		3.161.150.37	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.571652889 CEST	1.1.1.1	192.168.2.5	0xc005	No error (0)	api.company-target.com		3.161.150.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.660437107 CEST	1.1.1.1	192.168.2.5	0x2207	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.661899090 CEST	1.1.1.1	192.168.2.5	0x10de	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.661899090 CEST	1.1.1.1	192.168.2.5	0x10de	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.661899090 CEST	1.1.1.1	192.168.2.5	0x10de	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.662580013 CEST	1.1.1.1	192.168.2.5	0xfb20	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.662580013 CEST	1.1.1.1	192.168.2.5	0xfb20	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.666764021 CEST	1.1.1.1	192.168.2.5	0xc9b3	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.667376041 CEST	1.1.1.1	192.168.2.5	0x9eb8	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.667376041 CEST	1.1.1.1	192.168.2.5	0x9eb8	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.670049906 CEST	1.1.1.1	192.168.2.5	0x30ef	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.683912039 CEST	1.1.1.1	192.168.2.5	0x5ab4	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.719280005 CEST	1.1.1.1	192.168.2.5	0xdb96	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:16.743371010 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.743371010 CEST	1.1.1.1	192.168.2.5	0xf4d3	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.743458986 CEST	1.1.1.1	192.168.2.5	0x7fc	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.743458986 CEST	1.1.1.1	192.168.2.5	0x7fc	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:16.745039940 CEST	1.1.1.1	192.168.2.5	0x2fe6	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	support.docusign.com	support.docusign.com.00d300000000bs4eai.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	support.docusign.com.00d300000000bs4eai.live.siteforce.com	1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	1p.edge2.salesforce.com	virginia-1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	virginia-1p.edge2.salesforce.com	ia4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	ia4.edge2.salesforce.com		13.109.180.8	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	ia4.edge2.salesforce.com		13.109.180.9	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.562675953 CEST	1.1.1.1	192.168.2.5	0x70ac	No error (0)	ia4.edge2.salesforce.com		13.109.180.7	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.592195988 CEST	1.1.1.1	192.168.2.5	0xe31c	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.592195988 CEST	1.1.1.1	192.168.2.5	0xe31c	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594305038 CEST	1.1.1.1	192.168.2.5	0xd70	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.233.2.13	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.226.174.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.594340086 CEST	1.1.1.1	192.168.2.5	0xe53c	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.595046043 CEST	1.1.1.1	192.168.2.5	0x1e9	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.599030018 CEST	1.1.1.1	192.168.2.5	0x61e8	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.600179911 CEST	1.1.1.1	192.168.2.5	0x2eb4	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.616185904 CEST	1.1.1.1	192.168.2.5	0x161	No error (0)	support.docusign.com	support.docusign.com.00d300000000bs4eai.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.616185904 CEST	1.1.1.1	192.168.2.5	0x161	No error (0)	support.docusign.com.00d300000000bs4eai.live.siteforce.com	1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.616185904 CEST	1.1.1.1	192.168.2.5	0x161	No error (0)	1p.edge2.salesforce.com	virginia-1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.616185904 CEST	1.1.1.1	192.168.2.5	0x161	No error (0)	virginia-1p.edge2.salesforce.com	ia4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.812182903 CEST	1.1.1.1	192.168.2.5	0x2130	No error (0)	tag-logger.demandbase.com		18.245.124.24	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.812182903 CEST	1.1.1.1	192.168.2.5	0x2130	No error (0)	tag-logger.demandbase.com		18.245.124.68	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.812182903 CEST	1.1.1.1	192.168.2.5	0x2130	No error (0)	tag-logger.demandbase.com		18.245.124.73	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.812182903 CEST	1.1.1.1	192.168.2.5	0x2130	No error (0)	tag-logger.demandbase.com		18.245.124.83	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.893168926 CEST	1.1.1.1	192.168.2.5	0x9b7c	No error (0)	stats.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.893168926 CEST	1.1.1.1	192.168.2.5	0x9b7c	No error (0)	stats.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.893168926 CEST	1.1.1.1	192.168.2.5	0x9b7c	No error (0)	stats.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.893168926 CEST	1.1.1.1	192.168.2.5	0x9b7c	No error (0)	stats.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		52.200.95.225	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		34.197.111.80	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		3.213.194.231	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		44.217.99.30	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		52.5.72.128	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.894877911 CEST	1.1.1.1	192.168.2.5	0x208f	No error (0)	tags.srv.stackadapt.com		35.169.250.226	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.902003050 CEST	1.1.1.1	192.168.2.5	0x21c7	No error (0)	api.company-target.com		3.161.150.40	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.902003050 CEST	1.1.1.1	192.168.2.5	0x21c7	No error (0)	api.company-target.com		3.161.150.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.902003050 CEST	1.1.1.1	192.168.2.5	0x21c7	No error (0)	api.company-target.com		3.161.150.129	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.902003050 CEST	1.1.1.1	192.168.2.5	0x21c7	No error (0)	api.company-target.com		3.161.150.37	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.906219006 CEST	1.1.1.1	192.168.2.5	0xe572	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.906219006 CEST	1.1.1.1	192.168.2.5	0xe572	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.906219006 CEST	1.1.1.1	192.168.2.5	0xe572	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.907684088 CEST	1.1.1.1	192.168.2.5	0x7598	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.907684088 CEST	1.1.1.1	192.168.2.5	0x7598	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:17.909095049 CEST	1.1.1.1	192.168.2.5	0x4e25	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:17.913090944 CEST	1.1.1.1	192.168.2.5	0xb684	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136173010 CEST	1.1.1.1	192.168.2.5	0xbce8	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136173010 CEST	1.1.1.1	192.168.2.5	0xbce8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.160.18.33	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136173010 CEST	1.1.1.1	192.168.2.5	0xbce8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.160.18.96	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136173010 CEST	1.1.1.1	192.168.2.5	0xbce8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.160.18.4	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136173010 CEST	1.1.1.1	192.168.2.5	0xbce8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.160.18.68	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.136214972 CEST	1.1.1.1	192.168.2.5	0xecfa	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.283041954 CEST	1.1.1.1	192.168.2.5	0xa985	No error (0)	segments.company-target.com		3.161.193.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.283041954 CEST	1.1.1.1	192.168.2.5	0xa985	No error (0)	segments.company-target.com		3.161.193.71	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.283041954 CEST	1.1.1.1	192.168.2.5	0xa985	No error (0)	segments.company-target.com		3.161.193.38	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.283041954 CEST	1.1.1.1	192.168.2.5	0xa985	No error (0)	segments.company-target.com		3.161.193.63	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.298347950 CEST	1.1.1.1	192.168.2.5	0xb7f3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.298854113 CEST	1.1.1.1	192.168.2.5	0xfe1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.145.107.179	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.215.83.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.383322954 CEST	1.1.1.1	192.168.2.5	0x9a5d	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.384066105 CEST	1.1.1.1	192.168.2.5	0x2d06	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.453824997 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.453824997 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.26	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.453824997 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.75	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.453824997 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.118	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.453824997 CEST	1.1.1.1	192.168.2.5	0x6fbd	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.129	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.454358101 CEST	1.1.1.1	192.168.2.5	0xe7e2	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:18.525978088 CEST	1.1.1.1	192.168.2.5	0x88df	No error (0)	tag-logger.demandbase.com		13.32.151.16	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.525978088 CEST	1.1.1.1	192.168.2.5	0x88df	No error (0)	tag-logger.demandbase.com		13.32.151.41	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.525978088 CEST	1.1.1.1	192.168.2.5	0x88df	No error (0)	tag-logger.demandbase.com		13.32.151.88	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:18.525978088 CEST	1.1.1.1	192.168.2.5	0x88df	No error (0)	tag-logger.demandbase.com		13.32.151.62	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.044220924 CEST	1.1.1.1	192.168.2.5	0x1f13	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.044220924 CEST	1.1.1.1	192.168.2.5	0x1f13	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.044265985 CEST	1.1.1.1	192.168.2.5	0x5741	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093530893 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093530893 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093530893 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093530893 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093530893 CEST	1.1.1.1	192.168.2.5	0x77cf	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.093975067 CEST	1.1.1.1	192.168.2.5	0x66f2	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.094628096 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.095211029 CEST	1.1.1.1	192.168.2.5	0x1038	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.095211029 CEST	1.1.1.1	192.168.2.5	0x1038	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.095251083 CEST	1.1.1.1	192.168.2.5	0x1458	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.095251083 CEST	1.1.1.1	192.168.2.5	0x1458	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.097590923 CEST	1.1.1.1	192.168.2.5	0xba90	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.111046076 CEST	1.1.1.1	192.168.2.5	0xc354	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.111046076 CEST	1.1.1.1	192.168.2.5	0xc354	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.111653090 CEST	1.1.1.1	192.168.2.5	0x2247	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.269818068 CEST	1.1.1.1	192.168.2.5	0xd3b9	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.274266005 CEST	1.1.1.1	192.168.2.5	0x42fa	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.274266005 CEST	1.1.1.1	192.168.2.5	0x42fa	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.314294100 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	segments.company-target.com		3.161.193.119	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.314294100 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	segments.company-target.com		3.161.193.38	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.314294100 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	segments.company-target.com		3.161.193.71	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.314294100 CEST	1.1.1.1	192.168.2.5	0x566c	No error (0)	segments.company-target.com		3.161.193.63	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.315006971 CEST	1.1.1.1	192.168.2.5	0xbfd7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.315018892 CEST	1.1.1.1	192.168.2.5	0x6a58	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.316195011 CEST	1.1.1.1	192.168.2.5	0x103c	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.316195011 CEST	1.1.1.1	192.168.2.5	0x103c	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.75	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.316195011 CEST	1.1.1.1	192.168.2.5	0x103c	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.129	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.316195011 CEST	1.1.1.1	192.168.2.5	0x103c	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.118	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.316195011 CEST	1.1.1.1	192.168.2.5	0x103c	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.160.10.26	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317275047 CEST	1.1.1.1	192.168.2.5	0xd3dd	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.317878008 CEST	1.1.1.1	192.168.2.5	0x4e1f	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.320523977 CEST	1.1.1.1	192.168.2.5	0x9e2b	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.856089115 CEST	1.1.1.1	192.168.2.5	0x6070	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:21.856089115 CEST	1.1.1.1	192.168.2.5	0x6070	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:21.856183052 CEST	1.1.1.1	192.168.2.5	0x26e7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:23.591077089 CEST	1.1.1.1	192.168.2.5	0xc325	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:23.591077089 CEST	1.1.1.1	192.168.2.5	0xc325	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:24.399784088 CEST	1.1.1.1	192.168.2.5	0x4261	No error (0)	cdn4.mxpnl.com		35.186.235.23	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:24.399784088 CEST	1.1.1.1	192.168.2.5	0x4261	No error (0)	cdn4.mxpnl.com		130.211.5.208	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.106293917 CEST	1.1.1.1	192.168.2.5	0xe910	No error (0)	support.docusign.com	support.docusign.com.00d300000000bs4eai.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.106293917 CEST	1.1.1.1	192.168.2.5	0xe910	No error (0)	support.docusign.com.00d300000000bs4eai.live.siteforce.com	1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.106293917 CEST	1.1.1.1	192.168.2.5	0xe910	No error (0)	1p.edge2.salesforce.com	virginia-1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.106293917 CEST	1.1.1.1	192.168.2.5	0xe910	No error (0)	virginia-1p.edge2.salesforce.com	ia4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	support.docusign.com	support.docusign.com.00d300000000bs4eai.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	support.docusign.com.00d300000000bs4eai.live.siteforce.com	1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	1p.edge2.salesforce.com	virginia-1p.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	virginia-1p.edge2.salesforce.com	ia4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	ia4.edge2.salesforce.com		13.109.180.6	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	ia4.edge2.salesforce.com		13.109.180.7	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.134577036 CEST	1.1.1.1	192.168.2.5	0x6730	No error (0)	ia4.edge2.salesforce.com		13.109.180.9	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.845833063 CEST	1.1.1.1	192.168.2.5	0x1466	No error (0)	api-js.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.845833063 CEST	1.1.1.1	192.168.2.5	0x1466	No error (0)	api-js.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.845833063 CEST	1.1.1.1	192.168.2.5	0x1466	No error (0)	api-js.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:27.845833063 CEST	1.1.1.1	192.168.2.5	0x1466	No error (0)	api-js.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	d1nie5ipy0d64w.cloudfront.net		13.32.151.55	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	d1nie5ipy0d64w.cloudfront.net		13.32.151.25	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	d1nie5ipy0d64w.cloudfront.net		13.32.151.13	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074018955 CEST	1.1.1.1	192.168.2.5	0x7bfd	No error (0)	d1nie5ipy0d64w.cloudfront.net		13.32.151.117	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074062109 CEST	1.1.1.1	192.168.2.5	0x9571	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.074062109 CEST	1.1.1.1	192.168.2.5	0x9571	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.174786091 CEST	1.1.1.1	192.168.2.5	0xd12e	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.175343990 CEST	1.1.1.1	192.168.2.5	0x7aa3	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.175343990 CEST	1.1.1.1	192.168.2.5	0x7aa3	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.32.27.207	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.175343990 CEST	1.1.1.1	192.168.2.5	0x7aa3	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		35.163.227.10	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.175343990 CEST	1.1.1.1	192.168.2.5	0x7aa3	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.24.171.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.676863909 CEST	1.1.1.1	192.168.2.5	0xca52	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.676863909 CEST	1.1.1.1	192.168.2.5	0xca52	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	d1nie5ipy0d64w.cloudfront.net		3.163.115.26	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	d1nie5ipy0d64w.cloudfront.net		3.163.115.34	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	d1nie5ipy0d64w.cloudfront.net		3.163.115.9	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.677074909 CEST	1.1.1.1	192.168.2.5	0x8ce0	No error (0)	d1nie5ipy0d64w.cloudfront.net		3.163.115.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.815412998 CEST	1.1.1.1	192.168.2.5	0xea8	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.815412998 CEST	1.1.1.1	192.168.2.5	0xea8	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:28.816407919 CEST	1.1.1.1	192.168.2.5	0xab18	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.876367092 CEST	1.1.1.1	192.168.2.5	0x3da8	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.877373934 CEST	1.1.1.1	192.168.2.5	0x185f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	docusign.file.force.com	na210.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	na210.salesforce.com	na210-ia5.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	na210-ia5.salesforce.com	na210-ia5.ia5.r.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.65.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.66.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.929728985 CEST	1.1.1.1	192.168.2.5	0x39ed	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.67.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:29.938875914 CEST	1.1.1.1	192.168.2.5	0x7baa	No error (0)	docusign.file.force.com	na210.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:29.938875914 CEST	1.1.1.1	192.168.2.5	0x7baa	No error (0)	na210.salesforce.com	na210-ia5.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:29.938875914 CEST	1.1.1.1	192.168.2.5	0x7baa	No error (0)	na210-ia5.salesforce.com	na210-ia5.ia5.r.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.581253052 CEST	1.1.1.1	192.168.2.5	0xb771	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.36	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.581253052 CEST	1.1.1.1	192.168.2.5	0xb771	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.72	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.581253052 CEST	1.1.1.1	192.168.2.5	0xb771	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.581253052 CEST	1.1.1.1	192.168.2.5	0xb771	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.736767054 CEST	1.1.1.1	192.168.2.5	0x9e1	No error (0)	docusign.lightning.force.com	na210.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.736767054 CEST	1.1.1.1	192.168.2.5	0x9e1	No error (0)	na210.force.com	na210-ia5.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.736767054 CEST	1.1.1.1	192.168.2.5	0x9e1	No error (0)	na210-ia5.force.com	na210-ia5.ia5.r.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	docusign.lightning.force.com	na210.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	na210.force.com	na210-ia5.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	na210-ia5.force.com	na210-ia5.ia5.r.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	na210-ia5.ia5.r.force.com		13.110.252.95	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	na210-ia5.ia5.r.force.com		13.110.252.223	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.748876095 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	na210-ia5.ia5.r.force.com		13.110.254.95	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.974435091 CEST	1.1.1.1	192.168.2.5	0x8470	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:30.975059032 CEST	1.1.1.1	192.168.2.5	0x33b5	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:30.975059032 CEST	1.1.1.1	192.168.2.5	0x33b5	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.271373987 CEST	1.1.1.1	192.168.2.5	0x1f64	No error (0)	docusign.file.force.com	na210.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.271373987 CEST	1.1.1.1	192.168.2.5	0x1f64	No error (0)	na210.salesforce.com	na210-ia5.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.271373987 CEST	1.1.1.1	192.168.2.5	0x1f64	No error (0)	na210-ia5.salesforce.com	na210-ia5.ia5.r.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	docusign.file.force.com	na210.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	na210.salesforce.com	na210-ia5.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	na210-ia5.salesforce.com	na210-ia5.ia5.r.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.65.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.66.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.272088051 CEST	1.1.1.1	192.168.2.5	0xae01	No error (0)	na210-ia5.ia5.r.salesforce.com		13.110.67.234	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.273437023 CEST	1.1.1.1	192.168.2.5	0x966	No error (0)	api-js.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.273437023 CEST	1.1.1.1	192.168.2.5	0x966	No error (0)	api-js.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.273437023 CEST	1.1.1.1	192.168.2.5	0x966	No error (0)	api-js.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.273437023 CEST	1.1.1.1	192.168.2.5	0x966	No error (0)	api-js.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	docusign.my.salesforce.com	na210.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	na210.my.salesforce.com	na210-ia5.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	na210-ia5.my.salesforce.com	na210-ia5.ia5.r.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.40.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.42.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.433250904 CEST	1.1.1.1	192.168.2.5	0x8a17	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.67.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.472160101 CEST	1.1.1.1	192.168.2.5	0xba92	No error (0)	docusign.my.salesforce.com	na210.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.472160101 CEST	1.1.1.1	192.168.2.5	0xba92	No error (0)	na210.my.salesforce.com	na210-ia5.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.472160101 CEST	1.1.1.1	192.168.2.5	0xba92	No error (0)	na210-ia5.my.salesforce.com	na210-ia5.ia5.r.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.488241911 CEST	1.1.1.1	192.168.2.5	0xd2b9	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.488241911 CEST	1.1.1.1	192.168.2.5	0xd2b9	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.72	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.488241911 CEST	1.1.1.1	192.168.2.5	0xd2b9	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.36	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.488241911 CEST	1.1.1.1	192.168.2.5	0xd2b9	No error (0)	api-cdn.usw2.pure.cloud		3.161.150.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.511898041 CEST	1.1.1.1	192.168.2.5	0xdbb4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.512429953 CEST	1.1.1.1	192.168.2.5	0x42fb	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.512429953 CEST	1.1.1.1	192.168.2.5	0x42fb	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	47616-16.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.234.212.207	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.234.125.17	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.232.192.42	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.214.187.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.88.100.73	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.223.222.241	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.89.40.177	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.975310087 CEST	1.1.1.1	192.168.2.5	0x481	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.197.53.17	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:31.978627920 CEST	1.1.1.1	192.168.2.5	0x7aec	No error (0)	47616-16.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.279248953 CEST	1.1.1.1	192.168.2.5	0x469c	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.279248953 CEST	1.1.1.1	192.168.2.5	0x469c	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.24.171.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.279248953 CEST	1.1.1.1	192.168.2.5	0x469c	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		35.163.227.10	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.279248953 CEST	1.1.1.1	192.168.2.5	0x469c	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.32.27.207	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.280853987 CEST	1.1.1.1	192.168.2.5	0xc5c0	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.541524887 CEST	1.1.1.1	192.168.2.5	0xdc74	No error (0)	docusign.my.salesforce.com	na210.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.541524887 CEST	1.1.1.1	192.168.2.5	0xdc74	No error (0)	na210.my.salesforce.com	na210-ia5.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.541524887 CEST	1.1.1.1	192.168.2.5	0xdc74	No error (0)	na210-ia5.my.salesforce.com	na210-ia5.ia5.r.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	docusign.my.salesforce.com	na210.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	na210.my.salesforce.com	na210-ia5.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	na210-ia5.my.salesforce.com	na210-ia5.ia5.r.my.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.40.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.42.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:32.542290926 CEST	1.1.1.1	192.168.2.5	0x7a5f	No error (0)	na210-ia5.ia5.r.my.salesforce.com		13.110.67.235	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:34.018295050 CEST	1.1.1.1	192.168.2.5	0x5ec5	No error (0)	api.usw2.pure.cloud		3.161.150.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:34.018295050 CEST	1.1.1.1	192.168.2.5	0x5ec5	No error (0)	api.usw2.pure.cloud		3.161.150.72	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:34.018295050 CEST	1.1.1.1	192.168.2.5	0x5ec5	No error (0)	api.usw2.pure.cloud		3.161.150.36	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:34.018295050 CEST	1.1.1.1	192.168.2.5	0x5ec5	No error (0)	api.usw2.pure.cloud		3.161.150.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:36.702126980 CEST	1.1.1.1	192.168.2.5	0xa8e2	No error (0)	api.usw2.pure.cloud		3.161.150.72	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:36.702126980 CEST	1.1.1.1	192.168.2.5	0xa8e2	No error (0)	api.usw2.pure.cloud		3.161.150.36	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:36.702126980 CEST	1.1.1.1	192.168.2.5	0xa8e2	No error (0)	api.usw2.pure.cloud		3.161.150.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:36.702126980 CEST	1.1.1.1	192.168.2.5	0xa8e2	No error (0)	api.usw2.pure.cloud		3.161.150.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.583591938 CEST	1.1.1.1	192.168.2.5	0x3485	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.812968969 CEST	1.1.1.1	192.168.2.5	0xb228	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:37.813941002 CEST	1.1.1.1	192.168.2.5	0x4691	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:37.813941002 CEST	1.1.1.1	192.168.2.5	0x4691	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.338004112 CEST	1.1.1.1	192.168.2.5	0x1f90	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.338004112 CEST	1.1.1.1	192.168.2.5	0x1f90	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.338330984 CEST	1.1.1.1	192.168.2.5	0xf06	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.338330984 CEST	1.1.1.1	192.168.2.5	0xf06	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.338330984 CEST	1.1.1.1	192.168.2.5	0xf06	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.906822920 CEST	1.1.1.1	192.168.2.5	0x91a5	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.907547951 CEST	1.1.1.1	192.168.2.5	0xb50b	No error (0)	apps.usw2.pure.cloud	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.907547951 CEST	1.1.1.1	192.168.2.5	0xb50b	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.32.27.207	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.907547951 CEST	1.1.1.1	192.168.2.5	0xb50b	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		35.163.227.10	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.907547951 CEST	1.1.1.1	192.168.2.5	0xb50b	No error (0)	nginx-alb-routed-1183689584.us-west-2.elb.amazonaws.com		52.24.171.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.969541073 CEST	1.1.1.1	192.168.2.5	0xa9ab	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.969541073 CEST	1.1.1.1	192.168.2.5	0xa9ab	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.969541073 CEST	1.1.1.1	192.168.2.5	0xa9ab	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:43:38.969985962 CEST	1.1.1.1	192.168.2.5	0x5835	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:43:38.969985962 CEST	1.1.1.1	192.168.2.5	0x5835	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:02.721503019 CEST	1.1.1.1	192.168.2.5	0xc09f	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.768008947 CEST	1.1.1.1	192.168.2.5	0x97a	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:08.832957029 CEST	1.1.1.1	192.168.2.5	0xa946	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939167976 CEST	1.1.1.1	192.168.2.5	0x53ae	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939189911 CEST	1.1.1.1	192.168.2.5	0xe692	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939189911 CEST	1.1.1.1	192.168.2.5	0xe692	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.89	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939189911 CEST	1.1.1.1	192.168.2.5	0xe692	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.50	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939189911 CEST	1.1.1.1	192.168.2.5	0xe692	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.28	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:08.939189911 CEST	1.1.1.1	192.168.2.5	0xe692	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.165.83.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:10.396891117 CEST	1.1.1.1	192.168.2.5	0x103b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:10.396891117 CEST	1.1.1.1	192.168.2.5	0x103b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.311113119 CEST	1.1.1.1	192.168.2.5	0x2ee5	No error (0)	videos.ctfassets.net		18.165.83.72	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.311113119 CEST	1.1.1.1	192.168.2.5	0x2ee5	No error (0)	videos.ctfassets.net		18.165.83.54	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.311113119 CEST	1.1.1.1	192.168.2.5	0x2ee5	No error (0)	videos.ctfassets.net		18.165.83.34	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.311113119 CEST	1.1.1.1	192.168.2.5	0x2ee5	No error (0)	videos.ctfassets.net		18.165.83.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.647880077 CEST	1.1.1.1	192.168.2.5	0xfd03	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:11.647880077 CEST	1.1.1.1	192.168.2.5	0xfd03	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.647880077 CEST	1.1.1.1	192.168.2.5	0xfd03	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.3	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.647880077 CEST	1.1.1.1	192.168.2.5	0xfd03	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.32	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.647880077 CEST	1.1.1.1	192.168.2.5	0xfd03	No error (0)	d3orhvfyxudxxq.cloudfront.net		54.230.31.121	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:11.648576975 CEST	1.1.1.1	192.168.2.5	0x6a9	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:12.083072901 CEST	1.1.1.1	192.168.2.5	0xb016	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:12.084666014 CEST	1.1.1.1	192.168.2.5	0x315f	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:12.108534098 CEST	1.1.1.1	192.168.2.5	0xc539	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:12.108534098 CEST	1.1.1.1	192.168.2.5	0xc539	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:12.108534098 CEST	1.1.1.1	192.168.2.5	0xc539	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		44.234.203.160	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:12.108534098 CEST	1.1.1.1	192.168.2.5	0xc539	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:12.109853983 CEST	1.1.1.1	192.168.2.5	0x477e	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.390713930 CEST	1.1.1.1	192.168.2.5	0x326d	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.390728951 CEST	1.1.1.1	192.168.2.5	0x7853	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.390728951 CEST	1.1.1.1	192.168.2.5	0x7853	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.508605957 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.508605957 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.508605957 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		44.234.203.160	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.508605957 CEST	1.1.1.1	192.168.2.5	0xeccb	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:14.510716915 CEST	1.1.1.1	192.168.2.5	0xc5fc	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.516149044 CEST	1.1.1.1	192.168.2.5	0x2e3b	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.516149044 CEST	1.1.1.1	192.168.2.5	0x2e3b	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.520915985 CEST	1.1.1.1	192.168.2.5	0x2c49	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.522419930 CEST	1.1.1.1	192.168.2.5	0xee3f	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.579761982 CEST	1.1.1.1	192.168.2.5	0xb279	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.579761982 CEST	1.1.1.1	192.168.2.5	0xb279	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:14.579761982 CEST	1.1.1.1	192.168.2.5	0xb279	No error (0)	p01k.hs.eloqua.com		192.29.14.118	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		34.197.111.80	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		52.200.95.225	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		35.169.250.226	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		3.213.194.231	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		52.5.72.128	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.284624100 CEST	1.1.1.1	192.168.2.5	0xd550	No error (0)	tags.srv.stackadapt.com		44.217.99.30	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.501944065 CEST	1.1.1.1	192.168.2.5	0x3c7e	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:15.515747070 CEST	1.1.1.1	192.168.2.5	0xb16d	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:15.515747070 CEST	1.1.1.1	192.168.2.5	0xb16d	No error (0)	docusign.netlifyglobalcdn.com		3.212.91.35	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:15.515747070 CEST	1.1.1.1	192.168.2.5	0xb16d	No error (0)	docusign.netlifyglobalcdn.com		54.156.13.12	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:18.424777031 CEST	1.1.1.1	192.168.2.5	0x5518	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:19.407099009 CEST	1.1.1.1	192.168.2.5	0x706d	No error (0)	analytics.google.com		172.217.215.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:24.492902994 CEST	1.1.1.1	192.168.2.5	0xb0ef	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 16, 2024 19:44:24.506266117 CEST	1.1.1.1	192.168.2.5	0x9365	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 19:44:24.506266117 CEST	1.1.1.1	192.168.2.5	0x9365	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49721	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:42:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 17:42:57 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=134451 Date: Tue, 16 Apr 2024 17:42:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49727	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:42:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 17:42:58 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=134450 Date: Tue, 16 Apr 2024 17:42:58 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 17:42:58 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49735	35.190.25.25	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:42:59 UTC	1061	OUT	GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICJFODQxQUUzMzNGOThDOEMzMkI3Njg3ODg2RUE4REZGODQ4MzJGRkIxIiwiJGluaXRpYWxfcmVmZXJyaW5nX2RvbWFpbiI6ICIkZGlyZWN0IiwibXBfcGFnZSI6ICJuYTMuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiMzA0Y2NiZGUyNGQzYjE1ZmZlMmQ1ZGUzMGMxMGRhYjIifX0%3D&ip=1&_=1713289378799 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://na3.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://na3.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:00 UTC	579	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://na3.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:00 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:00 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49738	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:00 UTC	855	OUT	GET /track/?data=eyJldmVudCI6ICJtcF9wYWdlX3ZpZXciLCJwcm9wZXJ0aWVzIjogeyIkb3MiOiAiV2luZG93cyIsIiRicm93c2VyIjogIkNocm9tZSIsIiRzY3JlZW5faGVpZ2h0IjogMTAyNCwiJHNjcmVlbl93aWR0aCI6IDEyODAsIm1wX2xpYiI6ICJ3ZWIiLCJkaXN0aW5jdF9pZCI6ICJFODQxQUUzMzNGOThDOEMzMkI3Njg3ODg2RUE4REZGODQ4MzJGRkIxIiwiJGluaXRpYWxfcmVmZXJyaW5nX2RvbWFpbiI6ICIkZGlyZWN0IiwibXBfcGFnZSI6ICJuYTMuZG9jdXNpZ24ubmV0IiwibXBfYnJvd3NlciI6ICJDaHJvbWUiLCJtcF9wbGF0Zm9ybSI6ICJXaW5kb3dzIiwidG9rZW4iOiAiMzA0Y2NiZGUyNGQzYjE1ZmZlMmQ1ZGUzMGMxMGRhYjIifX0%3D&ip=1&_=1713289378799 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:00 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:00 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:00 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49746	18.165.83.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:09 UTC	680	OUT	GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:09 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8739 Connection: close Last-Modified: Thu, 04 Apr 2024 21:36:01 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 17:43:09 GMT Cache-Control: max-age=31536000 ETag: "e259d49ad1b22d7f61343b11e3d63454" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7bac70c3c5deda2f56c0a3aff53deab0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: zkShwa5E5c8KBKU2bLJOy-2L-DDhcAziPc90-btgGZjQqDz8mrXzCg== Age: 14600
2024-04-16 17:43:09 UTC	8739	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 14 00 00 02 4f 08 03 00 00 00 d2 63 62 23 00 00 01 b0 50 4c 54 45 4c 00 ff cb c2 ff ff 57 32 00 00 00 45 08 f4 ff ff ff 9b 79 ff a5 2b 98 e8 e0 fe 09 00 20 43 00 df f4 52 3f 57 05 f2 26 00 80 8b 65 f8 b9 a2 fb e9 df ff 6c 31 ff bc 9f ff 63 0b e5 e9 4c 4c d2 41 65 79 16 cc bb a9 ff 8f 21 b2 8f 60 ff 39 00 bf 13 00 40 5c 27 f5 54 0c ff 8b 61 ff df 4c 2c 05 00 10 48 00 ef 19 19 20 20 0b 06 1d 00 60 ab 91 ff 7c 49 ff 5d 27 f5 63 20 ff d1 c1 fc 5c 18 ff 74 46 f7 bc 36 7f 62 20 ff 30 00 9f 7f 79 9f 4c 49 60 49 04 f9 d1 b5 e5 a2 83 fa 60 21 13 80 2c 19 b2 aa df 79 40 ff d2 bf ff 96 74 f9 f4 ef ff f9 64 4c f3 f0 fe 32 30 40 be b6 ef dd d1 fe ae 93 fa df 9a b3 98 91 bf 0d 0c 10 65 60 80 c3 b6 ff b1 aa df eb Data Ascii: PNGIHDROcb#PLTELW2Ey+ CR?W&el1cLLAey!`9@\'TaL,H `\|I]'c \tF6b 0yLI`I`!,y@tdL20@e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49745	18.165.83.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:09 UTC	674	OUT	GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:09 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 207158 Connection: close Date: Mon, 15 Apr 2024 21:21:21 GMT Last-Modified: Fri, 05 Apr 2024 16:35:23 GMT ETag: "3ab004a1051b551cf461646929eaada0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 4ec656d2dfbb59cd7fab2ac94a540522.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: 3G_v_QkVlS3rPaqtgmnuocFXYruowGdms771dU0b1lFnhAeIzwrpuw== Age: 73309
2024-04-16 17:43:09 UTC	15990	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 28 00 00 04 a0 08 03 00 00 00 55 39 30 ba 00 00 02 f7 50 4c 54 45 ff ff ff 4c 00 ff 19 18 22 70 33 ff 4c 00 fd 4b 00 fa e9 e9 ea 49 00 f3 48 00 ef 4b 00 fc 4a 00 f7 f6 f6 f6 47 00 ec fa fa fa 45 00 e6 4a 00 f8 f3 f3 f3 46 00 ea 49 00 f5 ef ef f0 48 00 f1 eb eb eb e7 e7 e7 44 00 e2 ed ed ed 45 00 e8 e5 e5 e5 a2 7c fb 43 01 e0 e3 e3 e3 dd dd dd a2 7b fd db da db 35 34 3e df df df eb ea ed 6d 32 f9 e8 e7 eb 6f 6e 74 a5 81 fa e1 e1 e1 e6 e4 ec c6 c5 c8 42 01 dc a8 a8 ac 45 08 f4 41 01 d9 a4 7f fa a7 84 fa 2d 2b 38 8c 8b 90 a8 85 fa 27 26 2f 6c 32 f5 53 52 5a 4e 4d 55 9a 9a 9e e2 de ed a3 7d fd e9 e8 ee 4b a3 63 df d9 ee 6a 31 f2 40 01 d6 a7 84 fd 6d 32 f7 d2 c5 f1 61 60 67 a9 85 fc 6e 33 fb 69 31 f0 68 Data Ascii: PNGIHDR(U90PLTEL"p3LKIHKJGEJFIHDE\|C{54>m2ontBEA-+8'&/l2SRZNMU}Kcj1@m2a`gn3i1h
2024-04-16 17:43:09 UTC	1908	IN	Data Raw: 13 b5 04 79 d4 21 14 0d 0f dc 15 5b 4f 5d 8b 2c c0 8e 79 80 70 db c1 93 6d e2 3b 06 f1 50 00 86 77 78 45 e1 38 eb 61 3c c2 de 93 2d 29 10 37 2e d8 14 0f 4b a6 a0 68 e2 b3 ca 58 c0 c5 0b 45 db 90 fc 89 bb 2e ef b7 63 7c 87 f6 da e9 59 76 f6 62 51 48 8c 61 ec bf cc c5 c3 cf 5f 4f 87 e7 3b c7 71 26 f2 7c 78 fa fd f3 e1 cb 9c f4 67 05 45 a0 e7 2e 91 59 7b 62 41 21 4a 81 00 d2 73 6e 28 16 70 f1 42 01 b2 2a 61 f3 00 3b 6b b7 d3 c7 b2 29 14 e9 1e ee 46 1d a2 88 7f 4b a8 13 73 09 c5 c3 2f 97 08 c7 99 95 c3 af 19 b5 a2 97 82 82 69 e3 1b e3 a5 18 20 15 fb 74 be 08 ec b8 1f ab 89 22 51 8c 05 14 95 a8 24 16 b0 12 a1 c8 cf b2 f1 53 49 28 3a 2d 14 bc 82 ca 93 45 c8 ef d0 5b 4f 44 fa 4e 2c 29 fa 39 84 e2 f1 8f ab 84 e3 7c 00 87 ef 2f 33 4d 49 d0 79 62 e0 93 09 91 05 bc Data Ascii: y![O],ypm;PwxE8a<-)7.KhXE.c\|YvbQHa_O;q&\|xgE.Y{bA!Jsn(pB*a;k)FKs/i t"Q$SI(:-E[ODN,)9\|/3MIyb
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: 53 ad a0 d8 3f 93 87 e5 27 27 42 01 85 68 25 3d b5 a6 d9 94 09 8e b2 71 b3 48 9d b6 03 6a e7 69 0d a1 08 02 57 a4 4e 28 14 28 29 aa 29 1e 26 ec 69 47 c4 a2 c8 c4 d2 b8 71 57 1f 66 bb 18 64 4f 93 03 a1 98 cb 7b 6e c1 83 d9 b5 d6 d3 22 2a a1 93 63 f3 34 fb 5d 3d 10 70 13 5f b6 b0 86 50 04 81 27 52 27 e7 95 e3 ec e2 ce 36 fb b1 30 52 a8 fd 58 b5 f6 64 6f dc e5 47 b4 a2 95 0a e8 e2 74 f6 f0 42 b1 c3 a5 27 0b 0e 52 18 95 b8 be 30 a1 60 d4 13 b0 a3 ec 4b 7e ca 72 2c 0b 8a 73 6a 10 42 11 04 e3 91 3a 59 0f 43 8a 8b 00 a5 e0 95 bb dc 7a e2 a0 42 df cd b6 b1 80 ec 3d c9 c7 32 b9 b1 67 bb 10 0a a1 a2 15 27 66 02 9a 61 76 ce 18 07 d6 45 71 0c f0 80 8b 22 cb 84 16 8a a8 28 82 c0 11 a9 93 bd 7b b0 aa 8a a2 5a 52 64 d8 80 b2 d7 50 ad 8f 02 15 85 5e 8d 75 36 cb f6 20 14 Data Ascii: S?''Bh%=qHjiWN(())&iGqWfdO{n"*c4]=p_P'R'60RXdoGtB'R0`K~r,sjB:YCzB=2g'favEq"({ZRdP^u6
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: f1 a9 d9 6c 99 b3 a4 87 f4 32 bb c3 9b d6 da b4 42 f1 c8 30 f6 aa ee dc 84 62 b5 dc d6 b4 01 f6 d1 ff 42 6e 46 44 8a e2 3c 23 69 0a 08 42 a1 7a 3d c5 91 a7 15 c5 16 30 02 d2 d9 e3 07 17 2d a5 24 f0 94 06 a1 e0 fc 71 1e c5 c4 ce 6c 2e f3 30 32 5b f1 04 e4 5a c1 75 22 16 8a 2b 71 d9 53 5a 84 42 bf 7c a9 58 44 27 91 e3 16 0a f7 fb f7 4c 28 16 89 dc 0c 80 50 40 92 e2 aa 08 3d 41 75 ac 54 f5 a4 5a 3d 71 20 9b 2d db 02 9e 61 cf f4 66 28 d2 21 14 cb 13 dd 63 45 36 5b 00 46 e3 67 2f 40 36 5b a9 8f 55 16 14 aa cf b8 98 99 9d 0e a1 38 b9 1c b7 50 74 0c c3 c9 84 62 81 c8 cd 08 d3 89 a3 1d 77 93 93 d9 52 1b 05 4c a3 00 f3 58 35 99 1d f4 dc a5 b8 31 7b f1 85 02 fc da 97 15 42 99 50 cc 9e 44 d5 93 08 3d 9d 95 cb 9e 94 d0 d3 04 a1 48 d3 8a e2 e4 92 09 45 26 14 f3 4b 66 Data Ascii: l2B0bBnFD<#iBz=0-$ql.02[Zu"+qSZB\|XD'L(P@=AuTZ=q -af(!cE6[Fg/@6[U8PtbwRLX51{BPD=HE&Kf
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: 64 99 ee 80 04 03 81 fa 45 2a 12 79 5a 50 80 9a fc 68 3a bb bc 94 71 06 af b6 a6 69 1f 50 84 cf ce 60 22 3f 49 ad 07 45 af 64 5a 56 ca 1d 81 40 a0 70 71 41 6e 43 04 c5 43 bb 8a 87 bb b0 eb 28 0a 02 28 3a 1d 73 38 8b c5 64 77 18 b4 56 a6 db fd 9e c6 ee eb ba ae aa 9d aa 02 9a 25 3f 25 78 50 04 e0 9c 74 ac 83 41 58 39 ed 77 2b 97 97 09 0f 28 2e 4c b8 cc 8b 88 ec be 88 f0 04 c6 e7 77 1b 00 0a 1a cc e6 d6 9e be 70 f3 63 05 4d 40 be 21 05 6d 7b 43 38 c1 5a dc f1 dd ed 48 83 3b 3a 67 f1 8c 78 ad a3 78 02 c3 f1 5b b9 f4 04 7f 03 29 44 54 38 9c b0 43 4c bc d6 13 46 29 30 94 cd 2a b3 f9 fc d8 e7 5f 7a a2 73 51 2b ab 78 27 d7 fd 35 a0 b0 bf a0 ab 19 dc a7 9a 5d 60 c1 1d 5f cb f7 b3 3b cd 49 51 50 01 35 c8 94 7c a5 81 d8 8e 1b 1b 0e 3a aa 4a bb 2b 40 c1 68 40 f5 8f Data Ascii: dEyZPh:qiP`"?IEdZV@pqAnCC((:s8dwV%?%xPtAX9w+(.LwpcM@!m{C8ZH;:gxx[)DT8CLF)0_zsQ+x'5]`_;IQP5\|:J+@h@
2024-04-16 17:43:09 UTC	5214	IN	Data Raw: 2d 92 67 db 4e 52 4d cc 7f 74 37 bf 50 74 c5 3d 1b 67 bb cb 6c a6 47 a1 b2 48 18 a5 c0 88 02 36 e3 1b bd 6f cc 2c 5b d7 9e 4e eb 89 12 8a a2 98 8e 36 c8 f7 79 ad 5f 8f 65 62 f3 58 8c b3 ed 7a 6c d0 77 12 2e c1 8c 22 4f 72 d1 fc 42 d1 7b 78 e1 30 bb 4f 28 5c ef 49 fb 4e 9a 70 a7 63 0a 73 70 67 3c 3c 98 7b d9 8c 17 45 62 da 18 71 c2 9d b8 8c c3 ec 49 31 9d 27 98 3d ad f1 90 02 91 d9 4b d6 c8 ec 14 42 e1 0d 3c 80 d6 13 2e ba 48 84 82 9e 1e dc 49 c1 78 ec 3c a9 56 48 41 21 f4 11 45 45 a1 16 45 2a da 20 3b 01 99 40 72 11 66 d9 da 79 d2 34 d4 ce ed ad 9f 51 84 41 a8 cb f9 1d 45 0e f3 0e 66 6a a1 e8 df 1f 7a 78 51 db c9 fb 8c af 2b 84 82 f8 f0 f6 b1 57 27 15 db 67 30 a4 d8 e9 53 42 51 14 99 68 83 60 94 0d ad 90 3c 0a c6 8e 28 28 0d 15 18 9f f1 55 6d 01 ad 50 d0 Data Ascii: -gNRMt7Pt=glGH6o,[N6y_ebXzlw."OrB{x0O(\INpcspg<<{EbqI1'=KB<.HIx<VHA!EEE* ;@rfy4QAEfjzxQ+W'g0SBQh`<((UmP
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: b9 5b 9e 6f 1b 69 f7 d2 5b 69 43 55 4d fb 86 01 85 61 d8 5e 1f 8d 2b 0a 8a 0d b8 39 a7 ae 05 81 90 b1 93 c9 d8 91 f0 13 40 51 cf 14 1e 00 85 24 ed 75 77 2d 2b ca 45 eb f5 7d b5 0d af fa 20 28 e2 71 06 14 12 89 c9 ac 60 e8 ef 81 a2 d9 fd ad d5 ca 4e 3e de 6a f5 52 d5 e9 c3 bb 52 2a d5 aa 4b c4 93 44 51 d5 91 5b d6 eb d7 05 5e 9c 8c 58 42 c1 1a 39 e1 2b 33 a0 08 06 b7 27 40 b1 57 5f 4d 4d fa f7 fa 28 28 29 dc 71 14 f0 85 01 05 16 c7 c2 27 51 90 c3 0a a7 8b 0b 29 31 59 f6 b4 c4 f6 b1 0b 0f 0a 66 14 c5 8b 29 4e 7c fc 60 36 9b b2 c2 0d 27 7c bd 9e c6 03 ee 98 c6 ec ff ba 33 3b 47 fa d3 54 71 4a 1d b8 cd 8d 0b 51 55 fc 00 ee 0b 8a 80 a6 35 08 28 64 52 8d fa 9b 38 a5 5b 12 16 9c 90 8f fa 8f 03 05 8d 63 fe 34 0c 67 28 a9 4e dc ec 2c b9 45 7b ed 3c 7a 97 b3 e6 b8 Data Ascii: [oi[iCUMa^+9@Q$uw-+E} (q`N>jRR*KDQ[^XB9+3'@W_MM(()q'Q)1Yf)N\|`6'\|3;GTqJQU5(dR8[c4g(N,E{<z
2024-04-16 17:43:09 UTC	1279	IN	Data Raw: 55 ec 17 04 c5 fb 5c ed cd 9b c5 c5 9b ab ab d5 d5 ce 56 2f 14 d2 a0 c0 71 53 1a c5 f3 f3 5d 02 c5 da 1c 83 42 3b b3 c7 9a 79 30 83 5b 60 b4 bc e0 f9 57 01 ea 78 15 aa 56 6c c5 1f 82 35 98 89 03 eb ec a3 40 23 1e 9a 14 5e bf 45 b6 3b 5b 30 e1 75 87 2a 1e 0a f8 28 c8 f2 44 53 d5 73 36 0d e2 a2 90 e9 18 df 6c 30 04 e1 22 c8 40 47 e4 be af 5b 6b fb f5 7d 14 1e 06 b4 68 fa 29 48 5a f7 43 b7 ef 64 35 df 21 de 6c b9 ef a8 68 67 26 2e 23 28 99 4c eb 1d 00 05 d7 8d 41 fb 1d 5e e1 58 c1 84 b4 f5 64 35 1d cb 8c e0 91 7c 14 06 0f f4 53 22 9b b4 84 21 5f 7b 8d d4 6b d2 92 2c 1d 12 3d a8 ec 38 7b d5 aa ab 51 d4 eb c8 5a 2f d8 a9 09 c3 87 7b 28 9b 9e 8c 46 51 0c 80 82 19 f3 6d 1a c5 42 b7 7b 9c af 49 eb 21 1e 28 6a ed 8e f5 65 bb bc 34 19 14 f9 fc 1e 83 02 31 7d df 4d Data Ascii: U\V/qS]B;y0[`WxVl5@#^E;[0u*(DSs6l0"@G[k}h)HZCd5!lhg&.#(LA^Xd5\|S"!_{k,=8{QZ/{(FQmB{I!(je41}M
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: 89 c7 43 00 c5 73 0d 3c 93 c3 5e f6 fc eb 15 10 69 dc 21 5a 9e f1 aa 2a 7d 42 7c 14 d2 af c0 28 8d 42 0a 3d 81 15 c1 a6 c6 7d b5 82 4d 18 e6 33 95 59 61 8a 3d 91 d8 b5 ee dc a6 4c 55 bd 3b 5a 9e 9c 0d a2 c6 b6 d5 22 12 b4 89 d7 eb c9 e8 b5 41 e1 fd 57 54 2d 1c dd 2c 20 fd b0 0b e8 f8 2d 1a 85 e9 47 90 06 b1 f6 31 30 ec 7e 28 dc 42 4f 06 13 34 a2 81 71 97 14 aa f9 0e 86 85 f4 6e 67 59 9e 58 e0 ca 16 8d c2 86 c5 64 6f 45 f8 85 b2 b0 b6 76 79 b9 fc 36 1b 91 af dd 68 7c f7 f4 f4 6a f1 3a 1a e5 bc cc d2 28 ee 52 fd f2 e3 5a d2 cb 32 66 93 9f 17 17 0d 28 8a 54 8d ba bc 96 8c 99 8f ce b9 85 f6 e2 22 6a 66 8f d0 28 e6 83 a6 a7 74 3a 97 5a 26 8f 7a cb b2 e5 ac 52 5b 12 e7 c9 f9 b8 9c 32 ba 7d 78 b5 b8 e2 83 e2 fd d5 4e b3 d9 0a 85 7c 50 34 fd 26 3c ce 1f cb 7e 51 Data Ascii: Cs<^i!Z*}B\|(B=}M3Ya=LU;Z"AWT-, -G10~(BO4qngYXdoEvy6h\|j:(RZ2f(T"jf(t:Z&zR[2}xN\|P4&<~Q
2024-04-16 17:43:09 UTC	16384	IN	Data Raw: f4 12 a2 39 4f 7b e4 ad 94 6d 33 9b ef 40 94 31 2e f7 d7 87 f7 f7 ad 58 c4 bf af 97 ee ff c0 6d b3 e2 fe 97 4d c2 12 0f d9 67 60 7b 59 43 40 41 38 58 67 5e 88 e0 59 17 50 30 2a 48 2b 1b 53 7c ce 45 14 34 59 22 05 bd b7 06 9a dd f1 c7 8b b0 94 82 ea c8 92 28 75 5b 61 54 f8 5f 5d 08 35 d0 de 48 92 d3 13 fa 7a f5 ab 34 b8 5b 65 94 f0 8c 1c 5d b2 9e 36 87 84 37 11 58 60 07 ec ab f8 c0 0e 53 42 b2 9d 60 44 4b 2e 50 e1 69 c1 a2 f8 80 49 11 ec bb 03 40 21 79 4f cc 09 e9 34 96 25 9c 40 a1 45 b1 0e 0d 8c 10 fa 8b 13 50 54 3d 11 de 0f 53 58 9e 44 03 1e ca 2f 4a 2e 3e 9b 96 6b 9b d8 a1 53 37 9b 1d 4d 6f 8a d6 16 3d 04 be 59 00 ef b6 59 a8 fc 74 e0 ee 98 f6 83 66 f6 7a c9 a8 b7 b5 e7 9e 4c 47 9a 36 b4 da 7c 10 3e 02 bf 94 f6 3f 89 ce 5c 48 26 de a4 62 1c 1e 5e 09 ca Data Ascii: 9O{m3@1.XmMg`{YC@A8Xg^YP0*H+S\|E4Y"(u[aT_]5Hz4[e]67X`SB`DK.PiI@!yO4%@EPT=SXD/J.>kS7Mo=YYtfzLG6\|>?\H&b^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49750	18.165.83.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:09 UTC	670	OUT	GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:09 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4122 Connection: close Last-Modified: Wed, 17 Nov 2021 20:12:28 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 11:37:59 GMT Cache-Control: max-age=31536000 ETag: "3c5f851c455bada111c434545abf9263" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 397dd692cad53f0026fab5b236c0a518.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: _yOL5q6ibqE6ivay1RjWPxaDvnWYj_mIfmwi_vQlDD-pKNhp2d1cAA== Age: 21911
2024-04-16 17:43:09 UTC	4122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 02 f4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 05 06 06 fd fd fd 03 03 03 6e 6e 6e f5 f5 f5 ec ec ec 3e 3e 3e 2e 2e 2e 08 0b 0b f9 f9 f9 ee ee ee 8e 8e 8e f0 f0 f0 0e 0f 0f d7 d7 d7 17 17 17 33 90 a0 09 08 08 e0 e0 e0 4e a3 af dc dc dc 8a 8a 8a 54 54 54 f7 f7 f7 f4 f4 f4 cc cc cc fc fc fc 53 a8 b2 46 46 46 fb fb fb ea ea ea 56 aa b4 21 21 21 c9 c9 c9 c4 c4 c4 c0 c0 c0 13 13 13 ae ae ae 45 9d aa a2 a2 a2 24 85 98 1f 80 95 3a 3a 3a 1d 1d 1d d0 d0 d0 5e b0 b8 59 ac b5 b1 b1 b1 50 a5 b1 4a a1 ad 40 99 a8 37 93 a2 29 88 9b 18 7b 92 bc bc bc b8 b8 b8 48 Data Ascii: PNGIHDRTZPLTEnnn>>>...3NTTTSFFFV!!!E$:::^YPJ@7){H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49749	18.165.83.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:09 UTC	668	OUT	GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:09 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3429 Connection: close Last-Modified: Mon, 10 Jan 2022 22:34:57 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 17:43:09 GMT Cache-Control: max-age=31536000 ETag: "0d26df8d62b0515d1dbfc983ff628fa5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fc5ebd2517d85e358aa686aaadd64c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: 0qoGKp8z7S2IWO--hZl5NTDGxaVIpmje0ZBzKjbrQVXMigJSrwa5CA== Age: 16601
2024-04-16 17:43:09 UTC	3429	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 01 2c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 03 03 fd fd fd 06 06 06 f9 f9 f9 ee ee ee fb fb fb f2 f2 f2 bf bf bf c4 c4 c4 90 90 90 f4 f4 f4 bb bb bb 73 73 73 36 36 36 cb cb cb 75 75 75 e7 e7 e7 6c 6c 6c 45 45 45 13 13 13 31 31 31 20 20 20 df df df 2c 2c 2c 0a 0a 0a 58 58 58 f6 f6 f6 eb eb eb c7 c7 c7 5b 5b 5b 1b 1b 1b 0f 0f 0f b8 b8 b8 ad ad ad a8 a8 a8 9d 9d 9d 70 70 70 60 60 60 55 55 55 af af af 84 84 84 7c 7c 7c d9 d9 d9 d6 d6 d6 78 78 78 3f 3f 3f d2 d2 d2 a1 a1 a1 92 92 92 8b 8b 8b cf cf cf 81 81 81 4e 4e 4e 0b 0b 0b e2 e2 e2 99 99 99 65 Data Ascii: PNGIHDRTZ,PLTEsss666uuulllEEE111 ,,,XXX[[[ppp```UUU\|\|\|xxx???NNNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49760	108.138.106.48	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:10 UTC	444	OUT	GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:10 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8739 Connection: close Last-Modified: Thu, 04 Apr 2024 21:36:01 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 13:39:50 GMT Cache-Control: max-age=31536000 ETag: "e259d49ad1b22d7f61343b11e3d63454" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0667564db9d2ec4ceec667e46b842a9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: pH3mB4UXV0S_k9F4FyJhFRprfm0oT74iUDfzuf3lTxHsUgnZEYL1_A== Age: 14601
2024-04-16 17:43:10 UTC	8739	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 14 00 00 02 4f 08 03 00 00 00 d2 63 62 23 00 00 01 b0 50 4c 54 45 4c 00 ff cb c2 ff ff 57 32 00 00 00 45 08 f4 ff ff ff 9b 79 ff a5 2b 98 e8 e0 fe 09 00 20 43 00 df f4 52 3f 57 05 f2 26 00 80 8b 65 f8 b9 a2 fb e9 df ff 6c 31 ff bc 9f ff 63 0b e5 e9 4c 4c d2 41 65 79 16 cc bb a9 ff 8f 21 b2 8f 60 ff 39 00 bf 13 00 40 5c 27 f5 54 0c ff 8b 61 ff df 4c 2c 05 00 10 48 00 ef 19 19 20 20 0b 06 1d 00 60 ab 91 ff 7c 49 ff 5d 27 f5 63 20 ff d1 c1 fc 5c 18 ff 74 46 f7 bc 36 7f 62 20 ff 30 00 9f 7f 79 9f 4c 49 60 49 04 f9 d1 b5 e5 a2 83 fa 60 21 13 80 2c 19 b2 aa df 79 40 ff d2 bf ff 96 74 f9 f4 ef ff f9 64 4c f3 f0 fe 32 30 40 be b6 ef dd d1 fe ae 93 fa df 9a b3 98 91 bf 0d 0c 10 65 60 80 c3 b6 ff b1 aa df eb Data Ascii: PNGIHDROcb#PLTELW2Ey+ CR?W&el1cLLAey!`9@\'TaL,H `\|I]'c \tF6b 0yLI`I`!,y@tdL20@e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49761	108.138.106.48	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:10 UTC	438	OUT	GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:10 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 207158 Connection: close Date: Mon, 15 Apr 2024 21:21:21 GMT Last-Modified: Fri, 05 Apr 2024 16:35:23 GMT ETag: "3ab004a1051b551cf461646929eaada0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 87fe250b32fc87699b1f30c0c5ab6004.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: UgP2Z5gO_RRbXpswdGiBNHemGoYxIpV6u7BwoxCMcHG-u9s9AE9pEA== Age: 73310
2024-04-16 17:43:10 UTC	15868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 28 00 00 04 a0 08 03 00 00 00 55 39 30 ba 00 00 02 f7 50 4c 54 45 ff ff ff 4c 00 ff 19 18 22 70 33 ff 4c 00 fd 4b 00 fa e9 e9 ea 49 00 f3 48 00 ef 4b 00 fc 4a 00 f7 f6 f6 f6 47 00 ec fa fa fa 45 00 e6 4a 00 f8 f3 f3 f3 46 00 ea 49 00 f5 ef ef f0 48 00 f1 eb eb eb e7 e7 e7 44 00 e2 ed ed ed 45 00 e8 e5 e5 e5 a2 7c fb 43 01 e0 e3 e3 e3 dd dd dd a2 7b fd db da db 35 34 3e df df df eb ea ed 6d 32 f9 e8 e7 eb 6f 6e 74 a5 81 fa e1 e1 e1 e6 e4 ec c6 c5 c8 42 01 dc a8 a8 ac 45 08 f4 41 01 d9 a4 7f fa a7 84 fa 2d 2b 38 8c 8b 90 a8 85 fa 27 26 2f 6c 32 f5 53 52 5a 4e 4d 55 9a 9a 9e e2 de ed a3 7d fd e9 e8 ee 4b a3 63 df d9 ee 6a 31 f2 40 01 d6 a7 84 fd 6d 32 f7 d2 c5 f1 61 60 67 a9 85 fc 6e 33 fb 69 31 f0 68 Data Ascii: PNGIHDR(U90PLTEL"p3LKIHKJGEJFIHDE\|C{54>m2ontBEA-+8'&/l2SRZNMU}Kcj1@m2a`gn3i1h
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: 69 a9 14 a5 92 c2 ba 28 76 78 46 99 80 8d 22 02 8d a0 2b 1b 50 24 a4 a2 18 bd a2 70 9c 35 10 44 29 30 cf b6 15 c5 39 b8 87 aa ac 14 d4 0a 9a 29 6e 27 16 b0 06 a1 60 7a ac d5 8b ee 4c 2a c4 0e c9 a6 13 a6 14 da 94 8d 8a 82 5e bb 61 93 6b 3d 71 46 b1 80 2d ef 05 f0 63 31 bf c8 bb f0 f7 f7 f7 ff 17 c6 a4 14 90 09 a5 14 98 4f 40 2e 60 c7 a2 50 64 63 01 bf 32 16 b0 a8 13 b5 04 79 d4 21 14 0d 0f dc 15 5b 4f 5d 8b 2c c0 8e 79 80 70 db c1 93 6d e2 3b 06 f1 50 00 86 77 78 45 e1 38 eb 61 3c c2 de 93 2d 29 10 37 2e d8 14 0f 4b a6 a0 68 e2 b3 ca 58 c0 c5 0b 45 db 90 fc 89 bb 2e ef b7 63 7c 87 f6 da e9 59 76 f6 62 51 48 8c 61 ec bf cc c5 c3 cf 5f 4f 87 e7 3b c7 71 26 f2 7c 78 fa fd f3 e1 cb 9c f4 67 05 45 a0 e7 2e 91 59 7b 62 41 21 4a 81 00 d2 73 6e 28 16 70 f1 42 01 Data Ascii: i(vxF"+P$p5D)09)n'`zL*^ak=qF-c1O@.`Pdc2y![O],ypm;PwxE8a<-)7.KhXE.c\|YvbQHa_O;q&\|xgE.Y{bA!Jsn(pB
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: e2 60 99 98 7f 0f 8f 1d fe 40 7b 7c a1 d0 d7 d9 6c d9 ae fd 58 83 2c 3d e9 e8 09 0e 05 84 c2 64 3d d9 90 71 39 bf 89 08 8f 20 70 45 ea 84 9b 50 85 ef e4 c9 86 3d ad a8 cc 96 08 8f 93 12 32 be 37 32 3c 58 28 b0 f1 e4 c4 ce 1e 5e 28 44 73 ed 21 c5 86 cb ec c5 ae 3d c1 cb 16 ad 58 41 bb 34 9b ef ed c2 cc 0e 02 87 a4 1e 78 3d 56 41 6d 91 89 f0 58 6f d5 45 3b a0 2b 0a b3 1f 6b f0 10 df 31 4d 0e 84 42 98 1b 91 80 f3 bc c0 ca 86 56 88 ae 57 d9 b1 f9 53 ae b2 1f 5f 14 54 5b a4 4a 11 11 1e 41 e0 8f d4 87 7d 51 bc 45 28 ea 58 40 ee a3 28 26 c5 0f 2c 8a e2 66 c3 a0 00 cd c3 6c 07 a7 76 27 3e 84 e2 0a 5a 6c 36 52 70 c7 1d 55 66 9b ce 6c 8e 7a 62 9d 40 7a 6c fe 88 48 c4 e8 29 08 7c 91 3a 51 99 e0 83 3b bd cc be 67 3d 9d 6e f6 97 fd 07 cd 45 87 f0 f8 9e f0 1c e0 e1 43 Data Ascii: `@{\|lX,=d=q9 pEP=272<X(^(Ds!=XA4x=VAmXoE;+k1MBVWS_T[JA}QE(X@(&,flv'>Zl6RpUflzb@zlH)\|:Q;g=nEC
2024-04-16 17:43:10 UTC	12126	IN	Data Raw: d4 69 c6 09 25 d8 35 05 bb f9 44 62 b3 e3 ad 6c 10 30 22 b5 51 10 13 05 f9 c3 39 c8 66 41 f1 da 8a 1d 47 b1 0a a0 20 49 db 41 f9 d6 ec 0c 2c 98 14 1e 9c 91 82 da 28 68 1c 45 92 64 1c 40 31 67 a3 58 83 62 0d 8a 35 28 5e 18 28 f2 d3 8c b3 de b1 f8 2b 4d 0a 18 bb cd 10 2b 45 74 18 33 4b 89 cc de d3 6a 86 51 fc ce de f9 bc a6 72 45 71 bc 49 cb f4 87 b5 b5 1d 62 6d a8 45 85 4a 91 d9 34 88 e3 de e5 2c c2 20 28 e3 a6 0b 89 18 57 ae 74 3b 4c 70 91 98 45 ba 08 2e 9e 60 54 e8 4a 54 70 15 85 10 2c 49 78 64 d5 45 fa f7 f4 dc b9 73 e7 cc cd 1d 6b 7f a4 79 a6 cd 69 de 6b e9 38 bf ee 4c ee c7 73 cf 39 df b3 f9 a0 80 31 a4 d4 15 bd 09 b1 1b 05 ca 02 62 87 3b 92 f5 84 c6 2d 3d f1 c1 6c 42 09 f2 07 29 f1 8c a0 c0 df fa 0e 5f cc 94 f7 80 82 2d 2d bb 53 b2 c6 12 6b b8 25 86 Data Ascii: i%5Dbl0"Q9fAG IA,(hEd@1gXb5(^(+M+Et3KjQrEqIbmEJ4, (Wt;LpE.`TJTp,IxdEskyik8Ls91b;-=lB)_--Sk%
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: 70 75 0c 47 10 e8 6e 80 21 4b e0 4b 8d 25 18 29 91 7d 3b 1c 9f 93 6e c2 76 8c 23 e9 1e 28 5a 86 41 67 d5 a1 0a e1 a7 11 8f b0 67 6c 4c 9f 05 14 e4 88 3b 42 0a d7 9b 1d 10 1e eb b2 c2 9f 97 fd b9 7b c2 5d a0 41 81 51 01 3f 3b ab 4e af c2 a3 fd f2 41 f1 94 91 12 18 f2 04 c2 a4 08 58 7b c2 a7 89 f8 77 19 df 9f 9a 8d b5 7b 12 ea 1b 28 de 40 f1 06 8a ff 05 28 48 d4 13 1d f6 84 d7 1c 40 30 5b 10 17 c5 ce 9e 80 c4 a4 a0 cd 09 fc e3 9a 14 6f db 8c ff 5b 22 d6 04 01 05 bd 83 47 60 78 2c a2 04 89 7a 42 f2 47 3d 11 4c 50 be 6c f8 d0 2e 8a ff 3c ea e9 72 36 d3 f5 66 84 78 08 23 67 67 35 c6 c9 e5 22 bf 07 8a 70 a5 d2 95 cd e9 54 96 33 da a6 5a cd 86 bf db ae 6e ac 56 37 4a 2e e4 53 b7 5b 9c 0e ff 0c 28 22 c7 c7 69 46 ee 74 d8 50 25 93 11 84 72 34 5a af 0f 2e e1 bb 14 Data Ascii: puGn!KK%)};nv#(ZAgglL;B{]AQ?;NAX{w{(@(H@0[o["G`x,zBG=LPl.<r6fx#gg5"pT3ZnV7J.S[("iFtP%r4Z.
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: a1 e8 89 c9 e5 b2 25 a0 e8 2a 53 40 e5 f7 44 87 6c 95 2b 6c 66 c2 63 b5 f0 40 28 ca ee 0d 72 13 d9 74 36 70 85 04 a2 d9 20 19 98 9d 4d 52 74 d2 56 8a 4e d6 64 dc c4 13 d7 73 73 8b fe 89 50 ac d2 e9 9d f3 c4 6f 11 9e 7f 78 fe 35 3f ff c5 77 66 3b 0b 8f 0b 89 2d e0 75 3a b0 f3 24 11 85 f1 7a 92 9d 27 06 b6 80 a7 e5 d0 45 4f e8 cd 36 11 05 04 83 2f 16 3f d4 c3 03 a1 98 0b a5 13 92 15 72 3a 91 b7 f0 60 41 77 5a 91 ea 44 cc ba 9c ca 64 9c 16 93 e4 28 54 3a 5b 3a b3 7f b1 77 35 3d 37 03 51 18 ad 6f f5 79 09 82 84 88 08 d6 d8 5b 5a d9 10 36 56 24 76 56 36 dd 48 c4 0f b0 b6 b2 b1 12 7e 80 c4 c2 c2 ef 72 ce 3c d3 3e 8e 67 aa 57 5f d7 5b d2 73 a7 bd d3 99 de f7 de f3 b6 a7 cf 9c 8f 39 73 b9 48 f3 31 3d 35 d3 4f 9b 7e ee f4 0f 2e fc 2f fc 6f 86 ff ad fb 28 40 d9 a4 Data Ascii: %*S@Dl+lfc@(rt6p MRtVNdssPox5?wf;-u:$z'EO6/?r:`AwZDd(T:[:w5=7Qoy[Z6V$vV6H~r<>gW_[s9sH1=5O~./o(@
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: ae d5 db 6a f1 89 07 bb 70 ac e4 5f 02 0a 94 e5 9c 5c 3e 56 6f c0 d4 90 01 ee 09 9d 2f bf d4 16 05 50 bc 9a e0 1f f3 80 8d 32 04 f5 a4 09 b0 d4 ea c4 0f cc fd 94 02 66 60 84 e7 9e 70 07 31 09 72 22 51 4a 59 15 b3 d9 92 68 8c 8a a0 05 f7 82 ea 35 2f ce de 6c 81 85 08 eb 12 8c 09 12 3f f7 17 52 b0 c8 43 07 56 98 f9 9f fd e7 10 d9 40 28 f0 c6 4c fa 68 d2 af 8b 0e c0 42 84 8c 05 a0 0e d7 0b ae d5 ac 1c f6 39 5a 8d 5e d5 d7 d4 a2 c8 a7 b1 88 2d 5a 74 46 02 f9 5b bb 4d a0 40 18 f2 20 fb 08 8d df c9 51 d3 09 80 41 7f 2c 4f ba 49 48 01 11 49 81 cc 98 54 d6 02 9c 58 ff 5f dd 1b 1d 7f 09 51 f1 c7 74 4c 1c 11 82 40 8c d8 1b 19 f9 57 fe 82 26 86 6c c7 cd 53 20 1c 9f 00 58 43 90 7d f9 10 b6 62 86 0b 05 0e a4 b7 10 50 10 42 b0 98 37 58 46 d8 a4 f0 b1 f7 27 cf 49 61 8a Data Ascii: jp_\>Vo/P2f`p1r"QJYh5/l?RCV@(LhB9Z^-ZtF[M@ QA,OIHITX_QtL@W&lS XC}bPB7XF'Ia
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: 28 77 6e f0 f5 e7 ab 36 1d 79 3c a5 05 34 58 70 85 a7 e9 a8 be 04 0a be f9 78 a5 6a 4e 81 82 f6 64 51 c9 89 1f 7f df a2 68 59 f8 b1 5d e7 6b 8c 90 e8 b8 33 e1 f8 53 44 5e e9 fe e7 58 f0 9a b4 4c 56 57 bb 52 9e 6c d6 83 d8 e1 41 39 24 c9 25 e0 99 ef 58 c1 fa b1 30 06 db dc b1 18 13 c2 09 2f 91 59 cc 7b 92 e6 14 de c0 9c c0 ae 24 de 0f 08 41 41 8d 29 36 f9 90 36 12 e2 6d 3f 0d 95 64 75 6d 3d 59 76 82 39 4e af de 29 60 58 0c a8 cd 1b 63 93 2b 05 14 a4 55 dd 8a 2f e0 95 4b 7b 7c 5b ed 6d c0 04 0c 5e b1 90 74 05 18 ac 19 2b 4d b2 e1 da d1 20 39 4f d2 1d a0 b4 ca 96 72 6c 69 40 21 16 85 48 78 81 3c 58 9c 47 e1 84 1d 79 15 e2 87 85 9f 05 96 ba d5 d5 43 ca 7e fe 7a b4 9c fc 08 14 3a 81 62 e4 d2 b6 bc 12 83 42 f7 57 f7 40 b1 3f cd f1 de f8 a0 a7 43 0f 14 90 72 10 Data Ascii: (wn6y<4XpxjNdQhY]k3SD^XLVWRlA9$%X0/Y{$AA)66m?dum=Yv9N)`Xc+U/K{\|[m^t+M 9Orli@!Hx<XGyC~z:bBW@?Cr
2024-04-16 17:43:10 UTC	3744	IN	Data Raw: fc 56 54 c4 71 5d fe 3f d9 5c 74 b0 10 ca d8 30 26 04 a6 99 10 52 a8 9f 80 15 68 82 0a bb 92 ca 76 53 91 9c c8 56 0a 38 01 2a 96 d8 93 69 70 42 1b b3 95 14 3a 3d 16 39 28 fc e8 08 8f 14 1b b3 b3 ea 09 4c a0 43 2b b3 01 45 9d e0 a1 8e a2 4c 8f 55 54 60 29 5a 52 e8 98 f1 9a cd be 11 50 30 c2 23 ab 63 b7 b1 a7 9f ce 72 05 25 9a 6e 8a da a0 ed a7 80 22 49 81 9a 79 4f a5 b1 4d f2 04 58 09 fb 16 67 0a 8a 79 ad 53 5d 47 a1 33 43 48 9c 38 c6 92 6a 81 b7 2d 2a 58 96 ed 46 8a 96 ec 70 14 35 37 e1 8a c8 93 dd 04 05 b1 a7 ef 0a 1e 14 15 ba 8f 02 52 b4 96 42 48 c1 3e 0a aa 9e da 1c 85 dd 4d ec 09 3d ec ac 70 4c 98 14 14 89 0a dd 70 27 96 a2 04 9e ba 64 36 8e c2 6f 35 14 fe 40 09 54 53 14 7e 9b f9 b1 ac 43 65 cb dd e5 49 8a aa 2c 7a f2 fb df af 8e 3d ae f3 c7 fb 12 3b Data Ascii: VTq]?\t0&RhvSV8ipB:=9(LC+ELUT`)ZRP0#cr%n"IyOMXgyS]G3CH8j-XFp57RBH>M=pLp'd6o5@TS~CeI,z=;
2024-04-16 17:43:10 UTC	16384	IN	Data Raw: 6c 26 c7 92 92 08 3a d4 66 8a f4 15 48 51 e1 6e 22 3e 91 c9 d6 86 bb 2a c7 c4 d7 58 0a 27 45 a6 28 fc 02 14 a0 02 49 32 1b e9 ac 27 05 85 54 c7 be e3 17 8b 8b 66 9c 48 4f f1 a7 a7 c7 32 13 f0 d3 e0 04 a4 50 50 c0 09 3b 70 a2 86 9e 3e 2a c9 6c bf 29 8f 1d 43 01 03 14 6e 25 14 14 46 08 54 86 8d bb 34 f4 74 b3 9f 51 1f 1b a0 88 23 9e 22 ea 4d 83 11 80 62 3e 16 f0 ba 93 a0 20 5d 41 cd d3 61 4a 3b 9b b2 03 12 9a cd 26 41 01 29 6a 17 c5 af 43 4e f1 aa 4d 14 7b 43 41 1f 85 a2 02 4a 40 8a c7 06 2b dc 4d 3c f6 3a 96 e2 c7 9f 7e be ff d1 6b 97 96 96 96 10 7a f7 b3 ef 7e fa f1 ed 03 43 f1 51 9d 32 be 2b 7b 3a 06 c5 d5 30 14 b7 c1 09 e4 86 42 a2 4f 6c a6 18 4a 52 b0 3f 1b e5 2c d6 0b 25 94 14 f4 bf 05 22 e0 c3 e9 55 a8 e4 25 fc f4 89 ec 04 d8 06 8a 5d fc 29 db ce 71 Data Ascii: l&:fHQn">X'E(I2'TfHO2PP;p>l)Cn%FT4tQ#"Mb> ]AaJ;&A)jCNM{CAJ@+M<:~kz~CQ2+{:0BOlJR?,%"U%])q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49764	108.138.106.48	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:10 UTC	434	OUT	GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:10 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4122 Connection: close Last-Modified: Wed, 17 Nov 2021 20:12:28 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 11:37:59 GMT Cache-Control: max-age=31536000 ETag: "3c5f851c455bada111c434545abf9263" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 877f105eccbc5cf798a3a34d16fc0c74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: deEdixX7jGzVsjurswoWReSA6DtxdS9x0FmvzJ_fN9OQrvLClDZ_Sw== Age: 21912
2024-04-16 17:43:10 UTC	4122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 02 f4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 05 06 06 fd fd fd 03 03 03 6e 6e 6e f5 f5 f5 ec ec ec 3e 3e 3e 2e 2e 2e 08 0b 0b f9 f9 f9 ee ee ee 8e 8e 8e f0 f0 f0 0e 0f 0f d7 d7 d7 17 17 17 33 90 a0 09 08 08 e0 e0 e0 4e a3 af dc dc dc 8a 8a 8a 54 54 54 f7 f7 f7 f4 f4 f4 cc cc cc fc fc fc 53 a8 b2 46 46 46 fb fb fb ea ea ea 56 aa b4 21 21 21 c9 c9 c9 c4 c4 c4 c0 c0 c0 13 13 13 ae ae ae 45 9d aa a2 a2 a2 24 85 98 1f 80 95 3a 3a 3a 1d 1d 1d d0 d0 d0 5e b0 b8 59 ac b5 b1 b1 b1 50 a5 b1 4a a1 ad 40 99 a8 37 93 a2 29 88 9b 18 7b 92 bc bc bc b8 b8 b8 48 Data Ascii: PNGIHDRTZPLTEnnn>>>...3NTTTSFFFV!!!E$:::^YPJ@7){H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49763	108.138.106.48	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:10 UTC	432	OUT	GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:10 UTC	503	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3429 Connection: close Date: Tue, 16 Apr 2024 17:43:11 GMT Last-Modified: Mon, 10 Jan 2022 22:34:57 GMT ETag: "0d26df8d62b0515d1dbfc983ff628fa5" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 eb4c39562c3ea08ed99a3ec30c18db3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: 3y-PJ-Pm7Iu2PNXCfgLxUswkLmYw4hzGj7Z5tX9LzTPC9-Ei71r8hQ==
2024-04-16 17:43:10 UTC	3429	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 01 2c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 03 03 fd fd fd 06 06 06 f9 f9 f9 ee ee ee fb fb fb f2 f2 f2 bf bf bf c4 c4 c4 90 90 90 f4 f4 f4 bb bb bb 73 73 73 36 36 36 cb cb cb 75 75 75 e7 e7 e7 6c 6c 6c 45 45 45 13 13 13 31 31 31 20 20 20 df df df 2c 2c 2c 0a 0a 0a 58 58 58 f6 f6 f6 eb eb eb c7 c7 c7 5b 5b 5b 1b 1b 1b 0f 0f 0f b8 b8 b8 ad ad ad a8 a8 a8 9d 9d 9d 70 70 70 60 60 60 55 55 55 af af af 84 84 84 7c 7c 7c d9 d9 d9 d6 d6 d6 78 78 78 3f 3f 3f d2 d2 d2 a1 a1 a1 92 92 92 8b 8b 8b cf cf cf 81 81 81 4e 4e 4e 0b 0b 0b e2 e2 e2 99 99 99 65 Data Ascii: PNGIHDRTZ,PLTEsss666uuulllEEE111 ,,,XXX[[[ppp```UUU\|\|\|xxx???NNNe

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49766	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713289358052&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-16 17:43:11 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-16 17:43:11 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-16 17:43:11 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 041B956F6F5E46BD9F690A73FC944D0F Ref B: LAX311000113019 Ref C: 2024-04-16T17:43:11Z Date: Tue, 16 Apr 2024 17:43:11 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713289391.1615952

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49774	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	586	OUT	GET /scripttemplates/otSDKStub.js?did=f9d8335b-1f5b-415d-923b-2daa2d0de9bd HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:11 UTC	815	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Mon, 15 Apr 2024 19:30:17 GMT x-ms-request-id: 7855127a-301e-009d-5873-8fcb39000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 68950 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755f9e88d7153c2-ATL
2024-04-16 17:43:11 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-04-16 17:43:11 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49777	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:11 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:11 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:11 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49775	35.163.210.43	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	608	OUT	GET /f HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
2024-04-16 17:43:11 UTC	528	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:11 GMT Content-Type: application/json Content-Length: 59 Connection: close Server: DS-Arya Expires: Wed, 17 Apr 2024 17:43:11 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Vary: Origin Set-Cookie: ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-16 17:43:11 UTC	59	IN	Data Raw: 7b 22 44 53 5f 41 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 44 53 5f 41 5f 43 22 3a 22 22 7d Data Ascii: {"DS_A":"305622db-cab4-46c0-8a17-15a582e0ed4c","DS_A_C":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49778	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	633	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:12 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:11 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8755f9ebba7ab051-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 50748 Cache-Control: public, max-age=86400 Expires: Wed, 17 Apr 2024 17:43:11 GMT Last-Modified: Thu, 11 Apr 2024 13:13:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Si1JP1gQRax3B39E15TBSA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9d522b58-301e-0034-5f8a-8c0a4b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-16 17:43:12 UTC	467	IN	Data Raw: 33 61 62 65 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 66 39 64 38 Data Ascii: 3abe{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 37 33 39 2d 30 31 35 35 2d 37 36 39 66 2d 39 61 33 61 2d 66 37 37 35 65 64 32 38 35 39 66 37 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 6d 69 6e 75 73 20 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 61 73 22 2c 22 70 72 22 2c 22 76 69 22 2c 22 6d 70 22 2c 22 67 75 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 76 74 22 2c 22 77 79 22 2c 22 63 6f 22 2c 22 74 6e 22 2c 22 6d 69 22 2c 22 6d 6f 22 2c 22 6b 79 22 2c 22 61 73 22 2c 22 6f 72 22 2c 22 6c 61 22 2c 22 63 74 22 2c 22 77 69 22 2c 22 73 64 22 2c 22 76 61 22 2c 22 6e 63 22 2c 22 6d 73 22 2c 22 6e 65 22 2c 22 66 6c 22 2c 22 70 61 22 2c 22 6d 6e 22 2c 22 6b 73 22 2c 22 61 72 22 2c 22 67 61 22 2c 22 73 63 22 2c 22 61 Data Ascii: t":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","a
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 74 74 22 3a Data Ascii: "en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"da","tr":"tr","tt":
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 66 79 2d 4e 4c 22 2c 22 66 72 2d 43 41 22 3a 22 66 72 2d Data Ascii: A","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"fy-NL","fr-CA":"fr-
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c 22 6d 73 2d 42 4e 22 3a 22 6d 73 2d 42 4e 22 2c 22 65 73 Data Ascii: CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY","ms-BN":"ms-BN","es
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 Data Ascii: ,"gm","gn","gq","gs","gt","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 2c 22 73 74 22 3a 22 73 74 22 2c 22 65 6e 2d 50 4c 22 3a 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 Data Ascii: ,"st":"st","en-PL":"en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 6e 2d 49 4e 22 2c 22 65 6e 2d 5a 41 22 3a 22 65 6e 2d 5a 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 Data Ascii: n-IN","en-ZA":"en-ZA","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 6c 74 2d 4c 54 22 3a 22 6c 74 2d 4c 54 22 2c 22 65 6e 2d 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c Data Ascii: lt-LT":"lt-LT","en-CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY",
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 22 65 6e 2d 53 45 22 3a 22 65 6e 2d 53 45 22 2c 22 65 6e 2d 42 57 22 3a 22 65 6e 2d 42 57 22 2c 22 65 6e 2d 53 47 22 3a 22 65 6e 2d 53 47 22 2c 22 61 7a 22 3a 22 61 7a 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 65 6e 2d 53 4b 22 3a 22 65 6e 2d 53 4b 22 2c 22 6e 62 2d 4e 4f 22 3a 22 6e 62 2d 4e 4f 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 4f 4d 22 3a 22 65 6e 2d 4f 4d 22 2c 22 62 65 22 3a 22 62 65 22 2c 22 65 73 2d 50 52 22 3a 22 65 73 2d 50 52 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 7a 68 2d 4d 4f 22 3a 22 7a 68 2d 4d 4f 22 2c 22 65 73 2d 50 59 22 3a 22 65 73 2d 50 59 22 2c 22 62 6e 22 3a 22 62 6e 22 2c 22 73 64 22 3a 22 73 64 22 2c 22 62 73 22 3a 22 62 73 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 70 74 22 2c 22 73 69 22 3a 22 73 69 22 2c 22 73 6b 22 3a 22 Data Ascii: "en-SE":"en-SE","en-BW":"en-BW","en-SG":"en-SG","az":"az","ro":"ro","en-SK":"en-SK","nb-NO":"nb-NO","ru":"ru","en-OM":"en-OM","be":"be","es-PR":"es-PR","bg":"bg","zh-MO":"zh-MO","es-PY":"es-PY","bn":"bn","sd":"sd","bs":"bs","default":"pt","si":"si","sk":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49779	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:11 UTC	812	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&firstPartyCookieDomain=track.docusign.com HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
2024-04-16 17:43:12 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://track.docusign.com/visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&elq1pcGUID=6400A138232C428E87866AF383215C6E X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:11 GMT Connection: close Content-Length: 345
2024-04-16 17:43:12 UTC	345	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 76 32 30 30 2f 73 76 72 47 50 3f 70 70 73 3d 33 26 61 6d 70 3b 73 69 74 65 69 64 3d 35 36 36 38 31 30 38 32 36 26 61 6d 70 3b 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 61 6d 70 3b 72 65 66 32 3d 65 6c 71 4e 6f 6e 65 26 61 6d 70 3b 74 7a 6f 3d 2d 36 30 26 61 6d 70 3b 6d 73 3d 37 32 36 26 61 6d 70 3b 6f 70 74 69 6e 3d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://track.docusign.com/visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49781	34.111.140.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1152 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:12 UTC	1152	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 36 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 32 38 39 33 38 38 37 32 35 72 30 2e 38 31 39 30 37 32 32 38 31 39 38 33 33 36 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7260","visitors":[{"visitor_id":"oeu1713289388725r0.819072281983362","session_id":"AUTO","att
2024-04-16 17:43:12 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Tue, 16 Apr 2024 17:43:11 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: ab892bda-433b-4b6d-ad4e-93e3c6fdbbc3 x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49780	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	411	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362
2024-04-16 17:43:12 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:12 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:12 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49783	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	427	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:12 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:12 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8755f9ef99610d16-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 86211 Cache-Control: public, max-age=86400 Expires: Wed, 17 Apr 2024 17:43:12 GMT Last-Modified: Thu, 11 Apr 2024 13:13:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Si1JP1gQRax3B39E15TBSA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 75679aaf-101e-000c-268b-8cae8b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-16 17:43:12 UTC	467	IN	Data Raw: 35 61 36 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 66 39 64 38 Data Ascii: 5a68{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 37 33 39 2d 30 31 35 35 2d 37 36 39 66 2d 39 61 33 61 2d 66 37 37 35 65 64 32 38 35 39 66 37 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 6d 69 6e 75 73 20 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 61 73 22 2c 22 70 72 22 2c 22 76 69 22 2c 22 6d 70 22 2c 22 67 75 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 76 74 22 2c 22 77 79 22 2c 22 63 6f 22 2c 22 74 6e 22 2c 22 6d 69 22 2c 22 6d 6f 22 2c 22 6b 79 22 2c 22 61 73 22 2c 22 6f 72 22 2c 22 6c 61 22 2c 22 63 74 22 2c 22 77 69 22 2c 22 73 64 22 2c 22 76 61 22 2c 22 6e 63 22 2c 22 6d 73 22 2c 22 6e 65 22 2c 22 66 6c 22 2c 22 70 61 22 2c 22 6d 6e 22 2c 22 6b 73 22 2c 22 61 72 22 2c 22 67 61 22 2c 22 73 63 22 2c 22 61 Data Ascii: t":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","a
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 74 74 22 3a Data Ascii: "en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"da","tr":"tr","tt":
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 66 79 2d 4e 4c 22 2c 22 66 72 2d 43 41 22 3a 22 66 72 2d Data Ascii: A","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"fy-NL","fr-CA":"fr-
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c 22 6d 73 2d 42 4e 22 3a 22 6d 73 2d 42 4e 22 2c 22 65 73 Data Ascii: CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY","ms-BN":"ms-BN","es
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 Data Ascii: ,"gm","gn","gq","gs","gt","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 2c 22 73 74 22 3a 22 73 74 22 2c 22 65 6e 2d 50 4c 22 3a 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 Data Ascii: ,"st":"st","en-PL":"en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 6e 2d 49 4e 22 2c 22 65 6e 2d 5a 41 22 3a 22 65 6e 2d 5a 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 Data Ascii: n-IN","en-ZA":"en-ZA","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 6c 74 2d 4c 54 22 3a 22 6c 74 2d 4c 54 22 2c 22 65 6e 2d 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c Data Ascii: lt-LT":"lt-LT","en-CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY",
2024-04-16 17:43:12 UTC	1369	IN	Data Raw: 22 65 6e 2d 53 45 22 3a 22 65 6e 2d 53 45 22 2c 22 65 6e 2d 42 57 22 3a 22 65 6e 2d 42 57 22 2c 22 65 6e 2d 53 47 22 3a 22 65 6e 2d 53 47 22 2c 22 61 7a 22 3a 22 61 7a 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 65 6e 2d 53 4b 22 3a 22 65 6e 2d 53 4b 22 2c 22 6e 62 2d 4e 4f 22 3a 22 6e 62 2d 4e 4f 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 4f 4d 22 3a 22 65 6e 2d 4f 4d 22 2c 22 62 65 22 3a 22 62 65 22 2c 22 65 73 2d 50 52 22 3a 22 65 73 2d 50 52 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 7a 68 2d 4d 4f 22 3a 22 7a 68 2d 4d 4f 22 2c 22 65 73 2d 50 59 22 3a 22 65 73 2d 50 59 22 2c 22 62 6e 22 3a 22 62 6e 22 2c 22 73 64 22 3a 22 73 64 22 2c 22 62 73 22 3a 22 62 73 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 70 74 22 2c 22 73 69 22 3a 22 73 69 22 2c 22 73 6b 22 3a 22 Data Ascii: "en-SE":"en-SE","en-BW":"en-BW","en-SG":"en-SG","az":"az","ro":"ro","en-SK":"en-SK","nb-NO":"nb-NO","ru":"ru","en-OM":"en-OM","be":"be","es-PR":"es-PR","bg":"bg","zh-MO":"zh-MO","es-PY":"es-PY","bn":"bn","sd":"sd","bs":"bs","default":"pt","si":"si","sk":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49784	172.64.155.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:12 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:12 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755f9efde9e44e4-ATL
2024-04-16 17:43:12 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49785	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	857	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&elq1pcGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:43:12 UTC	471	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Set-Cookie: ELOQUA=GUID=6400A138232C428E87866AF383215C6E; domain=docusign.com; expires=Fri, 16-May-2025 17:43:12 GMT; path=/ P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:12 GMT Connection: close Content-Length: 49
2024-04-16 17:43:12 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49787	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:12 UTC	558	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:13 UTC	814	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:13 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: 09dec6d6-901e-0084-36c2-7b4b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 6166 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755f9f2e89278ce-ATL
2024-04-16 17:43:13 UTC	555	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c70/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: type,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 Data Ascii: .label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arg
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d Data Ascii: eof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0===
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 74 Data Ascii: turn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=funct
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: :!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable:
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 Data Ascii: initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max(
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d 22 Data Ascii: [e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]="
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b 65 Data Ascii: =5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[e
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 Data Ascii: nted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49789	104.18.32.137	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:13 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:13 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:13 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755f9f39be353f7-ATL
2024-04-16 17:43:13 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49788	34.111.140.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:13 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1056 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:13 UTC	1056	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 36 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 32 38 39 33 38 38 37 32 35 72 30 2e 38 31 39 30 37 32 32 38 31 39 38 33 33 36 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7260","visitors":[{"visitor_id":"oeu1713289388725r0.819072281983362","session_id":"AUTO","att
2024-04-16 17:43:13 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Tue, 16 Apr 2024 17:43:12 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: 9321c8f1-6c2c-402a-aaf2-5836e4ca046c x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49790	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:13 UTC	668	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=726&optin=disabled&elq1pcGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E
2024-04-16 17:43:13 UTC	471	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Set-Cookie: ELOQUA=GUID=6400A138232C428E87866AF383215C6E; domain=docusign.com; expires=Fri, 16-May-2025 17:43:13 GMT; path=/ P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:12 GMT Connection: close Content-Length: 49
2024-04-16 17:43:13 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49782	54.186.38.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:13 UTC	446	OUT	GET /f HTTP/1.1 Host: a.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:43:13 UTC	473	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:13 GMT Content-Type: application/json Content-Length: 59 Connection: close Server: DS-Arya Expires: Wed, 17 Apr 2024 17:43:13 GMT Cache-Control: max-age=86400 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Vary: Origin Set-Cookie: ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-16 17:43:13 UTC	59	IN	Data Raw: 7b 22 44 53 5f 41 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 44 53 5f 41 5f 43 22 3a 22 22 7d Data Ascii: {"DS_A":"305622db-cab4-46c0-8a17-15a582e0ed4c","DS_A_C":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49792	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:13 UTC	639	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:13 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:13 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8755f9f8098aad83-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 50749 Cache-Control: public, max-age=86400 Expires: Wed, 17 Apr 2024 17:43:13 GMT Last-Modified: Thu, 11 Apr 2024 13:35:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: B9OqkJSiUEn1cFTd3rpn0Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c18ccf4a-701e-0047-3b8a-8c52d8000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-16 17:43:13 UTC	467	IN	Data Raw: 37 63 31 38 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c18{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 Data Ascii: e and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some type
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a Data Ascii: "CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 c2 a0 20 c2 a0 59 6f 75 20 63 61 6e 20 73 65 74 20 Data Ascii: website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 63 35 35 64 39 31 39 64 2d 62 61 64 61 2d 34 30 32 35 2d 61 38 36 39 2d 35 64 34 65 38 65 36 36 65 64 65 66 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 41 57 53 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c Data Ascii: ry":null,"isThirdParty":false},{"id":"c55d919d-bada-4025-a869-5d4e8e66edef","Name":"AWSALBCORS","Host":"developers.docusign.com","IsSession":false,"Length":"7","description":"This cookie is managed by AWS and is used for load balancing.","DurationType":1,
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 53 61 6c 65 73 66 6f 72 63 65 20 43 6f 6f 6b 69 65 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 33 64 35 37 39 36 38 2d 64 34 38 31 2d 34 30 64 35 2d 62 65 33 37 2d 31 35 35 39 66 36 31 34 35 31 63 38 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 63 61 72 65 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 Data Ascii: sign.com","IsSession":false,"Length":"0","description":"Common Salesforce Cookie","DurationType":1,"category":null,"isThirdParty":false},{"id":"03d57968-d481-40d5-be37-1559f61451c8","Name":"session_id","Host":"careers.docusign.com","IsSession":true,"Lengt
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 72 79 20 63 6f 6f 6b 69 65 20 73 65 74 20 62 79 20 77 65 62 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 41 53 50 2e 4e 45 54 20 4d 56 43 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 74 6f 70 20 75 6e 61 75 74 68 6f 72 69 73 65 64 20 70 6f 73 74 69 6e 67 20 6f 66 20 63 6f 6e 74 65 6e 74 20 74 6f 20 61 20 77 65 62 73 69 74 65 2c 20 6b 6e 6f 77 6e 20 61 73 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 2e 20 49 74 20 68 6f 6c 64 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 69 73 20 64 65 73 74 72 6f 79 65 64 20 6f 6e 20 63 6c 6f 73 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 Data Ascii: ry cookie set by web applications built using ASP.NET MVC technologies. It is designed to stop unauthorised posting of content to a website, known as Cross-Site Request Forgery. It holds no information about the user and is destroyed on closing the browse
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 6d 61 74 63 68 65 73 20 63 72 69 74 65 72 69 61 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 62 6f 74 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 34 32 66 39 34 64 35 66 2d 34 35 65 66 2d 34 32 37 30 2d 39 66 34 62 2d 38 65 61 39 32 37 39 64 62 64 30 64 22 2c 22 4e 61 6d 65 22 3a 22 70 63 74 72 6b 22 2c 22 48 6f 73 74 22 3a 22 70 61 72 74 6e 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 74 6f 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 Data Ascii: matches criteria associated with bots.","DurationType":1,"category":null,"isThirdParty":false},{"id":"42f94d5f-45ef-4270-9f4b-8ea9279dbd0d","Name":"pctrk","Host":"partners.docusign.com","IsSession":false,"Length":"364","description":"Used to count page vi
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 Data Ascii: y when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"
2024-04-16 17:43:13 UTC	1369	IN	Data Raw: 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 65 72 76 69 63 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 74 6f 20 6f 75 72 20 70 61 67 65 73 2e 20 c2 a0 20 c2 a0 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 74 68 65 6e 20 73 6f 6d 65 20 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e Data Ascii: able the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49795	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	433	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	902	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:14 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8755f9fbcdddade7-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 36782 Cache-Control: public, max-age=86400 Expires: Wed, 17 Apr 2024 17:43:14 GMT Last-Modified: Thu, 11 Apr 2024 13:35:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: B9OqkJSiUEn1cFTd3rpn0Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5cbf69ac-601e-0080-248b-8cc685000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-16 17:43:14 UTC	467	IN	Data Raw: 37 63 31 38 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c18{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 Data Ascii: e and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some type
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a Data Ascii: "CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 c2 a0 20 c2 a0 59 6f 75 20 63 61 6e 20 73 65 74 20 Data Ascii: website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 63 35 35 64 39 31 39 64 2d 62 61 64 61 2d 34 30 32 35 2d 61 38 36 39 2d 35 64 34 65 38 65 36 36 65 64 65 66 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 41 57 53 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c Data Ascii: ry":null,"isThirdParty":false},{"id":"c55d919d-bada-4025-a869-5d4e8e66edef","Name":"AWSALBCORS","Host":"developers.docusign.com","IsSession":false,"Length":"7","description":"This cookie is managed by AWS and is used for load balancing.","DurationType":1,
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 53 61 6c 65 73 66 6f 72 63 65 20 43 6f 6f 6b 69 65 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 33 64 35 37 39 36 38 2d 64 34 38 31 2d 34 30 64 35 2d 62 65 33 37 2d 31 35 35 39 66 36 31 34 35 31 63 38 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 63 61 72 65 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 Data Ascii: sign.com","IsSession":false,"Length":"0","description":"Common Salesforce Cookie","DurationType":1,"category":null,"isThirdParty":false},{"id":"03d57968-d481-40d5-be37-1559f61451c8","Name":"session_id","Host":"careers.docusign.com","IsSession":true,"Lengt
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 72 79 20 63 6f 6f 6b 69 65 20 73 65 74 20 62 79 20 77 65 62 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 41 53 50 2e 4e 45 54 20 4d 56 43 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 74 6f 70 20 75 6e 61 75 74 68 6f 72 69 73 65 64 20 70 6f 73 74 69 6e 67 20 6f 66 20 63 6f 6e 74 65 6e 74 20 74 6f 20 61 20 77 65 62 73 69 74 65 2c 20 6b 6e 6f 77 6e 20 61 73 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 2e 20 49 74 20 68 6f 6c 64 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 69 73 20 64 65 73 74 72 6f 79 65 64 20 6f 6e 20 63 6c 6f 73 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 Data Ascii: ry cookie set by web applications built using ASP.NET MVC technologies. It is designed to stop unauthorised posting of content to a website, known as Cross-Site Request Forgery. It holds no information about the user and is destroyed on closing the browse
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6d 61 74 63 68 65 73 20 63 72 69 74 65 72 69 61 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 62 6f 74 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 34 32 66 39 34 64 35 66 2d 34 35 65 66 2d 34 32 37 30 2d 39 66 34 62 2d 38 65 61 39 32 37 39 64 62 64 30 64 22 2c 22 4e 61 6d 65 22 3a 22 70 63 74 72 6b 22 2c 22 48 6f 73 74 22 3a 22 70 61 72 74 6e 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 74 6f 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 Data Ascii: matches criteria associated with bots.","DurationType":1,"category":null,"isThirdParty":false},{"id":"42f94d5f-45ef-4270-9f4b-8ea9279dbd0d","Name":"pctrk","Host":"partners.docusign.com","IsSession":false,"Length":"364","description":"Used to count page vi
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 Data Ascii: y when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 65 72 76 69 63 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 74 6f 20 6f 75 72 20 70 61 67 65 73 2e 20 c2 a0 20 c2 a0 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 74 68 65 6e 20 73 6f 6d 65 20 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e Data Ascii: able the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49799	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	592	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb24468-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 10564 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755f9fbfbc07b95-ATL
2024-04-16 17:43:14 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49798	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 26411414-a01e-008f-34c2-7bb0e9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 47474 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755f9fbf8e86759-ATL
2024-04-16 17:43:14 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c76 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49800	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:14 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc146b4d-801e-000e-2d26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 10564 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755f9fc0b7917e7-ATL
2024-04-16 17:43:14 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-16 17:43:14 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49802	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	849	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=913125131.1713289393&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	838	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=913125131.1713289393&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49803	31.13.65.7	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-16 17:43:14 UTC	1453	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 29 2c 20 64 69 73 70 6c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), displ
2024-04-16 17:43:14 UTC	82	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 41 50 49 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 46 61 63 65 62 6f 6f 6b 2e 0a 2a 0a 2a 20 41 73 20 77 69 74 68 20 61 6e 79 20 73 6f 66 74 77 61 72 65 20 74 68 61 74 20 69 Data Ascii: hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and APIs provided by Facebook.** As with any software that i
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 61 3b 21 28 64 3d 28 61 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 64 3d 21 30 29 7b 63 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 3b 69 66 28 62 26 26 63 2e 6c 65 6e 67 74 68 Data Ascii: lled correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),a;!(d=(a=g.next()).done);d=!0){c.push(a.value);if(b&&c.length
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 61 5b 62 5d 3d 63 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 Data Ascii: ble:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,writable:!0}):a[b]=c;return a}function m(a){if(Array.isArra
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 45 76 65 6e 74 56 61 6c 69 64 61 74 69 6f 6e 22 Data Ascii: rn a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsEventValidation"
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6d 28 7b 74 79 70 65 3a 22 4e 4f 5f 45 56 45 4e 54 5f 4e 41 4d 45 22 7d 29 3b 76 61 72 20 63 3d 68 5b 61 5d 3b 72 65 74 75 72 6e 21 63 3f 6e 28 5b 7b 65 76 65 6e 74 4e 61 6d 65 3a 61 2c 74 79 70 65 3a 22 4e 4f 4e 53 54 41 4e 44 41 52 Data Ascii: i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return m({type:"NO_EVENT_NAME"});var c=h[a];return!c?n([{eventName:a,type:"NONSTANDAR
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 4f 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 26 26 62 28 29 3b 62 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 3d 74 68 69 73 2e 6c 69 73 74 65 6e 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 72 65 74 75 72 Data Ascii: }},{key:"listenOnce",value:function(a){var b=null,c=function(){b&&b();b=null;return a.apply(void 0,arguments)};b=this.listen(c);return b}},{key:"trigger",value:function(){var a=this;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];retur
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 3b 6c 2e 65 78 70 6f 72 74 73 3d 69 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 Data Ascii: ;l.exports=i})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBrowserPropertiesConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyp
2024-04-16 17:43:14 UTC	1500	IN	Data Raw: 75 6c 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 4f 72 4e 75 6d 62 65 72 28 29 29 2c 72 75 6c 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 4f 72 53 74 72 69 6e 67 28 29 29 7d 29 29 29 29 2c 76 61 6c 75 65 52 75 6c 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 72 75 6c 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 28 29 Data Ascii: ules:b.allowNull(b.arrayOf(b.allowNull(b.objectWithFields({id:b.allowNull(b.stringOrNumber()),rule:b.allowNull(b.objectOrString())})))),valueRules:b.allowNull(b.arrayOf(b.allowNull(b.objectWithFields({id:b.allowNull(b.string()),rule:b.allowNull(b.object()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49807	18.160.10.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	533	OUT	GET /1IEYtQv1.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	850	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 81322 Connection: close Date: Tue, 16 Apr 2024 17:43:15 GMT Last-Modified: Tue, 16 Apr 2024 11:34:44 GMT ETag: "a64476c6fe3674d0810193abbd925b08" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: Uw8d0l6_scFmnWvrtiOuVAS9xGAhBODg Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f57a09c5455a80253c61001d750462e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: OZcIki5YxpNNIXMHd06iXPZFINyE8a_zb-dRb-6hWIszvclFajCE2w== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-04-16 17:43:14 UTC	1425	IN	Data Raw: 76 61 72 20 44 65 6d 61 6e 64 62 61 73 65 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 2c 78 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 74 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 6f 29 29 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c Data Ascii: var Demandbase=window.Demandbase\|\|{};!function(d){"use strict";var N,x=this&&this.__spreadArray\|\|function(e,t,i){if(i\|\|2===arguments.length)for(var n,o=0,r=t.length;o<r;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.slice.call(t,0,o))[o]=t[o]);return e.concat(n\|\|
2024-04-16 17:43:14 UTC	16384	IN	Data Raw: 6e 7b 76 61 6c 75 65 3a 74 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 6c 2e 6c 61 62 65 6c 2b 2b 3b 61 3d 74 5b 31 5d 3b 74 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 74 3d 6c 2e 6f 70 73 2e 70 6f 70 28 29 3b 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 73 3d 30 3c 28 73 3d 6c 2e 74 72 79 73 29 2e 6c 65 6e 67 74 68 26 26 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 36 3d 3d 3d 74 5b 30 5d 7c 7c 32 3d 3d 3d 74 5b 30 5d 29 29 7b 6c 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 74 5b 30 5d 26 26 28 21 73 7c 7c 74 5b 31 5d 3e 73 5b 30 5d 26 26 74 5b 31 5d 3c 73 5b 33 5d 29 29 6c 2e 6c 61 62 65 6c 3d 74 5b 31 5d 3b 65 6c 73 65 20 69 66 28 36 3d 3d Data Ascii: n{value:t[1],done:!1};case 5:l.label++;a=t[1];t=[0];continue;case 7:t=l.ops.pop();l.trys.pop();continue;default:if(!(s=0<(s=l.trys).length&&s[s.length-1])&&(6===t[0]\|\|2===t[0])){l=0;continue}if(3===t[0]&&(!s\|\|t[1]>s[0]&&t[1]<s[3]))l.label=t[1];else if(6==
2024-04-16 17:43:14 UTC	16384	IN	Data Raw: 74 28 69 5b 72 5d 29 29 2c 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 4c 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 27 49 6e 76 61 6c 69 64 20 45 76 65 6e 74 3a 20 22 6c 69 73 74 65 6e 65 72 22 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 47 6f 74 20 28 27 2e 63 6f 6e 63 61 74 28 6f 2c 22 29 22 29 29 2c 21 31 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 4c 69 73 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 43 6f 6c 6c 65 63 74 69 6f 6e 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 69 6e 64 6f 77 Data Ascii: t(i[r])),!1;if("function"!=typeof o)return L.Utilities.Logging.log('Invalid Event: "listener" must be a function. Got ('.concat(o,")")),!1;n instanceof Node\|\|n instanceof NodeList\|\|n instanceof HTMLElement\|\|n instanceof HTMLCollection\|\|n instanceof Window
2024-04-16 17:43:14 UTC	16384	IN	Data Raw: 45 4e 54 52 59 5f 50 52 4f 4a 45 43 54 5f 49 44 3d 22 31 31 39 30 31 35 30 22 3b 74 2e 53 45 4e 54 52 59 5f 50 55 42 4c 49 43 5f 4b 45 59 3d 22 33 63 39 64 34 36 37 66 38 61 39 64 34 32 39 35 62 30 66 38 33 32 30 61 65 38 35 32 30 39 31 64 22 3b 74 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 3d 7b 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 69 67 6e 6f 72 61 62 6c 65 45 72 72 6f 72 73 3a 5b 5d 7d 3b 74 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 7b 7d 3b 74 2e 61 64 64 69 74 69 6f 6e 61 6c 45 72 72 6f 72 44 65 74 61 69 6c 73 3d 7b 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 2e 63 61 6c 6c 28 74 2c 74 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2c Data Ascii: ENTRY_PROJECT_ID="1190150";t.SENTRY_PUBLIC_KEY="3c9d467f8a9d4295b0f8320ae852091d";t.DEFAULT_CONFIGURATION={environment:"production",ignorableErrors:[]};t.configuration={};t.additionalErrorDetails={};i.prototype.mergeConfigs.call(t,t.DEFAULT_CONFIGURATION,
2024-04-16 17:43:14 UTC	16384	IN	Data Raw: 54 5f 4d 4f 44 45 5f 45 4e 41 42 4c 45 44 29 7c 7c 79 2e 43 6f 6e 66 69 67 2e 75 73 65 54 65 73 74 49 70 2c 74 65 73 74 4d 6f 64 65 56 61 6c 75 65 3a 79 2e 55 74 69 6c 69 74 69 65 73 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 28 74 68 69 73 2e 54 45 53 54 5f 4d 4f 44 45 5f 56 41 4c 55 45 29 7c 7c 79 2e 43 6f 6e 66 69 67 2e 74 65 73 74 49 70 7d 29 3b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 3b 79 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 2e 73 65 6e 64 28 65 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 49 50 41 50 49 50 61 72 61 6d 65 74 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 76 6f 69 64 Data Ascii: T_MODE_ENABLED)\|\|y.Config.useTestIp,testModeValue:y.Utilities.getQueryParam(this.TEST_MODE_VALUE)\|\|y.Config.testIp});this.initialized=!0}catch(e){this.initialized=!1;y.ErrorReporter.send(e)}};e.prototype.buildIPAPIParameters=function(n){return t(this,void
2024-04-16 17:43:14 UTC	4416	IN	Data Raw: 67 65 74 44 6f 6d 61 69 6e 2e 63 61 6c 6c 28 69 2e 43 6f 6e 66 69 67 29 3b 69 2e 55 74 69 6c 69 74 69 65 73 2e 4c 6f 67 67 69 6e 67 2e 6c 6f 67 28 22 57 61 72 6e 69 6e 67 3a 20 43 6f 6e 66 69 67 2e 67 65 74 44 6f 6d 61 69 6e 20 66 63 6e 20 6e 6f 74 20 64 65 66 69 6e 65 64 2e 22 29 3b 72 65 74 75 72 6e 22 67 65 74 44 6f 6d 61 69 6e 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 7d 3b 65 2e 6b 65 79 3d 69 2e 55 74 69 6c 69 74 69 65 73 2e 64 69 67 28 69 2c 22 43 6f 6e 66 69 67 22 2c 22 6b 65 79 22 29 7c 7c 69 2e 55 74 69 6c 69 74 69 65 73 2e 64 69 67 28 69 2c 22 43 6f 6e 66 69 67 22 2c 22 61 6e 61 6c 79 74 69 63 73 22 2c 22 6b 65 79 22 29 7c 7c 69 2e 55 74 69 6c 69 74 69 65 73 2e 64 69 67 28 69 2c 22 43 6f 6e 66 69 67 22 2c 22 61 Data Ascii: getDomain.call(i.Config);i.Utilities.Logging.log("Warning: Config.getDomain fcn not defined.");return"getDomain function is not defined"};e.key=i.Utilities.dig(i,"Config","key")\|\|i.Utilities.dig(i,"Config","analytics","key")\|\|i.Utilities.dig(i,"Config","a
2024-04-16 17:43:14 UTC	9945	IN	Data Raw: 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 74 5d 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 74 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 7c 7c 22 44 42 43 6f 6e 64 69 74 69 6f 6e 22 21 3d 3d 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 74 5d 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 29 26 26 74 68 69 73 2e 61 64 64 28 22 63 6f 6e 64 69 74 69 6f 6e 22 2c 74 68 69 73 2e 5f 61 6c 6c 43 6f 6e 64 69 74 69 6f 6e 73 5b 74 5d 29 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 68 69 73 2e 5f 61 6c 6c 53 65 Data Ascii: allConditions.hasOwnProperty(t)&&this._allConditions[t]&&(void 0===this._allConditions[t].constructor.prototype.name\|\|"DBCondition"!==this._allConditions[t].constructor.prototype.name)&&this.add("condition",this._allConditions[t]);for(var i in this._allSe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49806	151.101.12.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	528	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Tue, 16 Apr 2024 17:43:14 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-pdk-katl1840054-PDK X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-16 17:43:14 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49801	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:14 UTC	532	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:14 UTC	1704	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:14 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5 Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgQ1k3pP.GZrLN8cxBMbaGWGxHPBqRpKFEZohxpSqrICPlvVXmUo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgQ1k3pP.GZrLN8cxBMbaGWGxHPBqRpKFEZohxpSqrICPlvVXmUo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-16 17:43:14 UTC	6496	IN	Data Raw: 31 39 35 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 39 72 65 4d 6f 4b 54 48 4c 37 59 4a 65 57 78 48 31 77 50 74 34 4c 74 6a 65 64 66 44 6c 71 71 45 32 56 6a 30 77 4c 57 70 73 61 73 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 1958(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas" var userIdCookie
2024-04-16 17:43:14 UTC	11514	IN	Data Raw: 32 63 66 32 0d 0a 74 72 75 65 26 69 73 5f 6a 73 3d 74 72 75 65 26 68 6f 73 74 3d 22 2b 67 6c 6f 62 61 6c 73 2e 68 6f 73 74 2b 22 26 75 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 26 64 65 73 74 69 6e 61 74 69 6f 6e 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 28 65 2c 6f 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 6f 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 6f 29 74 2b 3d 22 26 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 73 61 5f 63 6f 6e 76 5f 64 61 74 61 5f 22 2b 6e 29 2c 74 2b 3d 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 Data Ascii: 2cf2true&is_js=true&host="+globals.host+"&uid="+encodeURIComponent(e)+"&destination="+encodeURIComponent(a)+"&tip="+tip)}}}function loadUniversalPixel(e,o){if(e){var t="";if(o)for(var n in o)t+="&"+encodeURIComponent("sa_conv_data_"+n),t+="="+encodeURIC
2024-04-16 17:43:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49809	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:15 UTC	781	OUT	GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:15 UTC	407	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3600 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 1202 Content-Type: text/html; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:15 GMT Etag: "10c460a7d0b096d5b5072c73672e31b6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM02Z8DQ00E5C7JGBSA6R8D Connection: close
2024-04-16 17:43:15 UTC	779	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6e 6f 73 63 72 69 70 74 20 64 61 74 61 2d 6e 2d 63 73 73 3d 22 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 22 20 6e 6f 6d 6f 64 75 6c 65 3d 22 22 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 6f 6c 79 66 69 6c 6c 73 2d 63 36 37 61 37 35 64 31 62 36 66 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f
2024-04-16 17:43:15 UTC	423	IN	Data Raw: 78 74 2f 73 74 61 74 69 63 2f 5a 78 72 46 38 73 61 6e 46 6d 33 57 30 50 4e 35 6e 5f 6c 68 50 2f 5f 62 75 69 6c 64 4d 61 6e 69 66 65 73 74 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 5a 78 72 46 38 73 61 6e 46 6d 33 57 30 50 4e 35 6e 5f 6c 68 50 2f 5f 73 73 67 4d 61 6e 69 66 65 73 74 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 5f 5f 6e 65 78 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 69 64 3d 22 5f 5f 4e 45 58 54 5f 44 41 54 41 5f 5f 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 Data Ascii: xt/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js" defer=""></script><script src="/_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js" defer=""></script></head><body><div id="__next"></div><script id="__NEXT_DATA__" type="application/json">{"props":{"page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49811	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:15 UTC	722	OUT	GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:15 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:15 GMT Content-Type: image/png Content-Length: 1886 Connection: close Content-MD5: Zresqcf+A4+LUF7W9IJlYA== Last-Modified: Wed, 10 Apr 2024 06:17:13 GMT ETag: 0x8DC5925DCBA60C8 x-ms-request-id: 14d277d7-001e-00a9-250e-8bf8f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 11924 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa026c2144dc-ATL
2024-04-16 17:43:15 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 21 08 06 00 00 00 3b ce 52 2f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 f3 49 44 41 54 78 01 ed 5b cd 4e 1c 47 10 ae 81 35 17 1f b2 be f8 66 79 78 02 c3 13 30 7b 8f e5 c5 92 2d 47 39 30 28 0f e0 dd 27 60 79 02 b0 94 3b cb 29 46 b2 0d 48 dc 77 78 02 88 72 8d b4 63 e5 94 5c 20 57 5b d0 e9 62 aa 4d 4d d3 7f 93 9d e5 c7 cc 27 15 3b d3 dd 55 dd 53 53 5d 5d 5d 3d 00 34 68 30 05 44 b6 0a d1 ed b6 a1 d5 5a 80 50 41 1f 3e 64 d0 a0 01 a1 65 ad 99 9d 4d e0 fc 7c 17 02 21 5e be 3c 85 28 da 83 07 0f d6 a3 f7 ef 73 a8 19 42 88 44 fe ac 48 5a 8f a2 28 87 7b 0a a9 07 9c ec 6d a9 83 0c 6e Data Ascii: PNGIHDR!;R/pHYssRGBgAMAaIDATx[NG5fyx0{-G90('`y;)FHwxrc\ W[bMM';USS]]]=4h0DZPA>deM\|!^<(sBDHZ({mn
2024-04-16 17:43:15 UTC	1343	IN	Data Raw: 9d 1d 21 f3 57 2e 1a bb fa 56 a9 04 47 0f 1b a8 44 ad 2c d1 15 29 69 57 b8 b1 45 0a b5 8d 63 c3 c3 3f d6 f9 b5 fa 81 e3 f9 38 52 ad 6e ec e9 77 c4 fb 95 d7 0b 82 e9 cb d0 5f 22 e9 c4 21 6f 4d 94 f5 39 66 bc 03 56 be 45 b2 c6 16 39 d8 47 02 0e 4c 16 63 bd 7e 5d fc da 3c 97 c3 aa 45 31 1b 30 37 15 83 1d 3d 47 9d f2 32 3e 19 88 54 12 2a aa a3 cf 34 54 22 58 bc 36 43 0c 45 ee a8 53 47 72 b6 c2 b8 13 49 f8 72 e7 a9 df 1e 58 52 2f a2 08 3b 46 1e 79 03 08 8b 79 53 70 eb 04 df dd 2e 8d cb b8 53 9d 7c 57 88 c6 f5 f8 b1 b9 ee fc fc 5f 07 27 26 fb 62 76 8f 03 7c 07 c5 ce a7 0f 85 db f5 c1 25 e3 9d 26 03 db 95 e2 49 51 24 1c 53 0b ff ba 8f 7f 02 24 50 1e 37 f6 85 41 f9 a2 a4 65 49 db bc 2e d0 98 f5 53 12 fe 2c 28 2f a7 f2 2a 71 af 2e 83 1b 91 be cc 97 30 dd 5d a1 21 Data Ascii: !W.VGD,)iWEc?8Rnw_"!oM9fVE9GLc~]<E107=G2>T4T"X6CESGrIrXR/;FyySp.S\|W_'&bv\|%&IQ$S$P7AeI.S,(/q.0]!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49816	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:15 UTC	609	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:15 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:15 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 15 Apr 2024 02:25:09 GMT ETag: 0x8DC5CF345B557AF x-ms-request-id: 22254558-301e-000b-4e67-8fc2e8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73861 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa031ba84546-ATL
2024-04-16 17:43:15 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-16 17:43:15 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-16 17:43:15 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-16 17:43:15 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-16 17:43:15 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49810	142.251.15.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	808	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=913125131.1713289393&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:16 UTC	791	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 16-Apr-2024 17:58:16 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49812	68.67.153.60	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:16 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Tue, 16 Apr 2024 17:43:16 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-16 17:43:16 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49819	35.201.112.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	572	OUT	GET /s/settings/12BP4E/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:16 UTC	937	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPp0lag6A0cYGRIdwc-XQpsOsBHtBboXrKGC1KZq7f6UuppiranobkkD9mGbetTJIknHJwE x-goog-generation: 1713288908887509 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1402 Content-Encoding: gzip x-goog-hash: crc32c=oW8s6w== x-goog-hash: md5=GMJMRY6txg8c6krjGpeB9w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1402 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Tue, 16 Apr 2024 17:36:06 GMT Expires: Tue, 16 Apr 2024 17:51:06 GMT Cache-Control: public,max-age=900,no-transform Last-Modified: Tue, 16 Apr 2024 17:35:08 GMT ETag: "18c24c458eadc60f1cea4ae31a9781f7" Content-Type: application/json Age: 430 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:16 UTC	318	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff c4 57 4d 6f db 3c 12 be ef af 58 30 97 be 81 68 e4 a3 bb 28 0c e4 90 a6 05 b2 68 bb cd 36 29 f6 90 b8 c5 98 1c 49 8c 29 52 3b a4 fc 81 c0 ff 7d 41 4a 76 24 45 4e ec c5 02 ef c9 d6 33 f3 70 c8 99 87 e4 f0 89 5d 3e c2 f2 df e0 45 8e 8e 8d ef 27 09 fb 88 39 cc 95 a5 5b 95 19 d0 b7 e8 bd 32 99 63 e3 27 f6 59 63 81 c6 7f d4 56 cc 82 f3 13 bb 45 8d c2 5b 62 63 a6 4c 59 f9 a3 92 6c 61 af ac c4 7b 20 05 5c a2 13 a4 a6 28 a7 ab 8b 07 16 8d c2 4a fc 4c 64 e9 81 4d 6a 27 0d 53 d4 17 0f ec 26 98 ff 1a ec c1 64 a0 c0 0d e7 aa c1 fc aa 0c 98 c7 a5 7f 60 13 96 b0 7a 8e 61 2e a7 c9 d9 64 3d 59 27 ec 93 2d 40 99 38 df ed df 7b b6 58 2c 46 d2 8a ca a9 cc 8c 84 2d 58 c2 32 fb 3a 32 aa 66 2f bd 46 50 f5 c0 62 39 e0 85 ae 0f c2 80 d7 94 7a 60 da Data Ascii: WMo<X0h(h6)I)R;}AJv$EN3p]>E'9[2c'YcVE[bcLYla{ \(JLdMj'S&d`za.d=Y'-@8{X,F-X2:2f/FPb9z`
2024-04-16 17:43:16 UTC	1084	IN	Data Raw: 4c d8 dd aa 44 36 3e 5d 27 bb c8 b9 92 12 cd fe d4 7b a8 bc 15 b6 28 35 7a fc 75 21 04 df 9f 3b b5 72 b5 d3 f9 bc e7 3c 4a 1d c7 a5 d0 55 ac ca 7e 01 5a 1c be 50 3e b7 95 e7 a2 61 b6 c6 08 f9 7d 6d 88 02 dc 6c 67 cc b3 1d 84 7d 03 0e f1 2b f3 6a c8 a1 d4 d4 94 18 f4 ad 88 43 f4 5c 1d 98 d6 69 50 e1 41 0c 42 61 49 ee 35 c3 3e 3d f7 85 de bb 00 5a 99 fd 53 e7 fc 4a ef 5e 78 df 7b 0a ee 35 e7 c9 76 8f 7e c2 14 89 50 36 87 7a 83 7e 41 2c 1d 1b 9b 4a eb 2d f6 7c f8 77 22 1d cd 41 2b 09 5e 59 c3 c3 81 cb 35 38 ff 3b 9c ca ac 9f 5a 65 a2 6f 1f 3f ea 9e f7 d7 ca f8 be cb 9f 70 69 84 1c 7d a7 ac 7d af 5d 7a 4f 6a 5a 79 8c 07 9b 56 ce c7 64 dc 01 65 e8 d9 f8 24 61 77 90 b1 31 3b 66 09 fb 67 48 c0 98 39 12 2c 61 97 22 a4 a7 11 c0 0b 77 95 52 70 6e 73 a4 6d d3 4e 06 Data Ascii: LD6>]'{(5zu!;r<JU~ZP>a}mlg}+jC\iPABaI5>=ZSJ^x{5v~P6z~A,J-\|w"A+^Y58;Zeo?pi}}]zOjZyVde$aw1;fgH9,a"wRpnsmN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49829	64.233.177.154	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	907	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&gjid=1577734252&_gid=379038570.1713289394&_u=YGBACEAABAAAACgAI~&z=476889903 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-16 17:43:16 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.docusign.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Tue, 16 Apr 2024 17:43:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:16 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49830	64.233.177.154	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	849	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&cid=426113818.1713289394&gtm=45je44f0v879027428z8856130670za200&aip=1&dma=0&gcs=G111&gcd=13v3v3v3t5&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-16 17:43:16 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Tue, 16 Apr 2024 17:43:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49826	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	667	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1241 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 3777 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:16 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QNS7KEK28Z81FJBSTV Connection: close
2024-04-16 17:43:17 UTC	766	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 65 66 65 72 72 65 64 2c 6c 65 61 66 50 72 6f 74 6f 74 79 70 65 73 2c 67 65 74 50 72 6f 74 6f 2c 69 6e 73 74 61 6c 6c 65 64 43 68 75 6e 6b 73 2c 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 2c 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 5f 63 61 63 68 65 5f 5f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 7b 76 61 72 20 63 61 63 68 65 64 4d 6f 64 75 6c 65 3d 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 5f 63 61 63 68 65 5f 5f 5b 6d 6f 64 75 6c Data Ascii: !function(){"use strict";var deferred,leafPrototypes,getProto,installedChunks,webpackJsonpCallback,chunkLoadingGlobal,__webpack_modules__={},__webpack_module_cache__={};function __webpack_require__(moduleId){var cachedModule=__webpack_module_cache__[modul
2024-04-16 17:43:17 UTC	2372	IN	Data Raw: 3d 64 65 66 65 72 72 65 64 5b 69 2d 31 5d 3b 64 65 66 65 72 72 65 64 5b 69 5d 3d 5b 63 68 75 6e 6b 49 64 73 2c 66 6e 2c 70 72 69 6f 72 69 74 79 5d 3b 72 65 74 75 72 6e 7d 66 6f 72 28 76 61 72 20 6e 6f 74 46 75 6c 66 69 6c 6c 65 64 3d 31 2f 30 2c 69 3d 30 3b 69 3c 64 65 66 65 72 72 65 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 66 6f 72 28 76 61 72 20 63 68 75 6e 6b 49 64 73 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 30 5d 2c 66 6e 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 31 5d 2c 70 72 69 6f 72 69 74 79 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 32 5d 2c 66 75 6c 66 69 6c 6c 65 64 3d 21 30 2c 6a 3d 30 3b 6a 3c 63 68 75 6e 6b 49 64 73 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 6e 6f 74 46 75 6c 66 69 6c 6c 65 64 3e 3d 70 72 69 6f 72 69 74 79 26 26 4f 62 6a 65 63 74 2e 6b 65 Data Ascii: =deferred[i-1];deferred[i]=[chunkIds,fn,priority];return}for(var notFulfilled=1/0,i=0;i<deferred.length;i++){for(var chunkIds=deferred[i][0],fn=deferred[i][1],priority=deferred[i][2],fulfilled=!0,j=0;j<chunkIds.length;j++)notFulfilled>=priority&&Object.ke
2024-04-16 17:43:17 UTC	538	IN	Data Raw: 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 6d 6f 72 65 4d 6f 64 75 6c 65 73 2c 6d 6f 64 75 6c 65 49 64 29 26 26 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 5b 6d 6f 64 75 6c 65 49 64 5d 3d 6d 6f 72 65 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 3b 69 66 28 72 75 6e 74 69 6d 65 29 76 61 72 20 72 65 73 75 6c 74 3d 72 75 6e 74 69 6d 65 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7d 66 6f 72 28 70 61 72 65 6e 74 43 68 75 6e 6b 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 26 26 70 61 72 65 6e 74 43 68 75 6e 6b 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 3b 69 3c 63 68 75 6e 6b 49 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 63 68 75 6e 6b 49 64 3d 63 68 75 6e 6b 49 64 73 5b 69 5d 2c 5f 5f 77 65 62 Data Ascii: _require__.o(moreModules,moduleId)&&(__webpack_require__.m[moduleId]=moreModules[moduleId]);if(runtime)var result=runtime(__webpack_require__)}for(parentChunkLoadingFunction&&parentChunkLoadingFunction(data);i<chunkIds.length;i++)chunkId=chunkIds[i],__web
2024-04-16 17:43:17 UTC	101	IN	Data Raw: 61 64 69 6e 67 47 6c 6f 62 61 6c 2e 70 75 73 68 3d 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 6e 75 6c 6c 2c 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 2e 70 75 73 68 2e 62 69 6e 64 28 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 29 29 7d 28 29 3b Data Ascii: adingGlobal.push=webpackJsonpCallback.bind(null,chunkLoadingGlobal.push.bind(chunkLoadingGlobal))}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49831	31.13.65.7	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	1311	OUT	GET /signals/config/357123711145934?v=2.9.153&r=stable&domain=www.docusign.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-16 17:43:17 UTC	1454	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 29 2c 20 64 69 73 70 6c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), displ
2024-04-16 17:43:17 UTC	81	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 41 50 49 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 46 61 63 65 62 6f 6f 6b 2e 0a 2a 0a 2a 20 41 73 20 77 69 74 68 20 61 6e 79 20 73 6f 66 74 77 61 72 65 20 74 68 61 74 20 Data Ascii: hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and APIs provided by Facebook.** As with any software that
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3a 22 40 40 70 72 6f 74 6f 74 79 70 65 22 29 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 61 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 Data Ascii: on"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype:"@@prototype")?"symbol":typeof a},h=function(){function a(
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 Data Ascii: f(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__f
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 5b 30 5d 7d 3b 72 65 74 75 72 6e 5b 66 2c 69 5d 7d 6b 2e 65 78 70 6f 72 74 73 3d 65 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 Data Ascii: :k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})[0]};return[f,i]}k.exports=e})();return k.exports}(a,b,c,d)});f.ensu
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 2b 28 6e 2e 74 79 70 65 3d 3d 3d 76 6f 69 64 20 30 3f 22 22 3a 6e 2e 74 79 70 65 29 3b 6f 3d 6a 2e 69 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c Data Ascii: All(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""+n.tagName+(n.type===void 0?"":n.type);o=j.incrementAndGet(o);if(o>d\|
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 3d 3d 3d 22 40 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f Data Ascii: rn a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c==="@")return f.userOrDomain==="domain"?null:a({},f,{userOrDomain:"do
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 65 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 65 5b 67 5d 21 3d 3d 61 5b 67 5d 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 2c 7b 6b 65 79 3a 22 70 61 73 Data Ascii: if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;for(var g=0;g<e.length;g++)if(e[g]!==a[g])return!0;return!1}},{key:"pas
2024-04-16 17:43:17 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 61 72 67 65 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 6e 28 63 2e 74 61 72 67 65 74 29 3a 6e 75 6c 6c 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 69 66 28 70 28 65 29 29 72 65 74 75 72 6e 3b 69 66 28 Data Ascii: Modules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.target instanceof Node?n(c.target):null;if(e!=null){if(p(e))return;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49828	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	669	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 85032 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 142036 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:16 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QY6G7RE473GBWH4R6Z Connection: close
2024-04-16 17:43:17 UTC	763	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(__unused_webpack_module,exports,__webpack_require__){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. *
2024-04-16 17:43:17 UTC	2372	IN	Data Raw: 6c 70 66 75 6c 20 77 61 72 6e 69 6e 67 73 2e 22 7d 76 61 72 20 64 61 3d 6e 65 77 20 53 65 74 2c 65 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 68 61 28 61 2c 62 29 2c 68 61 28 61 2b 22 43 61 70 74 75 72 65 22 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 2c 62 29 7b 66 6f 72 28 65 61 5b 61 5d 3d 62 2c 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 64 61 2e 61 64 64 28 62 5b 61 5d 29 7d 76 61 72 20 69 61 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 6a 61 3d 4f 62 6a 65 63 74 2e Data Ascii: lpful warnings."}var da=new Set,ea={};function fa(a,b){ha(a,b),ha(a+"Capture",b)}function ha(a,b){for(ea[a]=b,a=0;a<b.length;a++)da.add(b[a])}var ia=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),ja=Object.
2024-04-16 17:43:17 UTC	538	IN	Data Raw: 62 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 62 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 63 26 26 30 3d 3d 3d 63 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 62 29 7b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 73 79 6d 62 6f 6c 22 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 69 66 28 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 63 29 72 65 74 75 72 6e 21 63 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3b 72 65 74 75 72 6e 22 64 61 74 61 2d 22 21 3d 3d 28 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 61 3b 64 65 66 61 75 6c Data Ascii: b,c,d){if(null==b\|\|function(a,b,c,d){if(null!==c&&0===c.type)return!1;switch(typeof b){case"function":case"symbol":return!0;case"boolean":if(d)return!1;if(null!==c)return!c.acceptsBooleans;return"data-"!==(a=a.toLowerCase().slice(0,5))&&"aria-"!==a;defaul
2024-04-16 17:43:17 UTC	4744	IN	Data Raw: 28 6e 75 6c 6c 3d 3d 3d 63 3f 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 22 22 2b 63 29 29 29 3a 65 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 61 5b 65 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 63 3f 33 21 3d 3d 65 2e 74 79 70 65 26 26 22 22 3a 63 3a 28 62 3d 65 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 2c 64 3d 65 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 2c 6e 75 6c 6c 3d 3d 3d 63 3f 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 63 3d 33 3d 3d 3d 28 65 3d 65 2e 74 79 70 65 29 7c 7c 34 3d 3d 3d 65 26 26 21 30 3d 3d 3d 63 3f 22 22 3a 22 22 2b 63 2c 64 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 64 2c 62 2c 63 Data Ascii: (null===c?a.removeAttribute(b):a.setAttribute(b,""+c))):e.mustUseProperty?a[e.propertyName]=null===c?3!==e.type&&"":c:(b=e.attributeName,d=e.attributeNamespace,null===c?a.removeAttribute(b):(c=3===(e=e.type)\|\|4===e&&!0===c?"":""+c,d?a.setAttributeNS(d,b,c
2024-04-16 17:43:17 UTC	5930	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 62 3d 61 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 63 3d 62 2e 67 65 74 56 61 6c 75 65 28 29 2c 64 3d 22 22 3b 72 65 74 75 72 6e 20 61 26 26 28 64 3d 54 61 28 61 29 3f 61 2e 63 68 65 63 6b 65 64 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3a 61 2e 76 61 6c 75 65 29 2c 28 61 3d 64 29 21 3d 3d 63 26 26 28 62 2e 73 65 74 56 61 6c 75 65 28 61 29 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 61 7c 7c 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 76 6f 69 64 20 30 29 29 29 72 Data Ascii: unction Wa(a){if(!a)return!1;var b=a._valueTracker;if(!b)return!0;var c=b.getValue(),d="";return a&&(d=Ta(a)?a.checked?"true":"false":a.value),(a=d)!==c&&(b.setValue(a),!0)}function Xa(a){if(void 0===(a=a\|\|("undefined"!=typeof document?document:void 0)))r
2024-04-16 17:43:17 UTC	7116	IN	Data Raw: 62 3d 5b 61 5d 3a 7a 62 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 46 62 28 29 7b 69 66 28 7a 62 29 7b 76 61 72 20 61 3d 7a 62 2c 62 3d 41 62 3b 69 66 28 41 62 3d 7a 62 3d 6e 75 6c 6c 2c 42 62 28 61 29 2c 62 29 66 6f 72 28 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 42 62 28 62 5b 61 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 48 62 28 29 7b 7d 76 61 72 20 49 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4a 62 28 61 2c 62 2c 63 29 7b 69 66 28 49 62 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 49 62 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 47 62 28 61 2c 62 2c 63 29 7d 66 69 6e 61 6c 6c 79 7b 49 62 3d 21 31 2c 28 6e 75 6c 6c 21 3d 3d 7a 62 7c 7c 6e 75 6c 6c 21 3d 3d 41 Data Ascii: b=[a]:zb=a}function Fb(){if(zb){var a=zb,b=Ab;if(Ab=zb=null,Bb(a),b)for(a=0;a<b.length;a++)Bb(b[a])}}function Gb(a,b){return a(b)}function Hb(){}var Ib=!1;function Jb(a,b,c){if(Ib)return a(b,c);Ib=!0;try{return Gb(a,b,c)}finally{Ib=!1,(null!==zb\|\|null!==A
2024-04-16 17:43:17 UTC	8302	IN	Data Raw: 2c 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 4d 63 3d 54 63 28 4d 63 2c 61 2c 62 2c 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 6f 76 65 72 22 3a 72 65 74 75 72 6e 20 4e 63 3d 54 63 28 4e 63 2c 61 2c 62 2c 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 76 61 72 20 66 3d 65 2e 70 6f 69 6e 74 65 72 49 64 3b 72 65 74 75 72 6e 20 4f 63 2e 73 65 74 28 66 2c 54 63 28 4f 63 2e 67 65 74 28 66 29 7c 7c 6e 75 6c 6c 2c 61 2c 62 2c 63 2c 64 2c 65 29 29 2c 21 30 3b 63 61 73 65 22 67 6f 74 70 6f 69 6e 74 65 72 63 61 70 74 75 72 65 22 3a 72 65 74 75 72 6e 20 66 3d 65 2e 70 6f 69 6e 74 65 72 49 64 2c 50 63 2e 73 65 74 28 66 2c 54 63 28 50 63 2e 67 65 74 28 66 29 Data Ascii: ,c,d,e),!0;case"dragenter":return Mc=Tc(Mc,a,b,c,d,e),!0;case"mouseover":return Nc=Tc(Nc,a,b,c,d,e),!0;case"pointerover":var f=e.pointerId;return Oc.set(f,Tc(Oc.get(f)\|\|null,a,b,c,d,e)),!0;case"gotpointercapture":return f=e.pointerId,Pc.set(f,Tc(Pc.get(f)
2024-04-16 17:43:17 UTC	6178	IN	Data Raw: 29 3b 66 6f 72 28 61 3d 30 3b 63 3b 29 7b 69 66 28 33 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 64 3d 61 2b 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 61 3c 3d 62 26 26 64 3e 3d 62 29 72 65 74 75 72 6e 7b 6e 6f 64 65 3a 63 2c 6f 66 66 73 65 74 3a 62 2d 61 7d 3b 61 3d 64 7d 61 3a 7b 66 6f 72 28 3b 63 3b 29 7b 69 66 28 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 62 72 65 61 6b 20 61 7d 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 63 3d 76 6f 69 64 20 30 7d 63 3d 4a 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 58 61 28 29 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 Data Ascii: );for(a=0;c;){if(3===c.nodeType){if(d=a+c.textContent.length,a<=b&&d>=b)return{node:c,offset:b-a};a=d}a:{for(;c;){if(c.nextSibling){c=c.nextSibling;break a}c=c.parentNode}c=void 0}c=Je(c)}}function Me(){for(var a=window,b=Xa();b instanceof a.HTMLIFrameEle
2024-04-16 17:43:17 UTC	10674	IN	Data Raw: 3d 22 62 6c 75 72 22 2c 6b 3d 46 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 65 66 6f 72 65 62 6c 75 72 22 3a 63 61 73 65 22 61 66 74 65 72 62 6c 75 72 22 3a 6b 3d 46 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 69 63 6b 22 3a 69 66 28 32 3d 3d 3d 63 2e 62 75 74 74 6f 6e 29 62 72 65 61 6b 20 61 3b 63 61 73 65 22 61 75 78 63 6c 69 63 6b 22 3a 63 61 73 65 22 64 62 6c 63 6c 69 63 6b 22 3a 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 6d 6f 75 73 65 6d 6f 76 65 22 3a 63 61 73 65 22 6d 6f 75 73 65 75 70 22 3a 63 61 73 65 22 6d 6f 75 73 65 6f 75 74 22 3a 63 61 73 65 22 6d 6f 75 73 65 6f 76 65 72 22 3a 63 61 73 65 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 3a 6b 3d 42 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 72 61 67 22 3a 63 61 73 65 22 64 72 61 67 Data Ascii: ="blur",k=Fd;break;case"beforeblur":case"afterblur":k=Fd;break;case"click":if(2===c.button)break a;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":k=Bd;break;case"drag":case"drag
2024-04-16 17:43:17 UTC	11860	IN	Data Raw: 65 68 79 64 72 61 74 65 64 3a 62 2c 74 72 65 65 43 6f 6e 74 65 78 74 3a 63 2c 72 65 74 72 79 4c 61 6e 65 3a 31 30 37 33 37 34 31 38 32 34 7d 2c 28 63 3d 42 67 28 31 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 29 29 2e 73 74 61 74 65 4e 6f 64 65 3d 62 2c 63 2e 72 65 74 75 72 6e 3d 61 2c 61 2e 63 68 69 6c 64 3d 63 2c 78 67 3d 61 2c 79 67 3d 6e 75 6c 6c 2c 21 30 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 67 28 61 29 7b 72 65 74 75 72 6e 20 30 21 3d 28 31 26 61 2e 6d 6f 64 65 29 26 26 30 3d 3d 28 31 32 38 26 61 2e 66 6c 61 67 73 29 7d 66 75 6e 63 74 69 6f 6e 20 45 67 28 61 29 7b 69 66 28 49 29 7b 76 61 72 20 62 3d 79 67 3b 69 66 28 62 29 7b 76 61 72 20 63 3d 62 3b 69 66 28 21 43 67 28 61 2c 62 29 29 7b 69 66 28 44 67 Data Ascii: ehydrated:b,treeContext:c,retryLane:1073741824},(c=Bg(18,null,null,0)).stateNode=b,c.return=a,a.child=c,xg=a,yg=null,!0);default:return!1}}function Dg(a){return 0!=(1&a.mode)&&0==(128&a.flags)}function Eg(a){if(I){var b=yg;if(b){var c=b;if(!Cg(a,b)){if(Dg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49824	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	664	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	424	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 124492 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:17 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QZX7PXF66DSKQRBW3A Connection: close
2024-04-16 17:43:17 UTC	762	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 53 74 65 70 28 67 65 6e 2c 72 65 73 6f 6c 76 65 2c 72 65 6a 65 63 74 2c 5f 6e 65 78 74 2c 5f 74 68 72 6f 77 2c 6b 65 79 2c 61 72 67 29 7b 74 72 79 7b 76 61 72 20 69 6e 66 6f 3d 67 65 6e 5b 6b 65 79 5d 28 61 72 67 29 2c 76 61 6c 75 65 3d 69 6e 66 6f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 72 65 6a 65 63 74 28 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(__unused_webpack_module,exports){"use strict";function asyncGeneratorStep(gen,resolve,reject,_next,_throw,key,arg){try{var info=gen[key](arg),value=info.value}catch(error){reject(
2024-04-16 17:43:17 UTC	2372	IN	Data Raw: 6e 64 73 5f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 6f 75 72 63 65 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 73 6f 75 72 63 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 6f 75 72 63 65 2c 6b 65 79 29 26 26 28 74 61 72 67 65 74 5b 6b 65 79 5d 3d 73 6f 75 72 63 65 5b 6b 65 79 5d 29 7d 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 65 78 70 6f 72 74 73 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: nds_=Object.assign\|\|function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source)Object.prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target}).apply(this,arguments)}exports.Z=function(){r
2024-04-16 17:43:17 UTC	538	IN	Data Raw: 6f 66 20 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 74 2c 74 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 50 72 6f 6d 69 73 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 73 6f 6c 76 65 28 74 28 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 73 6f 6c 76 65 28 74 28 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6f 7d 29 7d 29 7d 29 2c 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 7c 7c 28 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 Data Ascii: of t)return this.then(t,t);var r=this.constructor\|\|Promise;return this.then(function(o){return r.resolve(t()).then(function(){return o})},function(o){return r.resolve(t()).then(function(){throw o})})}),Object.fromEntries\|\|(Object.fromEntries=function(t){r
2024-04-16 17:43:17 UTC	4744	IN	Data Raw: 6e 67 53 6c 61 73 68 28 5f 61 64 64 50 61 74 68 50 72 65 66 69 78 2e 61 64 64 50 61 74 68 50 72 65 66 69 78 28 70 61 74 68 2c 22 22 29 29 7d 3b 76 61 72 20 5f 61 64 64 50 61 74 68 50 72 65 66 69 78 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 31 33 35 29 2c 5f 6e 6f 72 6d 61 6c 69 7a 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 37 30 30 29 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 65 78 70 6f 72 74 73 Data Ascii: ngSlash(_addPathPrefix.addPathPrefix(path,""))};var _addPathPrefix=__webpack_require__(4135),_normalizeTrailingSlash=__webpack_require__(2700);("function"==typeof exports.default\|\|"object"==typeof exports.default&&null!==exports.default)&&void 0===exports
2024-04-16 17:43:17 UTC	5930	IN	Data Raw: 29 2c 63 6c 6f 6e 65 54 61 67 2e 6e 6f 6e 63 65 3d 6e 6f 6e 63 65 2c 6e 6f 6e 63 65 3d 3d 3d 6f 6c 64 54 61 67 2e 6e 6f 6e 63 65 26 26 6f 6c 64 54 61 67 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 63 6c 6f 6e 65 54 61 67 29 7d 7d 72 65 74 75 72 6e 20 6f 6c 64 54 61 67 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 6e 65 77 54 61 67 29 7d 65 78 70 6f 72 74 73 2e 44 4f 4d 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 3d 44 4f 4d 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 2c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 Data Ascii: ),cloneTag.nonce=nonce,nonce===oldTag.nonce&&oldTag.isEqualNode(cloneTag)}}return oldTag.isEqualNode(newTag)}exports.DOMAttributeNames=DOMAttributeNames,("function"==typeof exports.default\|\|"object"==typeof exports.default&&null!==exports.default)&&void 0
2024-04-16 17:43:17 UTC	7116	IN	Data Raw: 6e 64 65 72 45 72 72 6f 72 28 72 65 6e 64 65 72 45 72 72 6f 72 50 72 6f 70 73 29 7b 6c 65 74 7b 41 70 70 2c 65 72 72 7d 3d 72 65 6e 64 65 72 45 72 72 6f 72 50 72 6f 70 73 3b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 72 72 29 2c 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 41 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 65 78 63 65 70 74 69 6f 6e 20 68 61 73 20 6f 63 63 75 72 72 65 64 2c 20 73 65 65 20 68 65 72 65 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 78 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 6d 65 73 73 61 67 65 73 2f 63 6c 69 65 6e 74 2d 73 69 64 65 2d 65 78 63 65 70 74 69 6f 6e 2d 6f 63 63 75 72 72 65 64 22 29 2c 70 61 67 65 4c 6f 61 64 65 72 2e 6c 6f 61 64 50 61 67 65 28 22 2f 5f 65 72 72 6f 72 Data Ascii: nderError(renderErrorProps){let{App,err}=renderErrorProps;return console.error(err),console.error("A client-side exception has occurred, see here for more info: https://nextjs.org/docs/messages/client-side-exception-occurred"),pageLoader.loadPage("/_error
2024-04-16 17:43:17 UTC	8302	IN	Data Raw: 45 6e 74 72 79 70 6f 69 6e 74 2e 65 72 72 6f 72 3b 43 61 63 68 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 70 61 67 65 45 6e 74 72 79 70 6f 69 6e 74 2e 63 6f 6d 70 6f 6e 65 6e 74 7d 63 61 74 63 68 28 65 72 72 6f 72 31 29 7b 69 6e 69 74 69 61 6c 45 72 72 3d 5f 69 73 45 72 72 6f 72 2e 67 65 74 50 72 6f 70 65 72 45 72 72 6f 72 28 65 72 72 6f 72 31 29 7d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 52 45 4c 4f 41 44 52 45 41 44 59 26 26 28 79 69 65 6c 64 20 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 52 45 4c 4f 41 44 52 45 41 44 59 28 69 6e 69 74 69 61 6c 44 61 74 61 2e 64 79 6e 61 6d 69 63 49 64 73 29 29 2c 65 78 70 6f 72 74 73 2e 72 6f 75 74 65 72 3d 72 6f 75 74 65 72 3d 5f 72 6f 75 74 65 72 2e 63 72 65 61 74 65 52 6f 75 74 65 72 28 69 6e 69 74 69 61 6c 44 61 74 Data Ascii: Entrypoint.error;CachedComponent=pageEntrypoint.component}catch(error1){initialErr=_isError.getProperError(error1)}window.__NEXT_PRELOADREADY&&(yield window.__NEXT_PRELOADREADY(initialData.dynamicIds)),exports.router=router=_router.createRouter(initialDat
2024-04-16 17:43:17 UTC	6188	IN	Data Raw: 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 77 69 6e 64 6f 77 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 64 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 64 29 7d 3b 65 78 70 6f 72 74 73 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3d 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 Data Ascii: elIdleCallback="undefined"!=typeof self&&self.cancelIdleCallback&&self.cancelIdleCallback.bind(window)\|\|function(id){return clearTimeout(id)};exports.cancelIdleCallback=cancelIdleCallback,("function"==typeof exports.default\|\|"object"==typeof exports.defau
2024-04-16 17:43:17 UTC	10674	IN	Data Raw: 65 6c 6c 65 64 3d 21 31 3b 70 2e 74 68 65 6e 28 72 3d 3e 7b 63 61 6e 63 65 6c 6c 65 64 3d 21 30 2c 72 65 73 6f 6c 76 65 28 72 29 7d 29 2e 63 61 74 63 68 28 72 65 6a 65 63 74 29 2c 5f 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 28 29 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 63 61 6e 63 65 6c 6c 65 64 7c 7c 72 65 6a 65 63 74 28 65 72 72 29 7d 2c 6d 73 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6c 69 65 6e 74 42 75 69 6c 64 4d 61 6e 69 66 65 73 74 28 29 7b 69 66 28 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 Data Ascii: elled=!1;p.then(r=>{cancelled=!0,resolve(r)}).catch(reject),_requestIdleCallback.requestIdleCallback(()=>setTimeout(()=>{cancelled\|\|reject(err)},ms))})}function getClientBuildManifest(){if(self.__BUILD_MANIFEST)return Promise.resolve(self.__BUILD_MANIFEST
2024-04-16 17:43:17 UTC	11860	IN	Data Raw: 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 43 6f 6d 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 29 7b 66 75 6e 63 74 69 6f 6e 20 57 69 74 68 52 6f 75 74 65 72 57 72 61 70 70 65 72 28 70 72 6f 70 73 29 7b 72 65 74 75 72 6e 20 5f 72 65 61 63 74 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 6f 6d 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 72 6f 75 74 65 72 3a 5f 72 6f 75 74 65 72 2e 75 73 65 52 6f 75 74 65 72 28 29 7d 2c 70 72 6f 70 73 29 29 7d 72 65 74 75 72 6e 20 57 69 74 68 52 6f 75 74 65 72 57 72 61 70 70 65 72 2e 67 65 Data Ascii: ineProperty(exports,"__esModule",{value:!0}),exports.default=function(ComposedComponent){function WithRouterWrapper(props){return _react.default.createElement(ComposedComponent,Object.assign({router:_router.useRouter()},props))}return WithRouterWrapper.ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49825	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	670	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 103284 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 509 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:16 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QZQNFBMA3BZKHK3SJK Connection: close
2024-04-16 17:43:17 UTC	509	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 32 39 37 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return __webpack_require__(4297)}])}},functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49823	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	663	OUT	GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 29062 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:17 GMT Etag: "bd342ef2d4a80457fa21dbc3be6ee406-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QSECNEWNS6JPVTE09Y Connection: close
2024-04-16 17:43:17 UTC	763	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 35 5d 2c 7b 34 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 7b 48 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 72 61 67 6d 65 6e 74 7d 2c 74 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 73 78 7d 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[885],{4811:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.d(__webpack_exports__,{HY:function(){return Fragment},tZ:function(){return jsx},
2024-04-16 17:43:17 UTC	2372	IN	Data Raw: 3d 3d 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 79 7c 7c 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 79 2c 74 68 69 73 2e 74 61 67 73 3d 5b 5d 2c 74 68 69 73 2e 63 74 72 3d 30 2c 74 68 69 73 2e 6e 6f 6e 63 65 3d 6f 70 74 69 6f 6e 73 2e 6e 6f 6e 63 65 2c 74 68 69 73 2e 6b 65 79 3d 6f 70 74 69 6f 6e 73 2e 6b 65 79 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 74 68 69 73 2e 70 72 65 70 65 6e 64 3d 6f 70 74 69 6f 6e 73 2e 70 72 65 70 65 6e 64 2c 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 3d 6f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 2c 74 68 69 73 2e 62 65 66 6f 72 65 3d 6e 75 6c 6c 7d 76 61 72 20 5f 70 72 6f 74 6f 3d 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ==options.speedy\|\|options.speedy,this.tags=[],this.ctr=0,this.nonce=options.nonce,this.key=options.key,this.container=options.container,this.prepend=options.prepend,this.insertionPoint=options.insertionPoint,this.before=null}var _proto=StyleSheet.prototyp
2024-04-16 17:43:17 UTC	538	IN	Data Raw: 3a 63 61 73 65 20 31 32 36 3a 63 61 73 65 20 35 39 3a 63 61 73 65 20 31 32 33 3a 63 61 73 65 20 31 32 35 3a 72 65 74 75 72 6e 20 34 3b 63 61 73 65 20 35 38 3a 72 65 74 75 72 6e 20 33 3b 63 61 73 65 20 33 34 3a 63 61 73 65 20 33 39 3a 63 61 73 65 20 34 30 3a 63 61 73 65 20 39 31 3a 72 65 74 75 72 6e 20 32 3b 63 61 73 65 20 34 31 3a 63 61 73 65 20 39 33 3a 72 65 74 75 72 6e 20 31 7d 72 65 74 75 72 6e 20 30 7d 66 75 6e 63 74 69 6f 6e 20 61 6c 6c 6f 63 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 6c 69 6e 65 3d 63 6f 6c 75 6d 6e 3d 31 2c 54 6f 6b 65 6e 69 7a 65 72 5f 6c 65 6e 67 74 68 3d 55 74 69 6c 69 74 79 5f 73 74 72 6c 65 6e 28 63 68 61 72 61 63 74 65 72 73 3d 76 61 6c 75 65 29 2c 70 6f 73 69 74 69 6f 6e 3d 30 2c 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 65 Data Ascii: :case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function alloc(value){return line=column=1,Tokenizer_length=Utility_strlen(characters=value),position=0,[]}function de
2024-04-16 17:43:17 UTC	4744	IN	Data Raw: 3f 74 79 70 65 2b 32 3a 34 30 3d 3d 3d 74 79 70 65 3f 74 79 70 65 2b 31 3a 74 79 70 65 29 2c 55 74 69 6c 69 74 79 5f 73 75 62 73 74 72 28 63 68 61 72 61 63 74 65 72 73 2c 62 65 67 69 6e 2c 65 6e 64 29 29 2e 74 72 69 6d 28 29 7d 76 61 72 20 45 6e 75 6d 5f 4d 53 3d 22 2d 6d 73 2d 22 2c 45 6e 75 6d 5f 4d 4f 5a 3d 22 2d 6d 6f 7a 2d 22 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 3d 22 2d 77 65 62 6b 69 74 2d 22 2c 43 4f 4d 4d 45 4e 54 3d 22 63 6f 6d 6d 22 2c 45 6e 75 6d 5f 52 55 4c 45 53 45 54 3d 22 72 75 6c 65 22 2c 45 6e 75 6d 5f 44 45 43 4c 41 52 41 54 49 4f 4e 3d 22 64 65 63 6c 22 2c 45 6e 75 6d 5f 4b 45 59 46 52 41 4d 45 53 3d 22 40 6b 65 79 66 72 61 6d 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 53 65 72 69 61 6c 69 7a 65 72 5f 73 65 72 69 61 6c 69 7a 65 28 63 68 69 Data Ascii: ?type+2:40===type?type+1:type),Utility_substr(characters,begin,end)).trim()}var Enum_MS="-ms-",Enum_MOZ="-moz-",Enum_WEBKIT="-webkit-",COMMENT="comm",Enum_RULESET="rule",Enum_DECLARATION="decl",Enum_KEYFRAMES="@keyframes";function Serializer_serialize(chi
2024-04-16 17:43:17 UTC	5930	IN	Data Raw: 35 35 34 3a 72 65 74 75 72 6e 20 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 76 61 6c 75 65 2c 2f 28 5b 5e 2d 5d 29 28 74 72 61 6e 73 66 6f 72 6d 29 2f 67 2c 22 24 31 22 2b 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 32 22 29 2b 76 61 6c 75 65 3b 63 61 73 65 20 36 31 38 37 3a 72 65 74 75 72 6e 20 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 76 61 6c 75 65 2c 2f 28 7a 6f 6f 6d 2d 7c 67 72 61 62 29 2f 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 31 22 29 2c 2f 28 69 6d 61 67 65 2d 73 65 74 29 2f 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 31 22 29 2c 76 61 6c 75 65 2c 22 22 29 2b 76 61 6c 75 65 3b 63 61 73 65 20 35 34 39 Data Ascii: 554:return Enum_WEBKIT+Utility_replace(value,/([^-])(transform)/g,"$1"+Enum_WEBKIT+"$2")+value;case 6187:return Utility_replace(Utility_replace(Utility_replace(value,/(zoom-\|grab)/,Enum_WEBKIT+"$1"),/(image-set)/,Enum_WEBKIT+"$1"),value,"")+value;case 549
2024-04-16 17:43:17 UTC	2037	IN	Data Raw: 69 6f 6e 2e 73 74 79 6c 65 73 2b 22 3b 22 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 65 72 67 65 64 50 72 6f 70 73 2c 72 65 67 69 73 74 65 72 65 64 2c 6f 62 6a 29 7b 76 61 72 20 73 74 72 69 6e 67 3d 22 22 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 62 6a 29 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6f 62 6a 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 73 74 72 69 6e 67 2b 3d 68 61 6e 64 6c 65 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 28 6d 65 72 67 65 64 50 72 6f 70 73 2c 72 65 67 69 73 74 65 72 65 64 2c 6f 62 6a 5b 69 5d 29 2b 22 3b 22 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 5f 6b 65 79 20 69 6e 20 6f 62 6a 29 7b 76 61 72 20 76 61 6c 75 65 3d 6f 62 6a 5b 5f 6b 65 79 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 76 61 Data Ascii: ion.styles+";"}return function(mergedProps,registered,obj){var string="";if(Array.isArray(obj))for(var i=0;i<obj.length;i++)string+=handleInterpolation(mergedProps,registered,obj[i])+";";else for(var _key in obj){var value=obj[_key];if("object"!=typeof va
2024-04-16 17:43:17 UTC	4096	IN	Data Raw: 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 26 26 72 65 61 63 74 5f 6e 61 6d 65 73 70 61 63 65 4f 62 6a 65 63 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 2c 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 41 6c 77 61 79 73 57 69 74 68 53 79 6e 63 46 61 6c 6c 62 61 63 6b 3d 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 63 72 65 61 74 65 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 28 29 7d 3b 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 7c 7c 72 65 61 63 74 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3b 76 61 72 20 65 6d 6f 74 69 6f 6e 5f 65 6c 65 6d 65 6e 74 5f 36 61 38 38 33 64 61 39 5f 62 72 6f 77 73 65 72 5f 65 73 6d 5f 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: t.useInsertionEffect&&react_namespaceObject.useInsertionEffect,useInsertionEffectAlwaysWithSyncFallback=useInsertionEffect\|\|function(create){return create()};useInsertionEffect\|\|react.useLayoutEffect;var emotion_element_6a883da9_browser_esm_hasOwnProperty
2024-04-16 17:43:17 UTC	5851	IN	Data Raw: 72 61 63 74 65 72 73 31 3d 22 22 2c 6c 65 6e 67 74 68 3d 70 73 65 75 64 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 38 3a 6c 65 6e 67 74 68 3d 31 2b 55 74 69 6c 69 74 79 5f 73 74 72 6c 65 6e 28 63 68 61 72 61 63 74 65 72 73 31 29 2c 70 72 6f 70 65 72 74 79 3d 70 72 65 76 69 6f 75 73 3b 64 65 66 61 75 6c 74 3a 69 66 28 76 61 72 69 61 62 6c 65 3c 31 29 7b 69 66 28 31 32 33 3d 3d 63 68 61 72 61 63 74 65 72 31 29 2d 2d 76 61 72 69 61 62 6c 65 3b 65 6c 73 65 20 69 66 28 31 32 35 3d 3d 63 68 61 72 61 63 74 65 72 31 26 26 30 3d 3d 76 61 72 69 61 62 6c 65 2b 2b 26 26 31 32 35 3d 3d 28 63 68 61 72 61 63 74 65 72 3d 70 6f 73 69 74 69 6f 6e 3e 30 3f 55 74 69 6c 69 74 79 5f 63 68 61 72 61 74 28 63 68 61 72 61 63 74 65 72 73 2c 2d 2d 70 6f 73 69 74 69 6f 6e 29 3a 30 2c Data Ascii: racters1="",length=pseudo;break;case 58:length=1+Utility_strlen(characters1),property=previous;default:if(variable<1){if(123==character1)--variable;else if(125==character1&&0==variable++&&125==(character=position>0?Utility_charat(characters,--position):0,
2024-04-16 17:43:17 UTC	2731	IN	Data Raw: 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 35 37 33 29 7d 2c 39 39 32 31 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 2f 2a 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 20 76 31 36 2e 31 33 2e 31 0a 20 2a 20 72 65 61 63 74 2d 69 73 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e Data Ascii: ack_require__(3573)},9921:function(__unused_webpack_module,exports){"use strict";/** @license React v16.13.1 * react-is.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license foun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49822	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	671	OUT	GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1241 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 19293 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:16 GMT Etag: "38b66efda4b7a2f4a37d3065793a65e2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM030QY7GKCBZV3804A8KPX Connection: close
2024-04-16 17:43:17 UTC	765	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 34 5d 2c 7b 35 32 33 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 64 72 69 66 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 39 33 38 29 7d 5d 29 7d 2c 35 39 33 38 3a 66 75 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[194],{5237:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/drift",function(){return __webpack_require__(5938)}])},5938:fu
2024-04-16 17:43:17 UTC	2372	IN	Data Raw: 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 2e 48 59 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 5f 65 6d 6f 74 69 6f 6e 5f 72 65 61 63 74 5f 6a 73 78 5f 72 75 6e 74 69 6d 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 2e 74 5a 29 28 6e 65 78 74 5f 73 63 72 69 70 74 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 30 5f 5f 5f 64 65 66 61 75 6c 74 28 29 2c 7b 61 73 79 6e 63 3a 21 30 2c 63 72 6f 73 73 4f 72 69 67 69 6e 3a 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 64 72 69 66 74 74 2e 63 6f 6d 2f 63 6f 6e 64 75 63 74 6f 72 22 7d 29 2c 28 30 2c 5f 65 6d 6f 74 69 6f 6e 5f 72 65 61 63 74 5f 6a 73 78 5f 72 Data Ascii: __WEBPACK_IMPORTED_MODULE_1__.HY,{children:[(0,_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_1__.tZ)(next_script__WEBPACK_IMPORTED_MODULE_0___default(),{async:!0,crossOrigin:"anonymous",src:"https://js.driftt.com/conductor"}),(0,_emotion_react_jsx_r
2024-04-16 17:43:17 UTC	538	IN	Data Raw: 31 2c 5c 6e 20 20 20 20 20 20 22 6e 5c 78 65 33 6f 22 3a 31 2c 5c 6e 20 20 20 20 20 20 22 6e 65 65 22 3a 31 2c 5c 6e 20 20 20 20 20 20 22 6e 65 69 6e 22 3a 31 5c 6e 20 20 20 20 7d 3b 5c 6e 5c 6e 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 54 72 61 6e 73 66 65 72 54 6f 53 75 70 70 6f 72 74 4c 69 6e 6b 28 73 61 6e 69 74 69 7a 65 64 54 65 78 74 29 7b 5c 6e 20 20 2f 2a 5c 6e 20 20 20 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 73 6f 20 69 74 20 67 65 74 73 20 70 61 73 73 65 64 20 74 68 65 20 6c 6f 63 61 6c 65 20 74 68 61 74 20 74 68 65 20 70 65 72 73 6f 6e 20 69 73 20 65 78 65 63 75 74 69 6e 67 20 69 6e 5c 6e 20 20 2a 2f 5c 6e 20 20 72 65 74 75 72 6e 20 74 72 61 6e 73 66 65 72 54 6f 53 75 70 70 Data Ascii: 1,\n "n\xe3o":1,\n "nee":1,\n "nein":1\n };\n\nfunction getInternationalTransferToSupportLink(sanitizedText){\n /\n will have to change this so it gets passed the locale that the person is executing in\n /\n return transferToSupp
2024-04-16 17:43:17 UTC	4744	IN	Data Raw: 6c 6c 79 20 69 74 20 73 68 6f 75 6c 64 20 62 65 20 73 6f 6d 65 20 74 79 70 65 20 6f 66 20 66 6c 61 67 20 74 68 65 79 20 68 61 76 65 20 6f 6e 20 74 68 65 69 72 20 73 69 64 65 2e 2e 2e 20 62 75 74 20 75 6e 74 69 6c 20 74 68 65 79 20 74 65 6c 6c 20 75 73 5c 6e 20 20 20 20 73 75 63 68 20 74 68 69 73 20 69 73 20 77 68 61 74 20 77 65 20 67 6f 74 2e 2e 2e 5c 6e 5c 6e 20 20 20 20 57 65 20 6e 6f 74 69 63 65 64 20 74 68 61 74 20 77 68 65 6e 20 61 20 63 65 72 74 61 69 6e 20 65 6c 65 6d 65 6e 74 20 68 61 73 20 61 20 63 65 72 74 61 69 6e 20 63 6c 61 73 73 20 74 68 61 74 20 63 61 6e 20 74 65 6c 6c 20 75 73 20 69 66 20 69 74 20 68 61 73 5c 6e 20 20 20 20 63 6f 6e 73 65 6e 74 20 74 6f 20 63 68 61 74 20 6f 72 20 6e 6f 74 2e 2e 2e 5c 6e 20 20 2a 2f 5c 6e 20 20 76 61 72 20 Data Ascii: lly it should be some type of flag they have on their side... but until they tell us\n such this is what we got...\n\n We noticed that when a certain element has a certain class that can tell us if it has\n consent to chat or not...\n */\n var
2024-04-16 17:43:17 UTC	5930	IN	Data Raw: 76 65 72 73 61 74 69 6f 6e 5c 27 5c 6e 20 20 20 20 20 20 20 20 5d 2e 69 6e 64 65 78 4f 66 28 65 76 65 6e 74 29 20 3e 20 2d 31 5c 6e 20 20 20 20 20 20 29 20 26 26 5c 6e 20 20 20 20 20 20 65 76 65 6e 74 44 61 74 61 20 26 26 20 5c 6e 20 20 20 20 20 20 65 76 65 6e 74 44 61 74 61 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 5c 6e 20 20 20 20 29 7b 5c 6e 20 20 20 20 20 20 2f 2a 5c 6e 20 20 20 20 20 20 20 20 77 65 20 61 72 65 20 73 65 74 74 69 6e 67 20 74 68 65 20 70 6c 61 79 62 6f 6f 6b 49 64 20 68 65 72 65 20 74 6f 20 61 6e 20 73 63 6f 70 65 20 6c 65 76 65 6c 20 76 61 72 20 73 6f 20 77 65 20 63 61 6e 20 75 73 65 20 69 6e 20 6f 74 68 65 72 20 63 61 73 65 73 20 74 68 61 74 20 77 65 20 6e 65 65 64 5c 6e 20 20 20 20 20 20 20 20 74 6f 20 66 6f 72 63 65 20 74 68 65 20 Data Ascii: versation\'\n ].indexOf(event) > -1\n ) &&\n eventData && \n eventData.interactionId\n ){\n /*\n we are setting the playbookId here to an scope level var so we can use in other cases that we need\n to force the
2024-04-16 17:43:17 UTC	4944	IN	Data Raw: 20 20 20 20 20 20 77 65 20 61 72 65 20 70 61 73 73 69 6e 67 20 74 68 65 20 63 6f 75 6e 74 72 79 20 63 6f 64 65 20 74 68 61 74 20 74 68 65 20 70 61 72 65 6e 74 20 77 69 6e 64 6f 77 20 77 69 6c 6c 20 67 65 74 20 66 72 6f 6d 20 63 61 6c 6c 69 6e 67 20 74 68 65 20 63 61 72 6d 65 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 73 65 72 76 69 63 65 2e 2e 2e 20 77 65 20 77 61 6e 74 20 74 6f 20 67 65 74 20 74 68 69 73 20 74 6f 20 70 61 73 73 20 61 73 20 61 6e 20 61 74 74 72 69 62 75 74 65 20 66 6f 72 20 74 68 65 20 6f 6e 20 74 68 65 20 75 73 65 72 2e 2e 2e 5c 6e 20 20 20 20 20 20 20 20 2a 2f 5c 6e 20 20 20 20 20 20 20 20 70 61 73 73 65 64 43 61 72 6d 65 6e 43 6f 75 6e 74 72 79 43 6f 64 65 20 3d 20 28 75 72 6c 53 65 61 72 63 68 50 61 72 61 6d 73 4f 62 6a 65 63 74 2e 67 65 Data Ascii: we are passing the country code that the parent window will get from calling the carmen\n service... we want to get this to pass as an attribute for the on the user...\n */\n passedCarmenCountryCode = (urlSearchParamsObject.ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49834	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	728	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:16 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-16 17:43:17 UTC	958	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 4305 Connection: close Date: Tue, 16 Apr 2024 17:43:17 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 15 Apr 2024 17:43:16 GMT Vary: Accept-Encoding, Origin Request-ID: 90a8c102-ec37-47bf-ac74-05ad5e87c220 X-Cache: Miss from cloudfront Via: 1.1 2471dc85b4653dba04b4f8777ff7da54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: LNfsnWknC_tisY5L0Ur6iRZ9zHX0QXkxmcdQ22DIS5DvZHTQTGO-WA==
2024-04-16 17:43:17 UTC	4305	IN	Data Raw: 7b 22 68 71 22 3a 7b 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 69 6f 6e 61 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 64 65 6d 61 6e 64 62 61 73 65 5f 73 69 64 22 3a 39 34 34 33 30 31 32 31 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 27 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 42 69 6f 74 65 63 68 22 2c 22 73 75 62 5f 69 6e 64 75 73 74 72 79 22 3a Data Ascii: {"hq":{"company_name":"Institutul National De Cercetare - Dezvoltare in Informatica - Ici Bucurest","demandbase_sid":94430121,"marketing_alias":"Institutul Nat'l De Cercetare - Dezvoltare in Informatica - Ici Bucurest","industry":"Biotech","sub_industry":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49832	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	1243	OUT	GET /sa.css HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:43:17 UTC	222	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:16 GMT Content-Type: text/css Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-16 17:43:17 UTC	65	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 73 61 2d 75 69 64 3a 20 27 30 2d 35 37 34 62 32 30 38 33 2d 65 36 34 34 2d 35 35 61 66 2d 34 65 62 38 2d 39 35 33 36 30 30 65 32 31 65 35 35 27 3b 0a 7d Data Ascii: :root { --sa-uid: '0-574b2083-e644-55af-4eb8-953600e21e55';}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49833	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	560	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	1320	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:16 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000 Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCC08fqwBjABOgT87-jmQgTkiCKI.xGFKxYZbgdwradJ%2BYr2dIPZV3EYQqTpaAMhs8PIV%2FUM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCC08fqwBjABOgT87-jmQgTkiCKI.xGFKxYZbgdwradJ%2BYr2dIPZV3EYQqTpaAMhs8PIV%2FUM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-16 17:43:17 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49836	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 2afaf4cb-101e-0033-69c3-7b6628000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 47613 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa0b7f497b98-ATL
2024-04-16 17:43:17 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c76 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49837	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	386	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	809	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb19052-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 29039 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa0b7b2e5080-ATL
2024-04-16 17:43:17 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49838	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc145aa7-801e-000e-2a26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 49499 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa0b8c841389-ATL
2024-04-16 17:43:17 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49839	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	486	OUT	GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: image/png Content-Length: 1886 Connection: close Content-MD5: Zresqcf+A4+LUF7W9IJlYA== Last-Modified: Wed, 10 Apr 2024 06:17:13 GMT ETag: 0x8DC5925DCBA60C8 x-ms-request-id: 14d277d7-001e-00a9-250e-8bf8f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 11926 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa0b8942678b-ATL
2024-04-16 17:43:17 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 21 08 06 00 00 00 3b ce 52 2f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 f3 49 44 41 54 78 01 ed 5b cd 4e 1c 47 10 ae 81 35 17 1f b2 be f8 66 79 78 02 c3 13 30 7b 8f e5 c5 92 2d 47 39 30 28 0f e0 dd 27 60 79 02 b0 94 3b cb 29 46 b2 0d 48 dc 77 78 02 88 72 8d b4 63 e5 94 5c 20 57 5b d0 e9 62 aa 4d 4d d3 7f 93 9d e5 c7 cc 27 15 3b d3 dd 55 dd 53 53 5d 5d 5d 3d 00 34 68 30 05 44 b6 0a d1 ed b6 a1 d5 5a 80 50 41 1f 3e 64 d0 a0 01 a1 65 ad 99 9d 4d e0 fc 7c 17 02 21 5e be 3c 85 28 da 83 07 0f d6 a3 f7 ef 73 a8 19 42 88 44 fe ac 48 5a 8f a2 28 87 7b 0a a9 07 9c ec 6d a9 83 0c 6e Data Ascii: PNGIHDR!;R/pHYssRGBgAMAaIDATx[NG5fyx0{-G90('`y;)FHwxrc\ W[bMM';USS]]]=4h0DZPA>deM\|!^<(sBDHZ({mn
2024-04-16 17:43:17 UTC	1343	IN	Data Raw: 9d 1d 21 f3 57 2e 1a bb fa 56 a9 04 47 0f 1b a8 44 ad 2c d1 15 29 69 57 b8 b1 45 0a b5 8d 63 c3 c3 3f d6 f9 b5 fa 81 e3 f9 38 52 ad 6e ec e9 77 c4 fb 95 d7 0b 82 e9 cb d0 5f 22 e9 c4 21 6f 4d 94 f5 39 66 bc 03 56 be 45 b2 c6 16 39 d8 47 02 0e 4c 16 63 bd 7e 5d fc da 3c 97 c3 aa 45 31 1b 30 37 15 83 1d 3d 47 9d f2 32 3e 19 88 54 12 2a aa a3 cf 34 54 22 58 bc 36 43 0c 45 ee a8 53 47 72 b6 c2 b8 13 49 f8 72 e7 a9 df 1e 58 52 2f a2 08 3b 46 1e 79 03 08 8b 79 53 70 eb 04 df dd 2e 8d cb b8 53 9d 7c 57 88 c6 f5 f8 b1 b9 ee fc fc 5f 07 27 26 fb 62 76 8f 03 7c 07 c5 ce a7 0f 85 db f5 c1 25 e3 9d 26 03 db 95 e2 49 51 24 1c 53 0b ff ba 8f 7f 02 24 50 1e 37 f6 85 41 f9 a2 a4 65 49 db bc 2e d0 98 f5 53 12 fe 2c 28 2f a7 f2 2a 71 af 2e 83 1b 91 be cc 97 30 dd 5d a1 21 Data Ascii: !W.VGD,)iWEc?8Rnw_"!oM9fVE9GLc~]<E107=G2>T4T"X6CESGrIrXR/;FyySp.S\|W_'&bv\|%&IQ$S$P7AeI.S,(/q.0]!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49840	104.19.178.52	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 15 Apr 2024 02:25:09 GMT ETag: 0x8DC5CF345B557AF x-ms-request-id: 22254558-301e-000b-4e67-8fc2e8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73863 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8755fa0b8b258831-ATL
2024-04-16 17:43:17 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-16 17:43:17 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-16 17:43:17 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49846	34.96.71.22	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	696	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	511	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:17 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 32 39 31 30 30 35 39 37 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 31 63 31 34 31 35 39 30 2d 31 61 37 36 2d 34 65 38 31 2d 38 39 63 61 2d 39 65 64 62 33 62 32 61 32 65 62 66 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49847	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	582	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	664	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCLXx-rAGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=UP63ShKle3cNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:43:17 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:43:17 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49845	104.244.42.197	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	849	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	552	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:16 GMT perf: 7469935968 server: tsa_b set-cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef; Max-Age=63072000; Expires=Thu, 16 Apr 2026 17:43:17 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2014616c52405249 strict-transport-security: max-age=0 x-response-time: 81 x-connection-hash: 7139724ef749cbdbb9e5a885eb896d94dcbd76d6cccf3d132f101c92e6cc482d connection: close
2024-04-16 17:43:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49844	104.244.42.67	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	866	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	1050	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:16 GMT perf: 7469935968 server: tsa_b set-cookie: guest_id_marketing=v1%3A171328939708541225; Max-Age=63072000; Expires=Thu, 16 Apr 2026 17:43:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171328939708541225; Max-Age=63072000; Expires=Thu, 16 Apr 2026 17:43:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; Max-Age=63072000; Expires=Thu, 16 Apr 2026 17:43:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171328939708541225; Max-Age=63072000; Expires=Thu, 16 Apr 2026 17:43:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: dbd0ad89da4f63d7 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 98918352342a6673c2c83d4ffad76a12123271b8e4abeec22ece5dbe16eeda2c connection: close
2024-04-16 17:43:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49852	35.201.112.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	366	OUT	GET /s/settings/12BP4E/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	944	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpxgfg7sKZuSnjCqD6xevni8J7C3uskZvbO1lBSp8RyzMq3tnB-EECROqoPjih16ONKLe--NpFp3Q x-goog-generation: 1713288609106114 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1402 Content-Encoding: gzip x-goog-hash: crc32c=jWMyTw== x-goog-hash: md5=4EeX0vUdU0R4pEPU5AFF7g== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1402 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Tue, 16 Apr 2024 17:32:26 GMT Expires: Tue, 16 Apr 2024 17:47:26 GMT Cache-Control: public,max-age=900,no-transform Last-Modified: Tue, 16 Apr 2024 17:30:09 GMT ETag: "e04797d2f51d534478a443d4e40145ee" Content-Type: application/json Age: 651 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:17 UTC	311	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff c4 57 4d 6f db 3c 12 be ef af 58 30 97 be 81 68 e4 a3 bb 28 0c e4 90 a6 05 b2 68 bb cd 36 29 f6 90 b8 c5 98 1c 49 8c 29 52 3b a4 fc 81 c0 ff 7d 41 4a 76 24 45 4e ec c5 02 ef c9 d6 33 f3 70 c8 99 87 e4 f0 89 5d 3e c2 f2 df e0 45 8e 8e 8d ef 27 09 fb 88 39 cc 95 a5 5b 95 19 d0 b7 e8 bd 32 99 63 e3 27 f6 59 63 81 c6 7f d4 56 cc 82 f3 13 bb 45 8d c2 5b 62 63 a6 4c 59 f9 a3 92 6c 61 af ac c4 7b 20 05 5c a2 13 a4 a6 28 a7 ab 8b 07 16 8d c2 4a fc 4c 64 e9 81 4d 6a 27 0d 53 d4 17 0f ec 26 98 ff 1a ec c1 64 a0 c0 0d e7 aa c1 fc aa 0c 98 c7 a5 7f 60 13 96 b0 7a 8e 61 2e 67 c9 e9 64 3d 59 27 ec 93 2d 40 99 38 df ed df 7b b6 58 2c 46 d2 8a ca a9 cc 8c 84 2d 58 c2 32 fb 3a 32 aa 66 2f bd 46 50 f5 c0 62 39 e0 85 ae 0f c2 80 d7 94 7a 60 da Data Ascii: WMo<X0h(h6)I)R;}AJv$EN3p]>E'9[2c'YcVE[bcLYla{ \(JLdMj'S&d`za.gd=Y'-@8{X,F-X2:2f/FPb9z`
2024-04-16 17:43:17 UTC	1091	IN	Data Raw: e3 d0 78 36 4e 41 3b 4c d8 dd aa 44 36 3e 5d 27 bb c8 b9 92 12 cd fe d4 7b a8 bc 15 b6 28 35 7a fc 75 21 04 df 9f 3b b5 72 b5 d3 f9 bc e7 3c 4a 1d c7 a5 d0 55 ac ca 7e 01 5a 1c be 50 3e b7 95 e7 a2 61 b6 c6 08 f9 7d 6d 88 02 dc 6c 67 cc b3 1d 84 7d 03 0e f1 2b f3 6a c8 a1 d4 d4 94 18 f4 ad 88 43 f4 5c 1d 98 d6 69 50 e1 41 0c 42 61 49 ee 35 c3 3e 3d f7 85 de bb 00 5a 99 fd 53 e7 fc 4a ef 5e 78 df 7b 0a ee 35 e7 c9 76 8f 7e c2 14 89 50 36 87 7a 83 7e 41 2c 1d 1b 9b 4a eb 2d f6 7c f8 77 22 1d cd 41 2b 09 5e 59 c3 c3 81 cb 35 38 ff 3b 9c ca ac 9f 5a 65 a2 6f 1f 3f ea 9e f7 d7 ca f8 be cb 9f 70 69 84 1c 7d a7 ac 7d af 5d 7a 4f 6a 5a 79 8c 07 9b 56 ce c7 64 dc 01 65 e8 d9 f8 24 61 77 90 b1 31 3b 66 09 fb 67 48 c0 98 39 12 2c 61 97 22 a4 a7 11 c0 0b 77 95 52 70 Data Ascii: x6NA;LD6>]'{(5zu!;r<JU~ZP>a}mlg}+jC\iPABaI5>=ZSJ^x{5v~P6z~A,J-\|w"A+^Y58;Zeo?pi}}]zOjZyVde$aw1;fgH9,a"wRp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49849	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:16 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 378 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:16 UTC	378	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 33 2e 30 22 2c 22 52 65 66 65 72 72 65 72 22 3a 22 22 2c 22 50 72 65 72 6f 6c 6c 22 3a 38 30 33 34 2c 22 44 6f 63 74 79 70 65 22 3a 22 3c 21 44 4f 43 54 59 50 45 20 68 74 Data Ascii: {"OrgId":"12BP4E","UserId":"","Url":"https://www.docusign.com/privacy","Base":"https://www.docusign.com/privacy","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion":"1.3.0","Referrer":"","Preroll":8034,"Doctype":"<!DOCTYPE ht
2024-04-16 17:43:17 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:17 UTC	1255	IN	Data Raw: 31 34 65 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 14eb{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-16 17:43:17 UTC	1255	IN	Data Raw: 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 69 6e 76 61 6c 69 64 22 7d 5d 2c 22 55 72 6c 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 44 77 65 6c 6c 54 69 6d 65 22 3a 31 2c 22 41 6a 61 78 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 30 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 30 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 30 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 31 33 32 38 39 33 39 37 31 34 31 2c 22 49 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 46 6c 61 67 73 22 3a 7b 22 41 6a 61 78 46 65 74 63 68 22 3a 74 72 75 65 2c 22 43 61 70 74 75 72 65 41 6e 69 6d 61 Data Ascii: "Selector":".invalid"}],"UrlKeeps":null,"DwellTime":1,"AjaxWatches":[],"PrivacyHash":"","UserUUID":"","UserIntId":"0","SessionIntId":"0","PageIntId":"0","EmbedToken":"","PageStart":1713289397141,"IsNewSession":false,"Flags":{"AjaxFetch":true,"CaptureAnima
2024-04-16 17:43:17 UTC	1255	IN	Data Raw: 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 61 6c 74 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 Data Ascii: Target":1,"Tag":"","Name":"value","Action":0},{"Target":2,"Tag":"","Name":"checked","Action":0},{"Target":2,"Tag":"","Name":"data","Action":0},{"Target":2,"Tag":"","Name":"alt","Action":1},{"Target":2,"Tag":"*","Name":"placeholder","Action":1},{"Targe
2024-04-16 17:43:17 UTC	1255	IN	Data Raw: 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 70 74 2d 70 61 74 63 68 22 2c 22 61 63 63 65 70 74 2d 72 61 6e 67 65 73 22 2c 22 61 67 65 22 2c 22 61 6c 6c 6f 77 22 2c 22 61 6c 74 2d 73 76 63 22 2c 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 2c 22 63 6f 6e 74 Data Ascii: ol-expose-headers","access-control-max-age","access-control-allow-methods","access-control-allow-headers","accept-patch","accept-ranges","age","allow","alt-svc","cache-control","connection","content-disposition","content-encoding","content-language","cont
2024-04-16 17:43:17 UTC	348	IN	Data Raw: 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 22 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 5c 22 5d 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 72 6f 6d 6f 20 63 6f 64 65 5c 22 5d 5b 6e 61 6d 65 3d 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 5d 5b 74 79 70 65 3d 5c 22 74 65 78 74 5c 22 5d 22 2c 22 53 69 67 6e 61 6c 73 22 3a 5b 32 2c 31 5d 7d 5d 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 47 65 74 43 75 72 72 65 6e 74 53 Data Ascii: ia-describedby=\"promocodeError\"][aria-label=\"Promo code\"][name=\"promoCode\"][type=\"text\"]","Signals":[2,1]}]},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnabled":true,"GetCurrentS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49854	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	672	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 100911 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 332 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:17 GMT Etag: "ab355fa9d59b4c79fe46574dec4d49e6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM03188ZRWQPWSYDRSPWAMK Connection: close
2024-04-16 17:43:17 UTC	332	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 63 38 32 39 66 65 65 63 37 31 63 65 38 61 30 39 2e 6a 73 22 5d 2c 22 2f 64 72 69 66 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 38 38 35 2d 64 36 65 63 63 38 37 62 34 61 62 63 36 33 65 33 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 64 72 69 66 74 2d 37 30 36 31 36 36 36 33 34 34 33 63 62 33 37 32 2e 6a 73 22 5d 2c 73 6f 72 74 65 64 50 61 67 65 73 3a 5b 22 2f 5f 61 70 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-c829feec71ce8a09.js"],"/drift":["static/chunks/885-d6ecc87b4abc63e3.js","static/chunks/pages/drift-70616663443cb372.js"],sortedPages:["/_ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49855	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	670	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 100945 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 77 Content-Type: application/javascript; charset=UTF-8 Date: Tue, 16 Apr 2024 17:43:17 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM0318F0JTQZ2QP8K911VCT Connection: close
2024-04-16 17:43:17 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49848	68.67.160.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	653	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:17 UTC	1503	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID AN-X-Request-Uuid: 5c7e0b3a-f48d-4e2e-b89d-ec04f79aaa1c Set-Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:43:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 04-Apr-2034 17:43:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6380132047284574994; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:43:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49856	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	3228	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:43:17 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:17 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-16 17:43:17 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49860	172.64.151.101	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:18 UTC	1206	IN	HTTP/1.1 302 Found Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf&C=1 CF-Ray: 8755fa11995cb054-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 16 Apr 2025 17:43:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=5598; Path=/; Domain=casalemedia.com; Expires=Mon, 15 Jul 2024 17:43:18 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=5598; Path=/; Domain=casalemedia.com; Expires=Mon, 15 Jul 2024 17:43:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AcfzpMJ6iVpdnl0x%2FaDl769C%2FpUMav4%2BJsBRKoeruf4sGP8J%2B1GPUDYBvAYC1G2M9V1B38rbNmbTlTUU1ztX%2F6xqeKfEXavdAmoaymTWA6IPfefSxinwq8L20g1BVPd%2B7bPJz4oBv6fXcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49857	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	1432	OUT	GET /en/contactSupport HTTP/1.1 Host: support.docusign.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289395.60.0.0; _ga=GA1.1.426113818.1713289394
2024-04-16 17:43:18 UTC	742	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Length: 0 Connection: close Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:18 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:18 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Server: sfdcedge X-SFDC-Request-Id: bdb00237f01860859ee48d4686e740d0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49861	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:17 UTC	688	OUT	GET /1000.gif?memo=CI6tHBoNCLXx-rAGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=UP63ShKle3cNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; pxrc=CAA=
2024-04-16 17:43:18 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=S6zhNPsl4WsNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:43:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:43:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49859	34.239.87.50	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	592	OUT	GET /sync?UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:18 UTC	513	IN	HTTP/1.1 200 Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=b7e994aa1e9b4e8b98b325df14c61f39; Domain=.tremorhub.com; Expires=Wed, 16-Apr-2025 23:31:38 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; Domain=.tremorhub.com; Expires=Fri, 17-Apr-2026 05:19:58 GMT; Path=/; Secure; SameSite=None
2024-04-16 17:43:18 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-16 17:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49862	68.67.160.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	870	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
2024-04-16 17:43:18 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=6380132047284574994 AN-X-Request-Uuid: 9d796858-b47c-41e2-95ea-aa3bd79d7a89 Set-Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:43:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 04-Apr-2034 17:43:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6380132047284574994; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:43:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49863	18.245.124.24	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	643	OUT	GET /bg9s?x-amz-cf-id=LNfsnWknC_tisY5L0Ur6iRZ9zHX0QXkxmcdQ22DIS5DvZHTQTGO-WA==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:18 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 12:11:12 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 823dffc8d3fc18c94fe5f99dd3831c74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P9 X-Amz-Cf-Id: kSlht_LTXWoUfgSdvLvxCTW702FfqEtQgtuAE8AVUtB9q8hcy_gW1w== Age: 27057 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49867	104.244.42.195	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	804	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
2024-04-16 17:43:18 UTC	400	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:17 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: fdb789bc83b8c76f strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: efccade5229d188c03190bea4e36cae2a1d3264ec029c070a4b249ddd2a9aace connection: close
2024-04-16 17:43:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49866	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	551	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
2024-04-16 17:43:18 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Tue, 16 Apr 2024 17:43:18 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 9f91a645-3418-411f-8dfd-fc7239ca48b9 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 9768d3869cd25955b086c1904f7610fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: 19WWii8IrU7uz9LrFBvhODH8xVa9_f52Bc2hri5LWZGgv7X3B2d56w==
2024-04-16 17:43:18 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49864	64.233.177.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	655	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&gjid=1577734252&_gid=379038570.1713289394&_u=YGBACEAABAAAACgAI~&z=476889903 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-16 17:43:18 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Tue, 16 Apr 2024 17:43:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:18 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49868	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:18 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:18 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49869	104.244.42.133	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	667	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=9225fc4a-d835-402e-9598-3ac984640622&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=a5747dd3-b0dc-45ee-a42e-6a4f5fbd6329&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
2024-04-16 17:43:18 UTC	392	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:17 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cd0979356aafc71e strict-transport-security: max-age=0 x-response-time: 7 x-connection-hash: 5dcc02af9ef6cdbc9e30753ff536b8ea2338d77992dd96d0ef84198a203844c9 connection: close
2024-04-16 17:43:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49865	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	1054	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:43:18 UTC	225	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-16 17:43:18 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49870	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	3022	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=9reMoKTHL7YJeWxH1wPt4LtjedfDlqqE2Vj0wLWpsas&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:43:18 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-16 17:43:18 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49871	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	1655	OUT	GET /s/contactSupport?language=en_US&rsc_301 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
2024-04-16 17:43:18 UTC	1577	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Set-Cookie: PicassoLanguage6f1e035b-4cd4-472e-b1c8-7d57e0e99336Published=; path=/; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 Set-Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; path=/s; secure; SameSite=None Expires: Mon, 17 Apr 2023 17:43:18 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:18 GMT Link: </s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js>;rel=preload;as=script;nopush,</s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=>;rel=preload;as=script;nopush X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Server: sfdcedge X-SFDC-Request-Id: 3d25ca8194d88f8a32ecdd155a783aba
2024-04-16 17:43:18 UTC	14807	IN	Data Raw: 62 61 32 32 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 53 69 67 6e 20 53 75 70 70 6f 72 74 20 43 65 6e 74 65 72 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 66 6f 72 63 65 2e 63 6f 6d 2f 65 6d 62 65 64 64 65 64 73 65 Data Ascii: ba22 <!DOCTYPE html><html lang="en-US" dir="ltr"><head><title>DocuSign Support Center</title><meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://service.force.com/embeddedse
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 28 27 63 68 61 74 62 6f 74 41 63 74 69 76 65 50 61 67 65 27 2c 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 40 40 44 53 4f 6e 65 74 72 75 73 74 57 72 61 70 70 65 72 3a 73 74 61 72 74 69 6e 67 20 74 68 65 20 63 61 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 4f 6e 65 54 72 75 73 74 57 72 61 70 70 65 72 28 30 29 3b 0a 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 0a 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 6f 66 20 63 68 65 63 6b 20 66 6f 72 20 44 53 5f 6f 6e 73 74 72 75 73 74 57 72 61 70 70 65 72 20 2d 2d 3e 0a 3c 21 2d 2d 20 53 68 61 64 6f 77 20 44 4f 4d 20 41 6e 61 6c 79 74 69 63 73 20 73 6f 6c 75 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 Data Ascii: ('chatbotActivePage',()=>{ // console.log('@@DSOnetrustWrapper:starting the call'); checkOneTrustWrapper(0); }); </script>-->... end of check for DS_onstrustWrapper -->... Shadow DOM Analytics solution -->... in order to
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 49 6e 70 75 74 49 63 6f 6e 3a 72 67 62 28 31 37 34 2c 20 31 37 34 2c 20 31 37 34 29 3b 2d 2d 66 66 62 61 6e 2d 73 6c 69 64 65 72 48 61 6e 64 6c 65 53 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 36 29 20 30 20 32 70 78 20 33 70 78 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 59 65 6c 6c 6f 77 37 30 3a 72 67 62 28 32 32 38 2c 20 31 36 32 2c 20 31 29 3b 2d 2d 66 66 62 61 6e 2d 66 6f 6e 74 57 65 69 67 68 74 4c 69 67 68 74 3a 33 30 30 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 45 72 72 6f 72 3a 72 67 62 28 32 33 34 2c 20 30 2c 20 33 30 29 3b 2d 2d 66 66 62 61 6e 2d 76 61 72 53 70 61 63 69 6e 67 58 78 53 6d 61 6c 6c 3a 30 2e 32 35 72 65 6d 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c Data Ascii: -ffban-colorTextInputIcon:rgb(174, 174, 174);--ffban-sliderHandleShadow:rgba(0, 0, 0, 0.16) 0 2px 3px;--ffban-paletteYellow70:rgb(228, 162, 1);--ffban-fontWeightLight:300;--ffban-colorTextError:rgb(234, 0, 30);--ffban-varSpacingXxSmall:0.25rem;--ffban-col
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 29 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 57 61 72 6e 69 6e 67 3a 72 67 62 28 32 35 34 2c 20 31 34 37 2c 20 35 37 29 3b 2d 2d 66 66 62 61 6e 2d 73 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 52 65 67 75 6c 61 72 57 6f 66 66 3a 75 72 0d 0a 38 30 30 30 0d 0a 6c 28 2f 5f 73 6c 64 73 2f 66 6f 6e 74 73 2f 76 32 2e 33 2e 30 2f 53 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 48 6f 74 4f 72 61 6e 67 65 34 30 3a 72 67 62 28 31 37 30 2c 20 34 38 2c 20 31 29 3b 2d 2d 66 66 62 61 6e 2d 63 61 72 64 53 70 61 63 69 6e 67 4c 61 72 67 65 3a 31 2e 35 72 65 6d 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 52 65 64 33 30 3a 72 67 62 28 31 34 32 2c 20 33 2c 20 31 35 29 3b 2d 2d 66 Data Ascii: );--ffban-colorTextWarning:rgb(254, 147, 57);--ffban-salesforceSansRegularWoff:ur8000l(/_slds/fonts/v2.3.0/SalesforceSans-Regular.woff);--ffban-paletteHotOrange40:rgb(170, 48, 1);--ffban-cardSpacingLarge:1.5rem;--ffban-paletteRed30:rgb(142, 3, 15);--f
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 6c 74 44 69 73 61 62 6c 65 64 3a 72 67 62 28 32 30 31 2c 20 32 30 31 2c 20 32 30 31 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 42 72 61 6e 64 3a 72 67 62 28 32 37 2c 20 31 35 30 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 64 75 72 61 74 69 6f 6e 54 6f 61 73 74 4d 65 64 69 75 6d 3a 39 2e 36 73 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 75 74 74 6f 6e 49 63 6f 6e 41 63 74 69 76 65 3a 72 67 62 28 32 34 33 2c 20 32 34 33 2c 20 32 34 33 29 3b 2d 2d 70 73 65 2d 62 72 61 6e 64 48 65 61 64 65 72 43 6f 6e 74 72 61 73 74 57 65 61 6b 3a 72 67 62 28 31 34 35 2c 20 31 34 35 2c 20 31 34 35 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4e 65 77 3a 72 67 62 28 32 34 33 2c 20 32 34 33 Data Ascii: ltDisabled:rgb(201, 201, 201);--pse-colorTextBrand:rgb(27, 150, 255);--pse-durationToastMedium:9.6s;--pse-colorBackgroundButtonIconActive:rgb(243, 243, 243);--pse-brandHeaderContrastWeak:rgb(145, 145, 145);--pse-colorBackgroundNotificationNew:rgb(243, 243
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 6c 69 6e 65 48 65 69 67 68 74 54 65 78 74 3a 31 2e 35 3b 2d 2d 70 73 65 2d 77 69 64 74 68 53 74 61 67 65 4c 65 66 74 45 78 70 61 6e 64 65 64 3a 31 35 72 65 6d 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 0d 0a 38 30 30 30 0d 0a 63 6b 67 72 6f 75 6e 64 45 72 72 6f 72 3a 72 67 62 28 32 35 34 2c 20 39 32 2c 20 37 36 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 42 75 74 74 6f 6e 42 72 61 6e 64 41 63 74 69 76 65 3a 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 66 6f 6e 74 46 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c Data Ascii: (255, 255, 255);--pse-lineHeightText:1.5;--pse-widthStageLeftExpanded:15rem;--pse-colorBa8000ckgroundError:rgb(254, 92, 76);--pse-colorTextButtonBrandActive:rgb(255, 255, 255);--pse-fontFamily:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Hel
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 4c 69 6e 6b 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 70 73 65 2d 70 61 67 65 48 65 61 64 65 72 54 69 74 6c 65 46 6f 6e 74 53 69 7a 65 3a 31 2e 31 32 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 33 3a 30 2e 38 31 32 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 32 3a 30 2e 37 35 72 65 6d 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 4c 69 6e 6b 49 6e 76 65 72 73 65 44 69 73 61 62 6c 65 64 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 35 3a 31 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 34 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 Data Ascii: 255, 255, 255);--pse-colorTextLink:rgb(1, 118, 211);--pse-pageHeaderTitleFontSize:1.125rem;--pse-fontSize3:0.8125rem;--pse-fontSize2:0.75rem;--pse-colorTextLinkInverseDisabled:rgba(255, 255, 255, 0.15);--pse-fontSize5:1rem;--pse-fontSize4:0.875rem;--pse-f
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 20 39 36 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 64 61 74 65 70 69 63 6b 65 72 43 6f 6c 6f 72 54 65 78 74 44 61 79 41 64 6a 61 63 65 6e 74 4d 6f 6e 74 68 3a 72 67 62 28 31 31 36 2c 20 31 31 36 2c 20 31 31 36 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 45 72 0d 0a 38 30 30 30 0d 0a 72 6f 72 41 6c 74 3a 72 67 62 28 32 35 34 2c 20 31 34 33 2c 20 31 32 35 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 73 68 61 64 6f 77 52 65 6d 69 6e 64 65 72 3a 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 30 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 72 61 6e 64 54 65 78 74 4c 69 6e 6b 41 63 74 69 76 65 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 70 61 67 65 48 Data Ascii: 96);--qualtrics-datepickerColorTextDayAdjacentMonth:rgb(116, 116, 116);--qualtrics-colorBorderEr8000rorAlt:rgb(254, 143, 125);--qualtrics-shadowReminder:0 2px 3px 0 rgba(0, 0, 0, 0.20);--qualtrics-brandTextLinkActive:rgb(1, 68, 134);--qualtrics-pageH
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 69 63 73 2d 62 75 74 74 6f 6e 43 6f 6c 6f 72 42 6f 72 64 65 72 42 72 61 6e 64 50 72 69 6d 61 72 79 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 75 74 74 6f 6e 49 63 6f 6e 42 6f 75 6e 64 61 72 79 54 6f 75 63 68 3a 32 2e 37 35 72 65 6d 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 72 61 6e 64 42 61 63 6b 67 72 6f 75 6e 64 50 72 69 6d 61 72 79 54 72 61 6e 73 70 61 72 65 6e 74 3a 72 67 62 61 28 31 37 36 2c 20 31 39 36 2c 20 32 32 33 2c 20 30 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 66 69 6c 6c 48 65 61 64 65 72 42 75 74 74 6f 6e 46 6f 63 75 73 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 45 72 72 6f 72 3a 72 67 62 28 32 33 34 2c 20 30 2c Data Ascii: ics-buttonColorBorderBrandPrimary:rgb(1, 118, 211);--qualtrics-buttonIconBoundaryTouch:2.75rem;--qualtrics-brandBackgroundPrimaryTransparent:rgba(176, 196, 223, 0);--qualtrics-fillHeaderButtonFocus:rgb(1, 118, 211);--qualtrics-colorBorderError:rgb(234, 0,
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 61 72 64 53 70 61 63 69 6e 67 4d 61 72 67 69 6e 3a 31 72 65 6d 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 54 65 78 74 42 72 6f 77 73 65 72 41 63 74 69 76 65 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 0d 0a 31 30 30 30 30 0d 0a 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 75 74 74 6f 6e 42 72 61 6e 64 48 6f 76 65 72 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 68 61 74 4d 65 73 73 61 67 65 43 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 4f 75 74 62 6f 75 6e 64 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 54 65 78 74 49 63 6f 6e 44 65 66 61 75 6c Data Ascii: 4);--qualtrics-cardSpacingMargin:1rem;--qualtrics-colorTextBrowserActive:rgba(0, 0, 0, 0.4);--qualtrics-c10000olorBackgroundButtonBrandHover:rgb(1, 68, 134);--qualtrics-chatMessageColorBackgroundOutbound:rgb(1, 68, 134);--qualtrics-colorTextIconDefaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49872	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	555	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:18 UTC	979	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225878 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 18 Date: Tue, 16 Apr 2024 17:43:18 GMT Cache-Control: no-cache ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 51164155275c508076425faa0467bff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: YUK_rOJrdhkjvoSPvPBwIvWkBHR4wEgtzl3sjhKzBk43PPO0iasFIg==
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 72 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 64 29 3a 74 68 Data Ascii: o.tryLoc<=this.prev&&r.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.method="next",this.next=i.finallyLoc,d):th
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 72 65 74 75 72 6e 20 62 74 6f 61 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 5b 30 2d 39 41 2d 46 5d 7b 32 7d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 29 7d 29 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2f 67 2c 22 22 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 2e 66 72 6f 6d 28 65 2c 22 75 74 66 38 22 29 2e 74 6f 53 74 72 69 6e 67 28 22 62 61 73 65 36 34 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2f 67 2c 22 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: "==typeof btoa)return btoa(encodeURIComponent(e).replace(/%([0-9A-F]{2})/g,function(e,t){return String.fromCharCode(parseInt(t,16))})).replace(/[=]/g,"");if("undefined"!=typeof t)return t.from(e,"utf8").toString("base64").replace(/[=]/g,"");throw new Erro
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 74 68 65 6e 28 65 2c 74 29 7d 2c 72 2c 7b 6f 6e 3a 6f 2e 6f 6e 2c 73 65 6e 64 3a 6f 2e 73 65 6e 64 7d 29 7d 29 7d 28 65 2c 74 2c 6e 2c 72 2c 7b 6f 6e 3a 69 2c 73 65 6e 64 3a 61 7d 29 7d 2c 6f 2e 66 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 5f 73 65 72 69 61 6c 69 7a 65 46 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 7b 6f 6e 3a 69 2c 73 65 6e 64 3a 61 7d 29 7d 2c 6f 2e 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 73 57 69 6e 64 6f 77 28 65 29 7c 7c 6b 2e 69 73 50 72 6f 78 79 57 69 6e 64 6f 77 28 65 29 3f 73 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f Data Ascii: (e,t,function(e,t){return n.then(e,t)},r,{on:o.on,send:o.send})})}(e,t,n,r,{on:i,send:a})},o.function=function(n,r){return function_serializeFunction(e,t,n,r,{on:i,send:a})},o.object=function(e){return isWindow(e)\|\|k.isProxyWindow(e)?serializeType("cross_
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 2b 2b 6e 29 65 5b 6e 5d 3d 30 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3c 30 3f 30 3a 30 7c 63 68 65 63 6b 65 64 28 74 2e 6c 65 6e 67 74 68 29 3b 65 3d 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 65 5b 72 5d 3d 32 35 35 26 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 65 64 28 65 29 7b 69 66 28 65 3e 3d 6b 4d 61 78 4c 65 6e 67 74 68 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 Data Ascii: er.TYPED_ARRAY_SUPPORT)for(var n=0;n<t;++n)e[n]=0;return e}function fromArrayLike(e,t){var n=t.length<0?0:0\|checked(t.length);e=createBuffer(e,n);for(var r=0;r<n;r+=1)e[r]=255&t[r];return e}function checked(e){if(e>=kMaxLength())throw new RangeError("Atte
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 4c 45 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 2b 65 2c 74 7c 3d 30 2c 6e 7c 7c 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 2c 32 2c 33 32 37 36 37 2c 2d 33 32 37 36 38 29 2c 42 75 66 66 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 28 74 68 69 73 5b 74 5d 3d 32 35 35 26 65 2c 74 68 69 73 5b 74 2b 31 5d 3d 65 3e 3e 3e 38 29 3a 6f 62 6a 65 63 74 57 72 69 74 65 55 49 6e 74 31 36 28 74 68 69 73 2c 65 2c 74 2c 21 30 29 2c 74 2b 32 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 20 77 72 69 74 65 49 6e 74 31 36 42 45 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 2b 65 2c 74 7c 3d 30 2c 6e 7c 7c 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 Data Ascii: LE(e,t,n){return e=+e,t\|=0,n\|\|checkInt(this,e,t,2,32767,-32768),Buffer.TYPED_ARRAY_SUPPORT?(this[t]=255&e,this[t+1]=e>>>8):objectWriteUInt16(this,e,t,!0),t+2},Buffer.prototype.writeInt16BE=function writeInt16BE(e,t,n){return e=+e,t\|=0,n\|\|checkInt(this,e,t
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 74 72 61 6e 73 66 6f 72 6d 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 28 65 2e 63 73 73 29 3a 74 2e 74 72 61 6e 73 66 6f 72 6d 2e 64 65 66 61 75 6c 74 28 65 2e 63 73 73 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 65 2e 63 73 73 3d 69 7d 69 66 28 74 2e 73 69 6e 67 6c 65 74 6f 6e 29 7b 76 61 72 20 63 3d 73 2b 2b 3b 6e 3d 61 7c 7c 28 61 3d 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 74 29 29 2c 72 3d 61 70 70 6c 79 54 6f 53 69 6e 67 6c 65 74 6f 6e 54 61 67 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2c 63 2c 21 31 29 2c 6f 3d 61 70 70 6c 79 54 6f 53 69 6e 67 6c 65 74 6f 6e 54 61 67 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2c 63 2c 21 30 29 7d 65 6c 73 65 20 65 2e 73 6f 75 72 63 65 4d 61 70 26 26 22 66 75 Data Ascii: ===typeof t.transform?t.transform(e.css):t.transform.default(e.css)))return function(){};e.css=i}if(t.singleton){var c=s++;n=a\|\|(a=createStyleElement(t)),r=applyToSingletonTag.bind(null,n,c,!1),o=applyToSingletonTag.bind(null,n,c,!0)}else e.sourceMap&&"fu
2024-04-16 17:43:18 UTC	15000	IN	Data Raw: 65 74 61 2e 69 64 29 2c 63 5d 7d 29 2c 69 2e 6e 65 78 74 3d 31 33 2c 4f 62 6a 65 63 74 28 56 2e 73 65 6e 64 29 28 73 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 72 2c 63 2c 7b 74 69 6d 65 6f 75 74 3a 32 65 34 2c 77 69 6e 64 6f 77 3a 73 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 64 6f 6d 61 69 6e 3a 68 65 28 29 2c 66 69 72 65 41 6e 64 46 6f 72 67 65 74 3a 21 61 7d 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 75 3d 69 2e 73 65 6e 74 2c 61 65 28 7b 64 61 74 61 3a 5b 22 52 45 53 50 4f 4e 53 45 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 7c 20 22 29 2e 63 6f 6e 63 61 74 28 63 2e 5f 6d 65 74 61 2e 69 64 29 2c 75 5d 7d 29 2c 69 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 75 29 3b 63 61 73 65 20 31 38 3a 69 2e 70 72 65 76 3d 31 38 2c 69 2e 74 30 Data Ascii: eta.id),c]}),i.next=13,Object(V.send)(s.contentWindow,r,c,{timeout:2e4,window:s.contentWindow,domain:he(),fireAndForget:!a});case 13:return u=i.sent,ae({data:["RESPONSE: ".concat(t," \| ").concat(c._meta.id),u]}),i.abrupt("return",u);case 18:i.prev=18,i.t0
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 61 74 48 65 69 67 68 74 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 65 2e 24 64 69 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 72 69 66 74 2d 68 61 73 2d 63 68 61 74 22 29 29 7b 76 61 72 20 6f 2c 69 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 6f 6d 53 69 7a 69 6e 67 44 61 74 61 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 72 74 28 29 2c 6f 3d 7b 69 6e 6e 65 72 48 65 69 67 68 74 3a 6e 75 6c 6c 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 72 2e 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 69 6e 6e 65 72 57 69 64 74 68 3a 6e 75 6c 6c 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 Data Ascii: atHeight(e,t){var n,r;if(e.$div.classList.contains("drift-has-chat")){var o,i=function getDomSizingData(e){var t,n,r=rt(),o={innerHeight:null===r\|\|void 0===r?void 0:null===(t=r.window)\|\|void 0===t?void 0:t.innerHeight,innerWidth:null===r\|\|void 0===r?void
2024-04-16 17:43:18 UTC	16384	IN	Data Raw: 72 2c 6f 2c 69 2c 61 2c 73 2c 63 2c 75 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 2c 69 2c 61 2c 73 2c 63 2c 75 2c 66 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 5f 61 72 69 74 79 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 6e 65 67 61 74 69 76 65 20 69 6e 74 65 67 65 72 20 6e 6f 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 65 6e 22 29 7d 7d 76 61 72 20 51 74 3d 5f 63 75 72 72 79 32 28 66 75 6e 63 74 69 6f 6e 20 63 75 72 Data Ascii: r,o,i,a,s,c,u){return t.apply(this,arguments)};case 10:return function(e,n,r,o,i,a,s,c,u,f){return t.apply(this,arguments)};default:throw new Error("First argument to _arity must be a non-negative integer no greater than ten")}}var Qt=_curry2(function cur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49874	172.64.151.101	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	702	OUT	GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; CMPS=5598; CMPRO=5598
2024-04-16 17:43:18 UTC	986	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8755fa154b41b0b8-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 16 Apr 2025 17:43:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5598; Path=/; Domain=casalemedia.com; Expires=Mon, 15 Jul 2024 17:43:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x6lPED6vlUYYcqkD5XB1Bct7ZPrlkA28Pl9EL2UQV25CKrnxPqC7iz1CDzNtMHKfemaimkFu0O4Iv2%2B%2F4wdd2eYEYT5t2cenOjP6%2FCaKrzK6qtuf4myhzWZU%2Bnjf2Y8rLIvT5mfUKgeLHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-16 17:43:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49877	3.225.117.71	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	485	OUT	GET /sync?UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=b7e994aa1e9b4e8b98b325df14c61f39; tv_UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf
2024-04-16 17:43:18 UTC	369	IN	HTTP/1.1 200 Date: Tue, 16 Apr 2024 17:43:18 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; Domain=.tremorhub.com; Expires=Fri, 17-Apr-2026 05:19:58 GMT; Path=/; Secure; SameSite=None
2024-04-16 17:43:18 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-16 17:43:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49879	13.32.151.16	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	437	OUT	GET /bg9s?x-amz-cf-id=LNfsnWknC_tisY5L0Ur6iRZ9zHX0QXkxmcdQ22DIS5DvZHTQTGO-WA==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:19 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 07:25:17 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 d203e374ba383a11f7beaf8a1353c660.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: ScAPS1xa8gfH_OLIPoiKxYiGgp0D1qjmeAxbym0YVscgnQMYdwXvpA== Age: 37082 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49875	3.161.193.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	754	OUT	GET /log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU HTTP/1.1 Host: segments.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
2024-04-16 17:43:19 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Tue, 16 Apr 2024 17:43:18 GMT X-Cache: Miss from cloudfront Via: 1.1 933ff1cca50cf69615381c805530ec5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P8 X-Amz-Cf-Id: JVoYkM6oMsIPfhIbBlBM8zBZsR8Oa2-dckmWY0otXkkZ3ZmRZNY7Vw==
2024-04-16 17:43:19 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49878	18.160.10.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:18 UTC	618	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:19 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:43:19 GMT Apigw-Requestid: WVHMoiDpIAMEanQ= X-Cache: Miss from cloudfront Via: 1.1 c13d71f8919c23db6bbd1c08a4dfb350.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: o7kL2RI5Ks_4L1mPpNRIZtNpWxeJtkE6who0gG9NWjAUROu-MDC0Zw==
2024-04-16 17:43:19 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49880	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&_u=YGBACEAABAAAACgAI~&z=2121927031 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:19 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49882	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	1932	OUT	GET /s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:19 UTC	711	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=31536000,immutable Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:19 GMT Server-Timing: Total;dur=11 Timing-Allow-Origin: * Access-Control-Expose-Headers: Server-Timing Set-Cookie: sfdc-stream=!bGp9H8EyjloeasT16z+uMiTLQl0Sn935p6la1SQxbPhUa+5GKF70Qazrx7uqa7GWzPLE/vArP1Lwg2Q=; path=/; Expires=Tue, 16-Apr-2024 20:43:19 GMT; SameSite=None; Secure Server: sfdcedge X-SFDC-Request-Id: 1a9a7ffa0940a8bb31ccf2e0d7e15e3b
2024-04-16 17:43:19 UTC	15673	IN	Data Raw: 33 65 33 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 61 73 73 69 67 6e 3a 65 2c 63 72 65 61 74 65 3a 74 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 6e 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 6c 2c 65 6e 74 72 69 65 73 3a 72 2c 66 72 65 65 7a 65 3a 6f 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 61 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3a 69 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 63 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 75 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 73 2c 69 73 46 72 6f 7a 65 6e 3a 66 2c 6b 65 79 73 3a 68 2c 73 65 61 6c 3a 67 2c 73 65 74 50 72 6f 74 6f 74 Data Ascii: 3e3f!function(){"use strict";const{assign:e,create:t,defineProperties:n,defineProperty:l,entries:r,freeze:o,getOwnPropertyDescriptor:a,getOwnPropertyDescriptors:i,getOwnPropertyNames:c,getPrototypeOf:u,hasOwnProperty:s,isFrozen:f,keys:h,seal:g,setProtot
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 6b 4d 61 70 2c 7b 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 3a 6e 6c 7d 3d 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6c 6c 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 6c 2e 67 65 74 28 65 29 3b 69 66 28 78 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 72 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 6a 5d 7d 66 75 6e 63 74 69 6f 6e 20 6f 6c 28 65 2c 74 29 7b 65 5b 6a 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 6c 6c 28 65 29 2e 64 65 6c 65 67 61 74 65 73 46 6f 63 75 73 7d 66 75 6e 63 74 69 6f 6e 20 69 6c 28 65 29 7b 72 65 74 75 72 6e 20 6c 6c 28 65 29 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 63 6c 28 65 29 7b 72 Data Ascii: kMap,{createDocumentFragment:nl}=document;function ll(e){const t=tl.get(e);if(x(t))throw new TypeError;return t}function rl(e){return e[j]}function ol(e,t){e[j]=t}function al(e){return ll(e).delegatesFocus}function il(e){return ll(e).host}function cl(e){r
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 6c 65 3a 21 30 7d 2c 63 68 69 6c 64 72 65 6e 3a 7b 67 65 74 28 29 7b 72 65 74 75 72 6e 20 77 6e 28 74 68 69 73 29 3f 5a 6c 2e 63 61 6c 6c 28 74 68 69 73 29 3a 72 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 2c 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 3a 7b 67 65 74 28 29 7b 72 65 74 75 72 6e 20 77 6e 28 74 68 69 73 29 3f 65 72 2e 63 61 6c 6c 28 74 68 69 73 29 3a 5f 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 2c 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3a 7b 67 65 74 28 29 7b 72 65 74 75 72 6e 20 77 6e 28 74 68 69 73 29 3f 74 72 2e 63 61 6c 6c 28 74 68 69 73 29 3a Data Ascii: le:!0},children:{get(){return wn(this)?Zl.call(this):rt.call(this)},enumerable:!0,configurable:!0},childElementCount:{get(){return wn(this)?er.call(this):_e.call(this)},enumerable:!0,configurable:!0},firstElementChild:{get(){return wn(this)?tr.call(this):
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 72 49 6e 74 6f 53 68 61 64 6f 77 54 61 72 67 65 74 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 6f 72 69 67 69 6e 61 6c 54 61 72 67 65 74 3a 6e 7d 3d 74 68 69 73 2c 72 3d 79 74 28 6e 2c 74 29 3b 69 66 28 21 4d 74 28 72 29 29 7b 63 6f 6e 73 74 20 6e 3d 74 68 69 73 2e 77 72 61 70 44 65 73 63 72 69 70 74 6f 72 28 72 29 3b 67 74 28 65 2c 74 2c 6e 29 7d 7d 6c 6f 63 6b 53 68 61 64 6f 77 54 61 72 67 65 74 28 65 29 7b 63 6f 6e 73 74 7b 6f 72 69 67 69 6e 61 6c 54 61 72 67 65 74 3a 74 7d 3d 74 68 69 73 3b 45 74 2e 63 61 6c 6c 28 62 74 28 74 29 2c 76 74 28 74 29 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 68 69 73 2e 63 6f 70 79 44 65 73 63 72 69 70 74 6f 72 49 6e 74 6f 53 68 61 64 6f 77 54 61 72 67 65 74 28 65 2c 74 29 7d 29 29 3b 63 6f 6e 73 74 7b 6d 65 6d 62 72 61 6e Data Ascii: rIntoShadowTarget(e,t){const{originalTarget:n}=this,r=yt(n,t);if(!Mt(r)){const n=this.wrapDescriptor(r);gt(e,t,n)}}lockShadowTarget(e){const{originalTarget:t}=this;Et.call(bt(t),vt(t)).forEach((t=>{this.copyDescriptorIntoShadowTarget(e,t)}));const{membran
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 65 6e 64 65 72 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 6e 28 65 29 7b 72 65 74 75 72 6e 60 24 7b 65 7d 2d 68 6f 73 74 60 7d 66 75 6e 63 74 69 6f 6e 20 49 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 72 2e 68 28 22 73 74 79 6c 65 22 2c 7b 6b 65 79 3a 22 73 74 79 6c 65 22 2c 61 74 74 72 73 3a 7b 74 79 70 65 3a 22 74 65 78 74 2f 63 73 73 22 7d 7d 2c 5b 4e 72 2e 74 28 65 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 7b 65 6c 6d 3a 72 2c 63 6f 6e 74 65 78 74 3a 6f 2c 72 65 6e 64 65 72 4d 6f 64 65 3a 69 2c 73 68 61 64 6f 77 4d 6f 64 65 3a 73 2c 72 65 6e 64 65 72 65 72 3a 7b 67 65 74 43 6c 61 73 73 4c 69 73 74 3a 61 2c 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 3a 6c 2c 73 65 74 41 74 74 72 69 62 75 74 65 3a 63 7d 7d 3d 65 2c 7b 73 Data Ascii: ender};function Rn(e){return`${e}-host`}function In(e){return Nr.h("style",{key:"style",attrs:{type:"text/css"}},[Nr.t(e)])}function $n(e,t,n){const{elm:r,context:o,renderMode:i,shadowMode:s,renderer:{getClassList:a,removeAttribute:l,setAttribute:c}}=e,{s
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 29 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 72 28 65 29 7b 65 2e 74 72 6f 2e 72 65 73 65 74 28 29 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 64 65 66 3a 7b 72 65 6e 64 65 72 3a 74 7d 2c 63 61 6c 6c 48 6f 6f 6b 3a 6e 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 72 2c 6f 77 6e 65 72 3a 6f 7d 3d 65 2c 69 3d 46 72 28 29 3b 6c 65 74 20 73 2c 61 3d 21 31 3b 72 65 74 75 72 6e 20 4d 6f 28 65 2c 6f 2c 28 28 29 3d 3e 7b 56 72 28 65 29 7d 29 2c 28 28 29 3d 3e 7b 65 2e 74 72 6f 2e 6f 62 73 65 72 76 65 28 28 28 29 3d 3e 7b 73 3d 6e 28 72 2c 74 29 2c 61 3d 21 30 7d 29 29 7d 29 2c 28 28 29 3d 3e 7b 56 72 28 69 29 7d 29 29 2c 61 3f 6a 72 28 65 2c 73 29 3a 5b 5d 7d 28 65 29 3b 72 65 74 75 72 6e 20 65 2e 69 73 44 69 72 74 79 3d 21 31 2c 65 2e 69 73 53 Data Ascii: ))}function Zr(e){e.tro.reset();const t=function(e){const{def:{render:t},callHook:n,component:r,owner:o}=e,i=Fr();let s,a=!1;return Mo(e,o,(()=>{Vr(e)}),(()=>{e.tro.observe((()=>{s=n(r,t),a=!0}))}),(()=>{Vr(i)})),a?jr(e,s):[]}(e);return e.isDirty=!1,e.isS
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 3d 7b 63 6f 6e 66 69 67 3a 69 5b 65 5d 7c 7c 30 2c 74 79 70 65 3a 22 61 6e 79 22 2c 61 74 74 72 3a 6b 65 28 65 29 7d 3b 63 6f 6e 73 74 20 6c 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 73 29 6c 5b 65 5d 3d 73 5b 65 5d 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 7b 63 74 6f 72 3a 6e 2c 6e 61 6d 65 3a 72 2c 70 72 6f 70 73 3a 61 2c 6d 65 74 68 6f 64 73 3a 6c 7d 7d 2c 65 2e 69 73 43 6f 6d 70 6f 6e 65 6e 74 43 6f 6e 73 74 72 75 63 74 6f 72 3d 4f 6e 2c 65 2e 69 73 4e 6f 64 65 46 72 6f 6d 54 65 6d 70 6c 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 58 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6d 69 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 29 72 65 74 75 72 6e 21 31 3b 63 6f Data Ascii: ={config:i[e]\|\|0,type:"any",attr:ke(e)};const l={};for(const e in s)l[e]=s[e].value;return{ctor:n,name:r,props:a,methods:l}},e.isComponentConstructor=On,e.isNodeFromTemplate=function(e){if(X(e instanceof mi))return!1;if(e instanceof ShadowRoot)return!1;co
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 2e 77 65 62 6b 69 74 7d 29 3b 4e 66 28 6e 2c 65 2c 74 29 2c 57 28 6c 65 2c 74 3d 3e 62 28 6e 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 5b 74 5d 7d 29 29 2c 71 6c 26 26 71 6c 28 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 52 70 28 62 64 2c 6e 2c 65 2c 74 29 2c 52 6c 28 6e 2c 65 2c 74 29 2c 6a 6c 28 65 2c 6e 2c 74 29 2c 47 6c 28 6e 29 2c 6e 7d 28 6f 2c 65 29 3a 6e 2e 67 6c 6f 62 61 6c 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 24 6c 28 65 2c 74 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 63 6f 6e 73 74 20 6f 3d 73 28 4f 62 6a 65 Data Ascii: ,{enumerable:!1,configurable:!0,writable:!0,value:e.webkit});Nf(n,e,t),W(le,t=>b(n,t,{enumerable:!0,value:e[t]})),ql&&ql(n,e,t);return Rp(bd,n,e,t),Rl(n,e,t),jl(e,n,t),Gl(n),n}(o,e):n.globalObject=function(e,t){const n=$l(e,t);if(n)return n;const o=s(Obje
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 65 78 74 22 3a 22 61 72 69 61 56 61 6c 75 65 54 65 78 74 22 7d 2c 7b 63 6c 6f 73 65 73 74 3a 72 61 2c 67 65 74 41 74 74 72 69 62 75 74 65 3a 69 61 2c 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 3a 61 61 2c 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 4e 53 3a 73 61 2c 68 61 73 41 74 74 72 69 62 75 74 65 3a 63 61 2c 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3a 6c 61 2c 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 3a 75 61 2c 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 3a 66 61 2c 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 4e 6f 64 65 3a 70 61 2c 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 4e 53 3a 64 61 2c 73 65 74 41 74 74 72 69 62 75 74 65 3a 68 61 2c 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 3a 6d 61 2c 74 6f 67 67 6c 65 41 74 74 72 69 62 75 Data Ascii: ext":"ariaValueText"},{closest:ra,getAttribute:ia,getAttributeNode:aa,getAttributeNodeNS:sa,hasAttribute:ca,querySelector:la,querySelectorAll:ua,removeAttribute:fa,removeAttributeNode:pa,removeAttributeNS:da,setAttribute:ha,setAttributeNS:ma,toggleAttribu
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 64 46 72 65 65 7a 65 29 7b 7a 6c 2e 6e 6f 74 46 72 6f 7a 65 6e 49 6e 74 72 69 6e 73 69 63 4e 61 6d 65 73 3d 65 2e 6e 6f 74 46 72 6f 7a 65 6e 49 6e 74 72 69 6e 73 69 63 4e 61 6d 65 73 3b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 75 6e 73 61 66 65 47 6c 6f 62 61 6c 3a 74 7d 3d 65 2c 6e 3d 74 79 70 65 6f 66 20 74 2e 53 79 6d 62 6f 6c 26 26 74 2e 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 6f 3d 28 6e 65 77 20 74 2e 41 72 72 61 79 29 5b 6e 5d 28 29 2c 72 3d 77 28 6f 29 2c 69 3d 77 28 72 29 2c 61 3d 74 2e 65 76 61 6c 28 22 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 22 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 73 3d 61 2e 70 72 6f 74 6f 74 79 70 65 3b 6c 65 74 20 Data Ascii: dFreeze){zl.notFrozenIntrinsicNames=e.notFrozenIntrinsicNames;const t=function(e){const{unsafeGlobal:t}=e,n=typeof t.Symbol&&t.Symbol.iterator\|\|"@@iterator",o=(new t.Array)[n](),r=w(o),i=w(r),a=t.eval("(async function(){})").constructor,s=a.prototype;let

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49883	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	2188	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:19 UTC	612	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=31536000,immutable Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:19 GMT Set-Cookie: sfdc-stream=!Pdjt7LNp1DGDykDSTQD+//9ql1rJLxDYzwcEcm5qyynxMtN5oyG0OKc9E+emmh332PuUB1RfZ3qM3qY=; path=/; Expires=Tue, 16-Apr-2024 20:43:19 GMT; SameSite=None; Secure Server: sfdcedge X-SFDC-Request-Id: c8bb9dbffabf25a725e0ed51ced10870
2024-04-16 17:43:19 UTC	15772	IN	Data Raw: 33 65 61 32 0d 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 41 75 72 61 26 26 28 41 75 72 61 3d 7b 7d 29 3b 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 7c 7c 28 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 29 3b 41 75 72 61 2e 66 72 61 6d 65 77 6f 72 6b 4a 73 52 65 61 64 79 7c 7c 28 41 75 72 61 2e 41 70 70 6c 69 63 61 74 69 6f 6e 44 65 66 73 3d 7b 63 6d 70 45 78 70 6f 72 74 65 72 3a 7b 7d 2c 6c 69 62 45 78 70 6f 72 74 65 72 3a 7b 7d 7d 2c 24 41 3d 7b 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 3a 7b 61 64 64 43 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 41 75 72 61 2e 41 70 70 6c 69 63 61 74 69 6f 6e 44 65 66 73 2e 63 6d 70 45 78 70 6f 72 74 65 72 5b 61 5d 3d 62 7d 2c 61 64 64 4c 69 62 72 61 72 79 45 Data Ascii: 3ea2"undefined"===typeof Aura&&(Aura={});Aura.bootstrap\|\|(Aura.bootstrap={});Aura.frameworkJsReady\|\|(Aura.ApplicationDefs={cmpExporter:{},libExporter:{}},$A={componentService:{addComponent:function(a,b){Aura.ApplicationDefs.cmpExporter[a]=b},addLibraryE
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 64 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 5b 64 5d 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 55 74 69 6c 73 2e 69 73 53 74 72 69 6e 67 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f 21 31 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 29 7b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 5b 61 5d 3b 64 28 63 29 26 26 63 2e 61 70 70 6c 79 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2c 62 29 7d 7d 66 Data Ascii: unction(e){function c(a,d){try{return a[d]}catch(b){}}function b(a){return g.Utils.isString(a)}function d(a){return void 0===a\|\|null===a?!1:"function"===typeof a}function q(a,b){if(window.console){var c=window.console[a];d(c)&&c.apply(window.console,b)}}f
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 69 63 65 5b 22 6d 75 6c 74 69 70 6c 65 2d 63 6c 69 65 6e 74 73 22 5d 26 26 64 2e 75 70 64 61 74 65 41 64 76 69 63 65 28 7b 69 6e 74 65 72 76 61 6c 3a 74 7d 29 3b 76 61 72 20 63 3d 6b 3b 6b 3d 62 2e 73 75 63 63 65 73 73 66 75 6c 3b 21 63 26 26 6b 3f 65 28 22 53 74 72 65 61 6d 69 6e 67 3a 20 43 6f 6e 6e 65 63 74 65 64 22 29 3a 63 26 26 21 6b 26 26 65 28 22 53 74 72 65 61 6d 69 6e 67 3a 20 55 6e 65 78 70 65 63 74 65 64 20 64 69 73 63 6f 6e 6e 65 63 74 22 2c 7b 65 72 72 6f 72 3a 62 7d 2c 21 30 29 7d 7d 29 3b 6c 28 22 2f 6d 65 74 61 2f 64 69 73 63 6f 6e 6e 65 63 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 3d 21 31 3b 65 28 22 53 74 72 65 61 6d 69 6e 67 3a 20 44 69 73 63 6f 6e 6e 65 63 74 20 63 6f 6d 70 6c 65 74 65 2e 22 29 7d 29 3b 64 2e 61 64 64 4c 69 73 74 Data Ascii: ice["multiple-clients"]&&d.updateAdvice({interval:t});var c=k;k=b.successful;!c&&k?e("Streaming: Connected"):c&&!k&&e("Streaming: Unexpected disconnect",{error:b},!0)}});l("/meta/disconnect",function(){h=!1;e("Streaming: Disconnect complete.")});d.addList
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 2e 66 69 65 6c 64 73 2b 22 2c 20 6f 70 74 69 6f 6e 61 6c 46 69 65 6c 64 73 5c 78 33 64 22 2b 61 2e 6f 70 74 69 6f 6e 61 6c 46 69 65 6c 64 73 2b 22 2c 20 6d 6f 64 65 5c 78 33 64 22 2b 61 2e 6d 6f 64 65 2b 22 2c 20 75 70 64 61 74 65 4d 72 75 5c 78 33 64 22 2b 61 2e 75 70 64 61 74 65 4d 72 75 2b 22 2c 20 6e 6f 53 65 72 76 65 72 5c 78 33 64 22 2b 61 2e 6e 6f 53 65 72 76 65 72 7d 3b 62 2e 5f 67 65 74 52 65 63 6f 72 64 54 65 6d 70 6c 61 74 65 43 6f 6e 66 69 67 44 65 62 75 67 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 66 69 65 6c 64 4f 76 65 72 72 69 64 65 73 3f 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 66 69 65 6c 64 4f 76 65 72 72 69 64 65 73 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 22 65 6e 74 69 74 79 41 70 69 4e 61 6d 65 Data Ascii: .fields+", optionalFields\x3d"+a.optionalFields+", mode\x3d"+a.mode+", updateMru\x3d"+a.updateMru+", noServer\x3d"+a.noServer};b._getRecordTemplateConfigDebugString=function(a){var b=a.fieldOverrides?Object.keys(a.fieldOverrides):null;return"entityApiName
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 6f 72 28 66 3d 30 3b 66 3c 62 2e 5f 72 65 71 75 65 73 74 65 64 5b 61 2e 72 65 63 6f 72 64 49 64 5d 2e 6c 65 6e 67 74 68 3b 66 2b 3d 31 29 69 66 28 28 67 3d 62 2e 5f 72 65 71 75 65 73 74 65 64 5b 61 2e 72 65 63 6f 72 64 49 64 5d 5b 66 5d 29 7c 7c 67 2e 72 65 71 75 65 73 74 49 64 29 7b 66 6f 72 28 68 20 69 6e 20 67 2e 66 69 65 6c 64 73 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 2e 66 69 65 6c 64 73 5b 68 5d 29 7c 7c 28 64 5b 67 2e 66 69 65 6c 64 73 5b 68 5d 5d 3d 67 2e 72 65 71 75 65 73 74 49 64 29 3b 66 6f 72 28 68 20 69 6e 20 67 2e 72 65 66 72 65 73 68 46 69 65 6c 64 73 29 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 2e 72 65 66 72 65 73 68 46 69 65 6c 64 73 5b 68 5d 29 7c 7c 28 64 5b 67 2e 72 65 66 72 65 73 68 46 69 65 6c 64 73 5b Data Ascii: or(f=0;f<b._requested[a.recordId].length;f+=1)if((g=b._requested[a.recordId][f])\|\|g.requestId){for(h in g.fields)d.hasOwnProperty(g.fields[h])\|\|(d[g.fields[h]]=g.requestId);for(h in g.refreshFields)d.hasOwnProperty(g.refreshFields[h])\|\|(d[g.refreshFields[
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 7b 74 79 70 65 3a 67 2c 65 78 74 72 61 49 6e 66 6f 3a 66 7d 7d 2c 65 78 65 63 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 24 41 2e 75 74 69 6c 2e 69 73 45 6d 70 74 79 28 61 29 29 7b 76 61 72 20 67 3d 7b 7d 3b 69 66 28 24 41 2e 67 65 74 28 22 24 42 72 6f 77 73 65 72 2e 53 31 46 65 61 74 75 72 65 73 2e 69 73 4c 44 53 52 65 63 6f 72 64 73 44 65 62 75 67 22 29 29 7b 76 61 72 20 66 3d 0a 22 52 65 63 6f 72 64 4c 69 62 72 61 72 79 2d 6e 6f 74 69 66 79 2e 22 2b 24 41 2e 6d 65 74 72 69 63 73 53 65 72 76 69 63 65 2e 74 69 6d 65 28 29 3b 24 41 2e 6d 65 74 72 69 63 73 53 65 72 76 69 63 65 2e 6d 61 72 6b 53 74 61 72 74 28 22 53 31 50 45 52 46 22 2c 66 2c 22 6e 6f 74 69 66 69 65 64 20 22 2b 62 2e 5f 6c 69 73 74 65 6e 65 72 73 26 26 4f 62 6a 65 63 74 2e Data Ascii: {type:g,extraInfo:f}},execute:function(e){if(!$A.util.isEmpty(a)){var g={};if($A.get("$Browser.S1Features.isLDSRecordsDebug")){var f="RecordLibrary-notify."+$A.metricsService.time();$A.metricsService.markStart("S1PERF",f,"notified "+b._listeners&&Object.
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 61 66 74 20 61 63 63 65 73 73 2e 20 44 45 4c 45 54 49 4e 47 20 61 6c 6c 20 64 72 61 66 74 73 2e 22 29 2c 64 2e 5f 72 65 6d 6f 76 65 44 72 61 66 74 73 46 72 6f 6d 43 61 63 68 65 41 6e 64 4e 6f 74 69 66 79 28 61 2c 21 30 29 29 7d 7d 3b 72 65 74 75 72 6e 20 64 7d 29 3b 2a 2f 7d 29 3b 0a 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4c 69 62 72 61 72 79 45 78 70 6f 72 74 65 72 28 22 6a 73 3a 2f 2f 66 6f 72 63 65 2e 72 65 63 6f 72 64 4c 69 62 72 61 72 79 2e 63 72 75 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4c 69 62 72 61 72 79 49 6e 63 6c 75 64 65 28 22 6a 73 3a 2f 2f 66 6f 72 63 65 2e 72 65 63 6f 72 64 4c 69 62 72 61 72 79 2e 63 72 75 64 22 2c 5b 22 6a 73 3a 2f Data Ascii: aft access. DELETING all drafts."),d._removeDraftsFromCacheAndNotify(a,!0))}};return d});/});$A.componentService.addLibraryExporter("js://force.recordLibrary.crud",function(){/$A.componentService.addLibraryInclude("js://force.recordLibrary.crud",["js:/
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 29 29 7d 3b 62 2e 73 61 76 65 52 65 63 6f 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 66 2c 67 2c 68 2c 64 29 7b 62 2e 73 61 76 65 28 61 2c 6e 2e 72 65 63 6f 72 64 4f 6c 64 54 6f 4e 65 77 28 63 29 2c 66 2c 67 2c 68 2c 64 29 7d 3b 62 2e 73 61 76 65 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 2c 67 29 7b 63 2e 5f 67 65 74 53 74 6f 72 61 67 65 28 24 41 2e 67 65 74 43 61 6c 6c 62 61 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 73 61 76 65 52 65 63 6f 72 64 73 28 61 2c 62 2c 0a 66 2c 67 29 7d 29 29 7d 3b 62 2e 73 61 76 65 51 75 69 63 6b 41 63 74 69 6f 6e 52 65 63 6f 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 2c 67 2c 68 2c 64 2c 6b 2c 6e 29 7b 63 2e 5f 67 65 74 53 74 6f 72 61 67 65 28 24 41 2e 67 65 74 43 61 6c 6c 62 61 Data Ascii: ))};b.saveRecord=function(a,c,f,g,h,d){b.save(a,n.recordOldToNew(c),f,g,h,d)};b.saveRecords=function(a,b,f,g){c._getStorage($A.getCallback(function(){e._saveRecords(a,b,f,g)}))};b.saveQuickActionRecord=function(a,b,f,g,h,d,k,n){c._getStorage($A.getCallba
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 67 69 73 74 65 72 43 6d 70 43 61 63 68 65 53 74 61 74 73 28 68 29 3b 64 2e 63 61 63 68 65 53 74 61 74 73 5b 68 5d 2e 6c 6f 67 48 69 74 73 28 6c 2e 62 75 6c 6b 47 65 74 48 69 74 43 6f 75 6e 74 29 3b 64 2e 63 61 63 68 65 53 74 61 74 73 5b 68 5d 2e 6c 6f 67 4d 69 73 73 65 73 28 6c 2e 62 75 6c 6b 47 65 74 4d 69 73 73 43 6f 75 6e 74 29 3b 24 41 2e 6d 65 74 72 69 63 73 53 65 72 76 69 63 65 2e 6d 61 72 6b 28 22 66 6f 72 63 65 5f 72 65 63 6f 72 64 22 2c 22 62 75 6c 6b 52 65 63 6f 72 64 52 65 71 75 65 73 74 22 2c 6c 29 7d 63 61 74 63 68 28 66 29 7b 62 2e 77 61 72 6e 69 6e 67 28 22 43 61 75 67 68 74 20 65 78 63 65 70 74 69 6f 6e 20 77 68 69 6c 65 20 67 65 6e 65 72 61 74 69 6e 67 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 3a 20 22 2b 66 2e 6d 65 73 73 61 67 65 Data Ascii: gisterCmpCacheStats(h);d.cacheStats[h].logHits(l.bulkGetHitCount);d.cacheStats[h].logMisses(l.bulkGetMissCount);$A.metricsService.mark("force_record","bulkRecordRequest",l)}catch(f){b.warning("Caught exception while generating instrumentation: "+f.message
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 21 3d 3d 62 5b 63 5d 2c 6c 61 79 6f 75 74 4b 65 79 3a 63 7d 29 7d 29 29 3b 67 3d 65 2e 6c 65 6e 67 74 68 2d 63 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 64 3d 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 63 2c 0a 64 29 7b 63 5b 64 5d 3d 7b 72 65 63 6f 72 64 4c 61 79 6f 75 74 44 65 66 4e 61 6d 65 3a 61 5b 64 5d 2c 72 65 71 75 65 73 74 54 69 6d 65 3a 62 7d 3b 72 65 74 75 72 6e 20 63 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 63 2e 73 65 74 41 6c 6c 28 64 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 30 3c 67 26 26 28 66 2e 5f 6c 61 79 6f 75 74 49 74 65 6d 43 6f 75 6e 74 2b 3d 67 2c 24 41 2e 6d 65 74 72 69 Data Ascii: !==b[c],layoutKey:c})}));g=e.length-c},function(){}).then(function(){var b=(new Date).getTime(),d=e.reduce(function(c,d){c[d]={recordLayoutDefName:a[d],requestTime:b};return c},{});return c.setAll(d)}).then(function(){0<g&&(f._layoutItemCount+=g,$A.metri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49884	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	1877	OUT	GET /s/sfsites/c/resource/cspcommunity/resources/scripts/jquery.min.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:19 UTC	714	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:19 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Fri, 31 May 2024 17:43:19 GMT P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Wed, 13 Oct 2021 20:29:47 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: f886db853d93d2c17280872061c8ce9f
2024-04-16 17:43:19 UTC	15670	IN	Data Raw: 33 64 38 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 3d8a/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 2d 29 64 3d 4a 28 61 2c 66 5b 67 5d 29 2c 61 5b 64 5d 3d 21 28 63 5b 64 5d 3d 66 5b 67 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 30 2c 63 29 7d 29 3a 65 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 69 62 28 66 75 6e 63 74 69 0d 0a 38 30 30 30 0d 0a 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 5b 5d 2c 64 3d 68 28 61 2e 72 65 70 6c 61 63 65 28 52 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 64 5b 75 5d 3f 69 62 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 2c 67 3d 64 28 61 2c 6e 75 6c 6c 2c 65 2c 5b 5d 29 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 28 66 3d 67 5b 68 5d 29 26 26 28 61 5b 68 5d 3d 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e Data Ascii: -)d=J(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:ib(functi8000on(a){var b=[],c=[],d=h(a.replace(R,"$1"));return d[u]?ib(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 29 7c 7c 4c 2e 68 61 73 44 61 74 61 28 61 29 7d 2c 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 4d 2e 61 63 63 65 73 73 28 61 2c 62 2c 63 29 0a 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4d 2e 72 65 6d 6f 76 65 28 61 2c 62 29 7d 2c 5f 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 4c 2e 61 63 63 65 73 73 28 61 2c 62 2c 63 29 7d 2c 5f 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4c 2e 72 65 6d 6f 76 65 28 61 2c 62 29 7d 7d 29 2c 6e 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 74 68 69 73 5b 30 5d 2c 67 3d 66 26 26 66 2e 61 74 74 72 Data Ascii: )\|\|L.hasData(a)},data:function(a,b,c){return M.access(a,b,c)},removeData:function(a,b){M.remove(a,b)},_data:function(a,b,c){return L.access(a,b,c)},_removeData:function(a,b){L.remove(a,b)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attr
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 6d 4d 61 6e 69 70 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6e 2e 63 6c 65 61 6e 44 61 74 61 28 6f 62 28 74 68 69 73 29 29 2c 61 26 26 61 2e 72 65 70 6c 61 63 65 43 68 0d 0a 34 32 37 36 0d 0a 69 6c 64 28 62 2c 74 68 69 73 29 7d 29 2c 61 26 26 28 61 2e 6c 65 6e 67 74 68 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 29 3f 74 68 69 73 3a 74 68 69 73 2e 72 65 6d 6f 76 65 28 29 7d 2c 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 28 61 2c 21 30 29 7d 2c 64 6f 6d 4d 61 6e 69 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 65 2e 61 70 70 6c 79 28 5b 5d 2c 61 29 3b 76 61 72 20 63 Data Ascii: ;return this.domManip(arguments,function(b){a=this.parentNode,n.cleanData(ob(this)),a&&a.replaceCh4276ild(b,this)}),a&&(a.length\|\|a.nodeType)?this:this.remove()},detach:function(a){return this.remove(a,!0)},domManip:function(a,b){a=e.apply([],a);var c
2024-04-16 17:43:19 UTC	16384	IN	Data Raw: 2c 66 3b 72 65 74 75 72 6e 20 64 7c 7c 28 66 3d 24 62 5b 62 5d 2c 24 62 5b 62 5d 3d 65 2c 65 3d 6e 75 6c 6c 21 3d 63 28 61 2c 62 2c 64 29 3f 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 2c 24 62 5b 62 5d 3d 66 29 2c 65 7d 7d 29 3b 76 61 72 20 5f 62 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 3b 6e 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4a 28 74 68 69 73 2c 6e 2e 70 72 6f 70 2c 61 2c 62 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ,f;return d\|\|(f=$b[b],$b[b]=e,e=null!=c(a,b,d)?b.toLowerCase():null,$b[b]=f),e}});var _b=/^(?:input\|select\|textarea\|button)$/i;n.fn.extend({prop:function(a,b){return J(this,n.prop,a,b,arguments.length>1)},removeProp:function(a){return this.each(function()
2024-04-16 17:43:19 UTC	3151	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 66 3d 61 72 67 75 6d 65 6e 74 73 2c 67 2e 68 74 6d 6c 28 64 3f 6e 28 22 3c 64 69 76 3e 22 29 2e 61 70 70 65 6e 64 28 6e 2e 70 61 72 73 65 48 54 4d 4c 28 61 29 29 2e 66 69 6e 64 28 64 29 3a 61 29 7d 29 2e 63 6f 6d 70 6c 65 74 65 28 63 26 26 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 65 61 63 68 28 63 2c 66 7c 7c 5b 61 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 62 2c 61 5d 29 7d 29 2c 74 68 69 73 7d 2c 6e 2e 65 61 63 68 28 5b 22 61 6a 61 78 53 74 61 72 74 22 2c 22 61 6a 61 78 53 74 6f 70 22 2c 22 61 6a 61 78 43 6f 6d 70 6c 65 74 65 22 2c 22 61 6a 61 78 45 72 72 6f 72 22 2c 22 61 6a 61 78 53 75 63 63 65 73 73 22 2c 22 61 6a 61 78 53 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 2e 66 6e 5b 62 5d 3d 66 75 6e 63 74 Data Ascii: tion(a){f=arguments,g.html(d?n("<div>").append(n.parseHTML(a)).find(d):a)}).complete(c&&function(a,b){g.each(c,f\|\|[a.responseText,b,a])}),this},n.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(a,b){n.fn[b]=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49885	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	1163	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:19 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 15 Date: Tue, 16 Apr 2024 17:43:19 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c1ad0e11a95c9a5b3f4d80fde7d23fea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: x6qOqPdo9WbAHmGvmgTM_BAshQrnFgAgGLHQBJ3ty4ZH2RDTHguViA==
2024-04-16 17:43:19 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49886	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:19 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:19 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Tue, 16 Apr 2024 17:43:19 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 19ce5400ce3c3ceb334a546c0524d848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: XwgsXMGi-yKEf37OdUFHyaW7m-X7HdhJHdd3ChJseleSdcFqAHlldA==
2024-04-16 17:43:19 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49887	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:20 UTC	1929	OUT	GET /s/sfsites/runtimedownload/fonts.css?lastMod=1712837529000&brandSet=52bff5e6-866e-4e63-8c44-d79144c0db18 HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:20 UTC	426	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:20 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=31536000 Expires: Wed, 16 Apr 2025 17:43:20 GMT Last-Modified: Thu, 11 Apr 2024 12:12:09 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: a70168deebe53b9fb66afe54460f2659
2024-04-16 17:43:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49888	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:20 UTC	2377	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pv=17132735990001672335788&rv=1713288537000 HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:21 UTC	613	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:21 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=31536000,immutable Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:20 GMT Set-Cookie: sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; path=/; Expires=Tue, 16-Apr-2024 20:43:21 GMT; SameSite=None; Secure Server: sfdcedge X-SFDC-Request-Id: 7d285c41fc5faee8559fe0af623bfa07
2024-04-16 17:43:21 UTC	15771	IN	Data Raw: 38 30 30 30 0d 0a 27 75 6e 64 65 66 69 6e 65 64 27 3d 3d 3d 74 79 70 65 6f 66 20 41 75 72 61 26 26 28 41 75 72 61 3d 7b 7d 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 0a 09 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 63 63 65 73 73 52 65 73 6f 75 72 63 65 73 28 29 20 7b 0a 09 09 09 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 66 6f 72 63 65 3a 63 75 73 74 6f 6d 50 65 72 6d 73 27 2c 20 27 66 6f 72 63 65 2f 63 75 73 74 6f 6d 50 65 72 6d 73 27 2c 20 5b 27 65 78 70 6f 72 74 73 27 5d 2c 20 6e 75 6c 6c 2c 20 7b 7d 29 3b 20 0a 09 09 09 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 66 6f 72 63 65 3a 75 Data Ascii: 8000'undefined'===typeof Aura&&(Aura={});(function() { function initAccessResources() { $A.componentService.addModule('markup://force:customPerms', 'force/customPerms', ['exports'], null, {}); $A.componentService.addModule('markup://force:u
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 38 31 33 38 39 36 34 30 30 30 7d 2c 22 67 65 74 52 65 63 6f 72 64 73 46 6f 72 53 61 46 6c 6f 77 22 3a 7b 22 44 4f 5a 49 53 46 22 3a 31 36 32 38 37 32 38 34 39 33 30 30 30 7d 2c 22 49 6d 61 67 65 5f 54 69 65 72 22 3a 7b 22 41 70 74 74 75 73 5f 43 6f 6e 66 69 67 32 22 3a 31 34 33 38 34 38 30 31 38 30 30 30 30 7d 2c 22 53 65 72 76 69 63 65 4e 6f 77 44 61 74 61 53 65 72 76 65 72 5f 65 6e 5f 47 42 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 33 30 30 30 7d 2c 22 49 6d 61 67 65 5f 4d 6f 76 65 4c 65 66 74 22 3a 7b 22 41 70 74 74 75 73 5f 41 70 70 72 6f 76 61 6c 22 3a 31 34 33 38 34 37 38 37 30 34 30 30 30 7d 2c 22 50 52 4d 5f 69 63 6f 6e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 6e 6f 63 69 72 63 6c 65 22 3a 7b 22 22 3a 31 34 34 33 36 35 36 Data Ascii: 8138964000},"getRecordsForSaFlow":{"DOZISF":1628728493000},"Image_Tier":{"Apttus_Config2":1438480180000},"ServiceNowDataServer_en_GB":{"Simpplr":1658186123000},"Image_MoveLeft":{"Apttus_Approval":1438478704000},"PRM_icon_subscription_nocircle":{"":1443656
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 43 53 50 5f 69 63 6f 6e 5f 70 72 6f 64 75 63 74 5f 67 6f 6f 67 6c 65 61 70 70 73 22 3a 7b 22 22 3a 31 35 30 30 30 37 37 35 32 37 30 30 30 7d 2c 22 46 69 6c 65 44 61 74 61 53 65 72 76 65 72 5f 65 6e 5f 55 53 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 37 39 31 30 35 31 37 32 30 30 30 7d 2c 22 6d 61 76 65 6e 70 72 6f 22 3a 7b 22 22 3a 31 34 37 36 32 33 33 31 31 30 30 30 30 7d 2c 22 43 6f 6d 70 6c 79 43 6f 6e 66 69 67 4a 53 4c 69 62 22 3a 7b 22 41 70 74 74 75 73 5f 43 4d 43 6f 6e 66 69 67 22 3a 31 36 37 30 30 37 31 33 30 35 30 30 30 7d 2c 22 64 73 74 6f 6f 6c 74 69 70 22 3a 7b 22 64 66 73 6c 65 22 3a 31 36 39 31 32 35 32 35 34 37 30 30 30 7d 2c 22 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 5f 68 79 5f 41 4d 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 Data Ascii: CSP_icon_product_googleapps":{"":1500077527000},"FileDataServer_en_US":{"Simpplr":1679105172000},"mavenpro":{"":1476233110000},"ComplyConfigJSLib":{"Apttus_CMConfig":1670071305000},"dstooltip":{"dfsle":1691252547000},"PushNotifications_hy_AM":{"Simpplr":1
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 37 39 31 30 36 35 30 39 30 30 30 7d 2c 22 4d 61 70 73 4a 53 41 64 76 61 6e 63 65 64 22 3a 7b 22 6d 61 70 73 22 3a 31 37 31 32 32 30 30 34 31 31 30 30 30 7d 2c 22 43 53 50 5f 69 63 6f 6e 5f 73 68 6f 77 6d 6f 72 65 22 3a 7b 22 22 3a 31 34 33 35 30 31 32 39 39 31 30 30 30 7d 2c 22 52 73 76 70 44 61 74 61 53 65 72 76 65 72 5f 65 6e 5f 47 42 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 35 30 30 30 7d 2c 22 43 68 61 72 74 4a 53 22 3a 7b 22 64 61 74 61 6d 61 73 6b 22 3a 31 36 30 32 30 33 34 38 37 35 30 30 30 7d 2c 22 49 6d 61 67 65 5f 4d 65 6e 75 22 3a 7b 22 41 70 74 74 75 73 5f 43 6f 6e 66 69 67 32 22 3a 31 34 33 38 34 38 30 31 38 30 30 30 30 7d 2c 22 45 78 70 65 72 74 69 73 65 44 61 74 61 53 65 72 Data Ascii: :{"Simpplr":1679106509000},"MapsJSAdvanced":{"maps":1712200411000},"CSP_icon_showmore":{"":1435012991000},"RsvpDataServer_en_GB":{"Simpplr":1658186125000},"ChartJS":{"datamask":1602034875000},"Image_Menu":{"Apttus_Config2":1438480180000},"ExpertiseDataSer
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 70 6c 61 74 65 73 5f 6d 69 6e 5f 6a 73 5f 64 65 76 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 34 37 36 32 30 36 30 36 31 30 30 30 7d 2c 22 43 53 50 5f 44 6f 77 6e 6c 6f 61 64 5f 49 63 6f 6e 5f 47 6f 6f 67 6c 65 5f 41 70 70 73 22 3a 7b 22 22 3a 31 36 30 32 37 33 34 38 39 30 30 30 30 7d 2c 22 43 53 50 5f 69 63 6f 6e 5f 70 72 6f 64 75 63 74 5f 64 72 6f 70 62 6f 78 5f 62 77 22 3a 7b 22 22 3a 31 35 30 30 30 37 37 35 32 37 30 30 30 7d 2c 22 54 6f 67 67 6c 65 46 6f 6c 6c 6f 77 44 61 74 61 53 65 72 76 65 72 5f 65 6e 5f 47 42 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 35 30 30 30 7d 2c 22 49 6e 41 70 70 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 5f 65 6c 5f 47 52 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 37 30 38 31 33 38 39 36 37 30 30 30 7d 2c Data Ascii: plates_min_js_dev":{"Simpplr":1476206061000},"CSP_Download_Icon_Google_Apps":{"":1602734890000},"CSP_icon_product_dropbox_bw":{"":1500077527000},"ToggleFollowDataServer_en_GB":{"Simpplr":1658186125000},"InAppNotifications_el_GR":{"Simpplr":1708138967000},
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 6b 65 79 22 3a 7b 22 22 3a 31 35 35 34 39 39 37 33 32 33 30 30 30 7d 2c 22 53 75 62 6d 69 74 52 65 71 75 65 73 74 43 6f 6e 66 69 67 5f 53 61 6d 70 6c 65 22 3a 7b 22 41 70 74 74 75 73 22 3a 31 34 33 38 34 34 39 34 30 38 30 30 30 7d 2c 22 54 6f 70 69 63 44 61 74 61 53 65 72 76 65 72 5f 64 65 5f 44 45 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 34 30 30 30 7d 2c 22 47 65 6e 43 70 71 41 63 74 69 76 61 74 69 6f 6e 22 3a 7b 22 64 66 73 6c 65 22 3a 31 36 39 31 32 35 32 35 34 37 30 30 30 7d 2c 22 6a 73 43 6f 6d 70 6f 6e 65 6e 74 73 22 3a 7b 22 70 73 65 22 3a 31 36 33 30 37 35 33 38 36 39 30 30 30 7d 2c 22 47 53 41 70 70 43 53 53 22 3a 7b 22 4a 42 43 58 4d 22 3a 31 37 30 37 38 30 33 38 30 39 30 30 30 7d 2c 22 4c 6f 63 61 6c 65 4b 65 79 5f 6b Data Ascii: key":{"":1554997323000},"SubmitRequestConfig_Sample":{"Apttus":1438449408000},"TopicDataServer_de_DE":{"Simpplr":1658186124000},"GenCpqActivation":{"dfsle":1691252547000},"jsComponents":{"pse":1630753869000},"GSAppCSS":{"JBCXM":1707803809000},"LocaleKey_k
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 31 36 31 37 32 34 38 31 35 34 30 30 30 7d 2c 22 50 6f 73 74 49 6e 73 74 61 6c 6c 53 65 74 75 70 53 65 72 76 65 72 5f 74 6c 5f 50 48 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 37 30 38 31 33 39 39 37 36 30 30 30 7d 2c 22 43 61 72 6f 75 73 65 6c 44 61 74 61 53 65 72 76 65 72 5f 74 68 5f 54 48 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 39 30 30 30 7d 2c 22 6c 6f 67 69 6e 55 74 69 6c 73 22 3a 7b 22 64 66 73 6c 65 22 3a 31 36 39 31 32 35 32 35 34 38 30 30 30 7d 2c 22 53 65 72 76 69 63 65 4e 6f 77 44 61 74 61 53 65 72 76 65 72 5f 65 6e 5f 55 53 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 34 38 31 38 30 38 36 37 30 30 30 7d 2c 22 6a 51 75 65 72 79 4d 6f 62 69 6c 65 22 3a 7b 22 41 70 74 74 75 73 5f 43 6f 6e 66 69 67 32 22 3a 31 36 37 30 30 Data Ascii: 1617248154000},"PostInstallSetupServer_tl_PH":{"Simpplr":1708139976000},"CarouselDataServer_th_TH":{"Simpplr":1658186129000},"loginUtils":{"dfsle":1691252548000},"ServiceNowDataServer_en_US":{"Simpplr":1648180867000},"jQueryMobile":{"Apttus_Config2":16700
2024-04-16 17:43:21 UTC	3435	IN	Data Raw: 30 7d 2c 22 4d 79 53 65 74 74 69 6e 67 44 61 74 61 53 65 72 76 65 72 5f 69 74 5f 49 54 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 35 38 31 38 36 31 32 33 30 30 30 7d 2c 22 43 6f 6e 6e 65 63 74 45 78 74 65 72 6e 61 6c 41 70 70 5f 66 72 5f 46 52 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 37 39 31 30 35 31 37 32 30 30 30 7d 2c 22 44 53 55 5f 46 69 6e 61 6e 63 69 61 6c 5f 53 65 72 76 69 63 65 73 22 3a 7b 22 22 3a 31 34 39 37 30 34 38 39 38 30 30 30 30 7d 2c 22 50 65 6f 70 6c 65 44 61 74 61 53 65 72 76 65 72 5f 6d 73 5f 4d 59 22 3a 7b 22 53 69 6d 70 70 6c 72 22 3a 31 36 39 36 38 33 32 39 33 38 30 30 30 7d 2c 22 43 53 50 5f 44 6f 77 6e 6c 6f 61 64 5f 49 63 6f 6e 5f 50 72 69 6e 74 5f 44 72 69 76 65 72 22 3a 7b 22 22 3a 31 35 39 30 36 30 39 30 34 31 30 30 30 Data Ascii: 0},"MySettingDataServer_it_IT":{"Simpplr":1658186123000},"ConnectExternalApp_fr_FR":{"Simpplr":1679105172000},"DSU_Financial_Services":{"":1497048980000},"PeopleDataServer_ms_MY":{"Simpplr":1696832938000},"CSP_Download_Icon_Print_Driver":{"":1590609041000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49889	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:20 UTC	2806	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348
2024-04-16 17:43:21 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:20 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=900 Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:20 GMT Set-Cookie: sfdc-stream=!m/i0OI7TLN9z8odbVoHomZEQ65JcePMFQ1Q19aeCeizI7FYt5YPlHjbRRy9dtBx54rnpPrNkoGRlo5c=; path=/; Expires=Tue, 16-Apr-2024 20:43:20 GMT; SameSite=None; Secure Server: sfdcedge X-SFDC-Request-Id: 46061a6be454ea4ca580c624ca251293
2024-04-16 17:43:21 UTC	15787	IN	Data Raw: 33 65 62 31 0d 0a 77 69 6e 64 6f 77 2e 41 75 72 61 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 41 75 72 61 20 3d 20 7b 7d 29 3b 0a 77 69 6e 64 6f 77 2e 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 20 3d 20 7b 7d 29 3b 0a 77 69 6e 64 6f 77 2e 41 75 72 61 2e 61 70 70 42 6f 6f 74 73 74 72 61 70 20 3d 20 7b 22 64 61 74 61 22 3a 7b 22 61 70 70 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 7d 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 73 63 68 65 Data Ascii: 3eb1window.Aura \|\| (window.Aura = {});window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/*[0]","attributes":{"values":{"sche
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 34 36 34 31 2d 61 61 32 35 2d 39 61 62 33 65 66 65 37 37 31 66 63 22 2c 22 65 76 65 6e 74 22 3a 22 65 72 72 6f 72 22 7d 2c 22 2f 71 75 65 73 74 69 6f 6e 2f 3a 72 65 63 6f 72 64 49 64 22 3a 7b 22 64 65 76 5f 6e 61 6d 65 22 3a 22 51 75 65 73 74 69 6f 6e 5f 44 65 74 61 69 6c 22 2c 22 63 61 63 68 65 5f 6d 69 6e 75 74 65 73 22 3a 22 33 30 22 2c 22 74 68 65 6d 65 4c 61 79 6f 75 74 54 79 70 65 22 3a 22 49 6e 6e 65 72 22 2c 22 72 6f 75 74 65 5f 75 64 64 69 64 22 3a 22 30 49 33 31 57 30 30 30 30 30 30 50 50 62 66 22 2c 22 76 69 65 77 5f 75 75 69 64 22 3a 22 31 31 66 66 30 61 39 31 2d 39 30 61 35 2d 34 66 62 32 2d 39 35 38 36 2d 38 31 39 31 66 34 38 34 34 64 35 30 22 2c 22 73 65 6f 5f 74 69 74 6c 65 22 3a 22 51 75 65 73 74 69 6f 6e 20 44 65 74 61 69 6c 22 2c 22 70 Data Ascii: 4641-aa25-9ab3efe771fc","event":"error"},"/question/:recordId":{"dev_name":"Question_Detail","cache_minutes":"30","themeLayoutType":"Inner","route_uddid":"0I31W000000PPbf","view_uuid":"11ff0a91-90a5-4fb2-9586-8191f4844d50","seo_title":"Question Detail","p
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 22 61 75 72 61 3a 2f 2f 41 75 72 61 2e 43 6f 6d 70 6f 6e 65 6e 74 5b 5d 22 2c 22 49 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 22 6f 6e 44 65 73 74 72 6f 79 22 3a 5b 22 6f 6e 44 65 73 74 72 6f 79 22 2c 22 61 75 72 61 3a 2f 2f 4f 62 6a 65 63 74 22 2c 22 49 22 2c 66 61 6c 73 65 2c 6e 75 6c 6c 5d 7d 7d 2c 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 66 6f 72 63 65 43 6f 6d 6d 75 6e 69 74 79 3a 74 68 65 6d 65 53 68 61 72 65 64 41 74 74 72 69 62 75 74 65 73 55 70 64 61 74 65 64 22 2c 22 74 22 3a 22 41 50 50 4c 49 43 41 54 49 4f 4e 22 2c 22 78 73 22 3a 22 49 22 2c 22 61 22 3a 7b 22 63 6f 6d 6d 54 68 65 6d 65 47 72 6f 75 70 49 64 22 3a 5b 22 63 6f 6d 6d 54 68 65 6d 65 47 72 6f 75 70 49 64 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c Data Ascii: "aura://Aura.Component[]","I",false,[]],"onDestroy":["onDestroy","aura://Object","I",false,null]}},{"descriptor":"markup://forceCommunity:themeSharedAttributesUpdated","t":"APPLICATION","xs":"I","a":{"commThemeGroupId":["commThemeGroupId","aura://String",
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 3a 72 65 74 75 72 6e 5c 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 42 42 42 5c 22 3d 3d 3d 61 2e 74 61 72 67 65 74 3f 64 28 5c 22 4c 69 67 68 74 6e 69 6e 67 4f 72 64 65 72 4d 61 6e 61 67 65 6d 65 6e 74 2f 68 6f 6d 65 5c 22 2c 5c 6e 5c 22 2f 73 65 74 75 70 2f 5c 22 2c 61 29 3a 65 28 61 29 3b 63 61 73 65 20 5c 22 6f 70 74 69 6d 69 7a 65 72 5f 73 63 61 6e 5f 72 65 73 75 6c 74 73 5c 22 3a 72 65 74 75 72 6e 20 62 3d 7b 74 79 70 65 3a 5c 22 73 74 61 6e 64 61 72 64 5f 5f 61 70 70 5c 22 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 61 70 70 54 61 72 67 65 74 3a 5c 22 73 74 61 6e 64 61 72 64 5f 5f 4f 70 74 69 6d 69 7a 65 72 5c 22 2c 73 75 62 4e 6f 64 65 49 64 3a 5c 22 68 6f 6d 65 5c 22 7d 7d 2c 67 28 61 2c 62 29 3b 63 61 73 65 20 5c 22 64 69 73 63 6f 76 65 72 79 5f Data Ascii: :return\"000000000000000BBB\"===a.target?d(\"LightningOrderManagement/home\",\n\"/setup/\",a):e(a);case \"optimizer_scan_results\":return b={type:\"standard__app\",attributes:{appTarget:\"standard__Optimizer\",subNodeId:\"home\"}},g(a,b);case \"discovery_
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 76 65 28 62 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 50 6f 69 6e 74 65 72 4f 76 65 72 6c 61 70 5c 22 5d 26 26 5c 6e 28 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 50 6f 69 6e 74 65 72 4f 76 65 72 6c 61 70 5c 22 5d 2e 64 69 73 61 62 6c 65 28 29 2c 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 70 6f 69 6e 74 65 72 42 6f 78 5c 22 5d 2e 64 69 73 61 62 6c 65 28 29 29 7d 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 5d 2e 65 6e 61 62 6c 65 28 29 3b 63 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 62 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 5f 70 6f 69 6e 74 65 72 5c 22 5d 2e 65 6e 61 62 6c 65 28 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 50 6f 69 6e 74 65 72 4f 76 65 72 6c 61 70 5c 22 Data Ascii: ve(b);a.constraints[b+\"PointerOverlap\"]&&\n(a.constraints[b+\"PointerOverlap\"].disable(),a.constraints[b+\"pointerBox\"].disable())});a.constraints[b].enable();c.classList.add(b);a.constraints[b+\"_pointer\"].enable();a.constraints[b+\"PointerOverlap\"
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 26 61 2e 67 65 74 28 5c 22 76 2e 66 61 6c 6c 62 61 63 6b 50 6f 6c 6c 69 6e 67 45 6e 61 62 6c 65 64 5c 22 29 29 7b 76 61 72 20 63 3d 62 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 26 26 62 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 2e 73 74 61 72 74 73 57 69 74 68 28 5c 22 2f 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5c 22 29 2c 66 3d 5c 22 2f 6d 65 74 61 2f 73 75 62 73 63 72 69 62 65 5c 22 21 3d 62 2e 63 68 61 6e 6e 65 6c 26 26 5c 22 2f 6d 65 74 61 2f 75 6e 73 75 62 73 63 72 69 62 65 5c 22 21 3d 62 2e 63 68 61 6e 6e 65 6c 3b 69 66 28 21 62 2e 73 75 63 63 65 73 73 66 75 6c 26 26 28 66 7c 7c 63 29 29 7b 74 72 79 7b 74 68 69 73 2e 73 74 6f 70 53 74 72 65 61 6d 69 6e 67 28 61 29 7d 63 61 74 63 68 28 6c 29 7b 24 41 2e 6c 6f 67 Data Ascii: &a.get(\"v.fallbackPollingEnabled\")){var c=b.subscription&&b.subscription.startsWith(\"/s/notifications/notification\"),f=\"/meta/subscribe\"!=b.channel&&\"/meta/unsubscribe\"!=b.channel;if(!b.successful&&(f\|\|c)){try{this.stopStreaming(a)}catch(l){$A.log
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 22 3a 22 64 69 76 22 7d 2c 22 62 6f 64 79 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 62 6f 64 79 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 75 6e 73 3a 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 22 7d 2c 22 6c 6f 63 61 6c 49 64 22 3a 22 75 6e 73 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 6d 70 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 75 73 65 53 74 72 65 61 6d 69 6e 67 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 75 73 65 53 74 72 65 61 6d 69 6e 67 22 2c 22 76 61 6c 75 65 22 3a 7b 22 65 78 70 72 54 79 70 65 22 3a 22 46 55 4e 43 54 49 4f 4e 22 2c 22 63 6f 64 65 22 3a 22 66 75 6e 63 74 69 6f 6e 28 63 6d Data Ascii: ":"div"},"body":{"descriptor":"body","value":[{"componentDef":{"descriptor":"markup://uns:notifications"},"localId":"unsNotificationCmp","attributes":{"values":{"useStreaming":{"descriptor":"useStreaming","value":{"exprType":"FUNCTION","code":"function(cm
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 6e 67 2e 53 74 72 69 6e 67 22 2c 22 6c 6f 67 67 61 62 6c 65 22 3a 74 72 75 65 7d 5d 7d 5d 7d 2c 22 61 64 22 3a 5b 5b 22 62 6f 64 79 22 2c 22 61 75 72 61 3a 2f 2f 41 75 72 61 2e 43 6f 6d 70 6f 6e 65 6e 74 5b 5d 22 2c 22 47 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 5b 22 73 4f 62 6a 65 63 74 4e 61 6d 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 47 22 2c 66 61 6c 73 65 5d 2c 5b 22 66 6c 65 78 69 50 61 67 65 44 65 76 65 6c 6f 70 65 72 4e 61 6d 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 74 72 75 65 5d 2c 5b 22 63 6f 6e 74 65 78 74 22 2c 22 61 75 72 61 3a 2f 2f 4f 62 6a 65 63 74 22 2c 22 49 22 2c 66 61 6c 73 65 2c 6e 75 6c 6c 5d 2c 5b 22 64 69 73 70 6c 61 79 4f 6e 4c 6f 61 64 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e Data Ascii: ng.String","loggable":true}]}]},"ad":[["body","aura://Aura.Component[]","G",false,[]],["sObjectName","aura://String","G",false],["flexiPageDeveloperName","aura://String","I",true],["context","aura://Object","I",false,null],["displayOnLoad","aura://Boolean
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 7d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 22 2c 22 76 61 6c 75 65 22 3a 7b 22 6f 6e 6b 65 79 75 70 22 3a 7b 22 65 78 70 72 54 79 70 65 22 3a 22 50 52 4f 50 45 52 54 59 22 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 7a 6f 6f 6d 69 6e 5f 61 70 70 3a 53 65 61 72 63 68 53 6f 75 72 63 65 73 44 72 6f 70 64 6f 77 6e 22 2c 22 70 61 74 68 22 3a 22 63 2e 68 61 6e 64 6c 65 4b 65 79 55 70 22 7d 2c 22 63 6c 61 73 73 22 3a 22 64 72 6f 70 64 6f 77 6e 5f 5f 63 68 65 76 72 6f 6e 2d 77 72 61 70 70 65 72 22 7d 7d 2c 22 74 61 67 22 3a 7b 22 64 65 73 63 72 69 70 74 6f Data Ascii: },"attributes":{"values":{"HTMLAttributes":{"descriptor":"HTMLAttributes","value":{"onkeyup":{"exprType":"PROPERTY","byValue":false,"target":"zoomin_app:SearchSourcesDropdown","path":"c.handleKeyUp"},"class":"dropdown__chevron-wrapper"}},"tag":{"descripto
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 5b 7b 22 65 78 70 72 54 79 70 65 22 3a 22 50 52 4f 50 45 52 54 59 22 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 66 6f 72 63 65 3a 68 65 61 64 65 72 42 75 74 74 6f 6e 22 2c 22 70 61 74 68 22 3a 22 76 2e 69 73 4d 65 6e 75 4f 70 65 6e 22 7d 2c 7b 22 65 78 70 72 54 79 70 65 22 3a 22 50 52 4f 50 45 52 54 59 22 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 66 6f 72 63 65 3a 68 65 61 64 65 72 42 75 74 74 6f 6e 22 2c 22 70 61 74 68 22 3a 22 76 2e 68 65 61 64 65 72 42 75 74 74 6f 6e 43 6c 61 73 73 22 7d 5d 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 7d 7d 7d 7d 7d 5d 7d 5d 2c 22 63 63 22 3a 22 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: [{"exprType":"PROPERTY","byValue":false,"target":"force:headerButton","path":"v.isMenuOpen"},{"exprType":"PROPERTY","byValue":false,"target":"force:headerButton","path":"v.headerButtonClass"}],"byValue":false}}}}}]}],"cc":"$A.componentService.addComponent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49890	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	1943	OUT	GET /s/sfsites/c/resource/RecaptchaHeader HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!Pdjt7LNp1DGDykDSTQD+//9ql1rJLxDYzwcEcm5qyynxMtN5oyG0OKc9E+emmh332PuUB1RfZ3qM3qY=
2024-04-16 17:43:21 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:21 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:21 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Thu, 30 Jun 2022 02:32:49 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: bdd00e1a310a22438559cd65333c560d
2024-04-16 17:43:21 UTC	1943	IN	Data Raw: 37 38 62 0d 0a 76 61 72 20 67 72 65 63 61 70 74 63 68 61 52 65 61 64 79 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 6f 6e 6c 6f 61 64 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 67 72 65 63 61 70 74 63 68 61 52 65 61 64 79 20 3d 20 74 72 75 65 3b 20 7d 3b 0d 0a 0d 0a 76 61 72 20 76 65 72 69 66 79 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 6f 6b 65 6e 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 27 67 72 65 63 61 70 74 63 68 61 56 65 72 69 66 69 65 64 27 2c 20 7b 27 64 65 74 61 69 6c 27 3a 20 7b 72 65 73 70 6f 6e 73 65 3a 20 74 6f 6b 65 6e 20 7d 7d 29 29 3b 0d 0a 7d 3b 0d 0a 76 61 72 20 65 72 72 6f 72 43 61 6c 6c Data Ascii: 78bvar grecaptchaReady = false;var onloadCallback = function(){ grecaptchaReady = true; };var verifyCallback = function(token) { document.dispatchEvent(new CustomEvent('grecaptchaVerified', {'detail': {response: token }}));};var errorCall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49892	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	886	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=1&ClientTime=1713289400187&PageStart=1713289396931&PrevBundleTime=0&LastActivity=2771&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 59129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 92 db 46 b2 28 fa 2b 38 ad 70 8c da 26 29 ec 24 bb 67 fc 8e 46 b6 9f 7d 46 f6 4c 8c 3d 3e 8b ec 70 80 24 48 42 0d 12 14 00 f6 c6 d0 f9 b5 fb 49 ef 17 5e d6 06 d4 8a 85 64 cb b2 af a5 19 0b ac 25 2b 2b 2b 2b 2b 2b 2b 2b eb 70 f1 7d fc ee e2 ca 19 5c fc e7 3a de e2 8f 2f 6f cb e2 e2 ea cd e1 e2 6f c9 76 71 71 e5 06 83 8b 97 f9 0a 25 5d ac cb 72 57 5c bd 78 71 77 77 37 5a 64 f3 7d 91 ac b6 a3 79 b6 79 b1 cb 93 db 68 fe 70 31 b8 f8 f3 bf 7d f1 f7 57 3f fc f7 3f be b4 d6 e5 26 fd 1c 52 3a 54 ba f8 b9 6a ff fd 80 35 3c 71 a6 93 aa e9 65 94 16 f1 c0 d1 97 eb 85 e0 36 ba 4d 56 51 19 6b db e4 5a bc 58 c4 cb 68 9f 96 17 83 ed 3e 4d 07 17 8b 6c 43 3f 31 2e 5a 4c c2 ba f6 78 3e 1b 07 9e 17 2f fc c0 5f 38 81 b6 b5 a0 6e cd f1 25 Data Ascii: F(+8p&)$gF}FL=>p$HBI^d%++++++++p}\:/oovqq%]rW\xqww7Zd}yyhp1}W??&R:Tj5<qe6MVQkZXh>MlC?1.ZLx>/_8n%
2024-04-16 17:43:21 UTC	16384	OUT	Data Raw: 2c 7c f4 97 e2 87 77 c6 49 09 98 cd 75 7e 24 78 2e 0d 0b 98 3a f3 75 c5 16 cc 52 eb 88 96 5a 71 67 19 c8 8f 7a d4 4f 6e 31 c7 86 40 3e a7 70 6a f5 8b f7 f0 6a 18 09 de b5 4d 8a 5c ae d1 a2 72 b6 a7 6c 54 e4 0e d2 0b 74 d7 ca b9 94 60 a9 1d 6b ed e0 2e ba cf c0 1f 32 f0 99 d8 c3 b8 d6 3a f4 b1 ab bc c5 73 7b 60 a1 ff 69 d6 79 3a d0 80 f1 41 18 01 7a b6 62 f3 6a a1 18 28 ba e9 0c 1c c0 55 de cd f1 76 06 aa ec 3a bf 14 f4 da 0e 9e a9 fd e1 74 77 ff 24 b0 45 4d 9b da ea 5d 5d 97 5b a1 74 db f0 76 01 23 c6 34 6e a1 b2 70 16 2c fb 6f 77 92 f1 95 be d3 ba b2 e3 c7 25 41 f3 9f a5 37 4a 53 ba a8 c0 05 6c ab 6f 1e ea df 95 67 0b 49 27 36 63 76 c4 a0 71 d4 41 ed e1 35 00 11 85 f1 b8 cb 1d e2 19 cd 22 05 3e 3f 44 24 e1 f0 ea be 97 a3 52 8a 1b 4e 2c 44 08 ac f1 44 13 Data Ascii: ,\|wIu~$x.:uRZqgzOn1@>pjjM\rlTt`k.2:s{`iy:Azbj(Uv:tw$EM]][tv#4np,ow%A7JSlogI'6cvqA5">?D$RN,DD
2024-04-16 17:43:21 UTC	16384	OUT	Data Raw: 8d e6 1e 7a bb ae aa 39 d1 16 db 53 e4 fd e2 d3 c7 82 a3 ce ef 13 b2 25 e5 e2 58 c5 88 04 99 f2 ec ca d8 90 cf 49 13 80 59 58 dc da 99 32 81 de c4 e2 6b 96 23 f8 fb 02 50 dc 9d 0e 39 89 51 3d c9 ee 78 3f ee 00 2b 78 a5 f7 1b f4 5a e7 57 05 23 d2 34 62 4f a9 08 7d 07 12 0b ca 50 17 c3 28 1c 48 50 46 ba 1e 77 a1 65 fe a1 ac ea 3d 88 2f 7e 0c 9b 4f fc 38 ee e5 78 08 ae db 2e 9c ad bc ea ba 7e 1f fb b7 be e8 77 d3 6e 7b f9 31 bd 38 bb ac 6f be d9 c5 17 2f cf 7f f3 9b e8 d5 8a 52 0a c7 79 91 9a f5 e2 0f 93 76 f3 f7 f0 1f ed 52 77 2a 6b d7 ae fb 41 c4 d7 28 2e 52 49 fb 9b d0 27 1c 5f 4e e3 46 dd b3 65 f2 ee 6c f3 9b 97 ff fe ad bf ce be 3d 7b fd e2 d3 79 cb e3 a6 38 6e 5c 64 9a e4 33 1f 0f 7b 9d aa 21 bf da dd 7a af 1a 74 27 8a 8b 9c 5d 92 e2 82 3d 40 38 53 72 Data Ascii: z9S%XIYX2k#P9Q=x?+xZW#4bO}P(HPFwe=/~O8x.~wn{18o/RyvRw*kA(.RI'_NFel={y8n\d3{!zt']=@8Sr
2024-04-16 17:43:21 UTC	9977	OUT	Data Raw: 6f cf de 1c 59 de 7d c1 d5 3a bb ee de d3 a3 62 74 b4 2e af 85 1d fb 9a fc c5 e9 ae b2 cd 84 9a 87 c5 3a 4e 77 5e 15 6c 8a b4 5b 7c 0a e8 bd c4 32 06 31 47 c8 71 bf 65 0c 92 78 ee 55 d9 fb 78 f5 69 8a 36 3e e7 7d 56 d7 ef 6f de db af c3 98 4b d5 f0 e7 db dd 2a f2 df 1b 25 f3 ef c3 20 16 71 27 e1 20 4a 6e e7 a7 45 96 93 19 dd 2f 38 74 3a 0c 98 df 87 86 1c 1f cd 0d eb 8f e9 b2 83 01 37 c9 87 6a be f2 71 c1 79 3a 3a 62 b7 f8 31 7a cc 8f d1 e4 35 5e 35 78 30 bb 95 38 cc 93 2f fd 13 4f a5 5e f3 ea 72 85 ce 96 95 f7 7b 2d 19 8f d0 35 70 ed 99 ad fb 47 f4 0b 04 f0 61 14 17 06 5c 70 c5 da f3 ea d2 0f fd 1f d5 5c 70 13 e3 5c 36 31 4c e2 5c f9 cf 03 6c 48 0c 6e 1a 31 e7 1f 14 21 fb 2b c2 1a d9 a2 93 e3 f1 e3 22 1f b8 10 9d 70 76 4c 9a 8c 25 15 a8 97 24 83 5c 46 da Data Ascii: oY}:bt.:Nw^l[\|21GqexUxi6>}VoK*% q' JnE/8t:7jqy::b1z5^5x08/O^r{-5pGa\p\p\61L\lHn1!+"pvL%$\F
2024-04-16 17:43:21 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:21 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:21 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 31 32 33 31 7d 0a Data Ascii: {"BundleTime":1713289401231}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49893	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:21 UTC	988	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 20 3d 20 7b 0a 09 09 09 64 6c 6f 5f 69 6e 69 74 5f 73 70 61 6e 3a 20 27 49 4e 49 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 72 75 6c 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 73 70 61 6e 3a 20 27 52 55 4c 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e Data Ascii: function(FS) {const eventNameMap = {dlo_init_span: 'INIT_DURATION',dlo_rule_registration_span: 'RULE_REGISTRATION_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEven
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 61 64 6f 62 65 5f 61 6d 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 65 64 64 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 67 6f 6f 67 6c 65 5f 65 63 27 5d 20 3d 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 70 61 67 65 76 69 65 77 22 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 70 61 67 65 54 79 70 65 2c 20 70 61 67 65 4e 61 6d 65 29 5d 22 20 7d 2c 0a 20 Data Ascii: window['_dlo_rules_adobe_am'] = [];window['_dlo_rules_ceddl'] = [];window['_dlo_rules_google_ec'] = [ { "id": "fs-ga-pageview", "source": "dataLayer", "operators": [ { "name": "query", "select": "$[?(pageType, pageName)]" },
2024-04-16 17:43:21 UTC	425	IN	Data Raw: 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 63 6c 69 63 6b 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 63 6c 69 63 6b 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 Data Ascii: "operators": [ { "name": "query", "select": "$.ecommerce.click.products[0]" }, { "name": "insert", "value": "click_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-action", "source
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 33 30 30 30 0d 0a 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 70 72 6f 64 75 Data Ascii: 3000destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.add.products[0]" }, { "name": "insert", "value": "add_produ
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 72 6f 6d 6f 5f 63 6c 69 63 6b 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 Data Ascii: { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert", "value": "promo_click_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-checkout-action", "sour
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a Data Ascii: an-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-action", "source": "dataLayer", "operators": [ { "name": "query", "select":
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 Data Ascii: t": "$[?(event=view_item)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "FS.event" }, {
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 34 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 Data Ascii: { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga4-e-commerce-select_promotion", "source": "dataLayer", "operator
2024-04-16 17:43:21 UTC	1255	IN	Data Raw: 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 74 67 34 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 76 69 65 77 5f 69 74 65 6d 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 Data Ascii: [0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_item" } ], "destination": "FS.event" }, { "id": "fs-gtg4-e-commerce-view_item", "source": "dataLayer", "operators"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49894	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	1064	OUT	GET /core/assets/js/runtime~main.58de437c.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6141 Connection: close Server: istio-envoy Date: Thu, 04 Apr 2024 19:52:58 GMT Last-Modified: Thu, 04 Apr 2024 18:49:25 GMT ETag: "44c56ae0f8bd42ad553b7316b388ea1e" x-amz-server-side-encryption: AES256 x-amz-version-id: E0oHslzwcAyBCcPsjBe7YnkYdzCoH2Y4 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4d8384431ad0b8e60c79585b2d139316.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 82Mj_l4AfmvZdpQ8NZ_QRp--n2TsIfvD3PvYxnSOmjxyhbYALjYz1g== Age: 1029023
2024-04-16 17:43:21 UTC	6141	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 72 2c 64 2c 74 3d 63 5b 30 5d 2c 6e 3d 63 5b 31 5d 2c 5f 3d 63 5b 32 5d 2c 75 3d 30 2c 69 3d 5b 5d 3b 75 3c 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 64 3d 74 5b 75 5d 2c 61 5b 64 5d 26 26 69 2e 70 75 73 68 28 61 5b 64 5d 5b 30 5d 29 2c 61 5b 64 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 3b 66 6f 72 28 6f 26 26 6f 28 63 29 3b 69 2e 6c 65 6e 67 74 68 3b 29 69 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 66 2e 70 75 73 68 2e 61 70 Data Ascii: !function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49895	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	1059	OUT	GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 35552 Connection: close Server: istio-envoy Date: Sun, 31 Dec 2023 22:49:39 GMT Last-Modified: Fri, 29 Dec 2023 19:54:14 GMT ETag: "c6f58dd3d60f07462254b842dd4f9ca1" x-amz-server-side-encryption: AES256 x-amz-version-id: DAh_pdO.4a6ljlK0ypmpSjqL87dAh5BK Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 14 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c022ca80d7b946eb138dfd2e55c98980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 8N4Bo_hwsgWNNyQKCBibyC0uCMH528wBz_7eFDtf8P4DIrU4QnpXiw== Age: 9226422
2024-04-16 17:43:21 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 22 2b 4d 4c 78 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 48 41 75 4d 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 72 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 6e 29 7d 3b 63 61 73 65 20 32 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2
2024-04-16 17:43:21 UTC	16384	IN	Data Raw: 20 65 20 69 6e 20 70 28 74 29 7d 2c 6f 77 6e 4b 65 79 73 3a 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 74 29 7b 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 6f 77 6e 4b 65 79 73 28 70 28 74 29 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 73 65 74 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 49 28 70 28 74 29 2c 65 29 3b 69 66 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 65 74 29 72 65 74 75 72 6e 20 72 2e 73 65 74 2e 63 61 6c 6c 28 74 2e 6b 2c 6e 29 2c 21 30 3b 69 66 28 21 74 2e 50 29 7b 76 61 72 20 6f 3d 7a 28 70 28 74 29 2c 65 29 2c 69 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 5b 51 5d 3b 69 66 28 69 26 26 69 2e 74 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 74 2e 6f 5b 65 5d 3d 6e 2c 74 2e 44 5b 65 5d 3d 21 31 2c 21 30 3b 69 66 28 Data Ascii: e in p(t)},ownKeys:function ownKeys(t){return Reflect.ownKeys(p(t))},set:function set(t,e,n){var r=I(p(t),e);if(null==r?void 0:r.set)return r.set.call(t.k,n),!0;if(!t.P){var o=z(p(t),e),i=null==o?void 0:o[Q];if(i&&i.t===n)return t.o[e]=n,t.D[e]=!1,!0;if(
2024-04-16 17:43:21 UTC	3777	IN	Data Raw: 30 5d 29 3a 76 6f 69 64 20 30 2c 65 3d 4d 28 74 29 3b 72 65 74 75 72 6e 20 75 26 26 65 74 26 26 6e 74 28 55 2c 65 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 20 73 65 74 74 65 72 28 74 29 7b 74 68 69 73 3d 3d 3d 55 26 26 73 65 74 74 65 72 2e 63 61 6c 6c 28 71 2c 74 29 2c 61 28 74 68 69 73 2c 46 29 26 26 61 28 74 68 69 73 5b 46 5d 2c 65 29 26 26 28 74 68 69 73 5b 46 5d 5b 65 5d 3d 21 31 29 2c 6e 74 28 74 68 69 73 2c 65 2c 64 28 31 2c 74 29 29 7d 7d 29 2c 72 74 28 65 2c 74 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 20 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 42 28 74 68 69 73 29 2e 74 61 67 7d 29 2c 6a 2e 66 3d 63 74 2c 53 2e 66 3d 69 74 2c 50 Data Ascii: 0]):void 0,e=M(t);return u&&et&&nt(U,e,{configurable:!0,set:function setter(t){this===U&&setter.call(q,t),a(this,F)&&a(this[F],e)&&(this[F][e]=!1),nt(this,e,d(1,t))}}),rt(e,t)}).prototype,"toString",function toString(){return B(this).tag}),j.f=ct,S.f=it,P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49897	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	872	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:43:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49898	104.18.36.155	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	502	OUT	GET /rum?cm_dsp_id=18&expiry=1729100597&external_user_id=1c141590-1a76-4e81-89ca-9edb3b2a2ebf&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; CMPS=5598; CMPRO=5598
2024-04-16 17:43:21 UTC	992	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8755fa2789ddadd1-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zh64ttHM5ScAABxBAWrgPwAA; Path=/; Domain=casalemedia.com; Expires=Wed, 16 Apr 2025 17:43:21 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5598; Path=/; Domain=casalemedia.com; Expires=Mon, 15 Jul 2024 17:43:21 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjjwBwIYMqYGJMZS0K6I8XyV9%2BSlppPgfBwNH7OPGVhtwVxYgd2Njwahy8a3z5%2BtH1iJXvp28TPQjjKjEVPg%2FZPyzNq016sFczSjmi%2BlEbCi9GdBR%2F0wbzyXhbYOBjLziUjTujR7uD%2FA%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-16 17:43:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49900	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	1071	OUT	GET /core/assets/js/main~493df0b3.9e1d5232.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7215 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:29 GMT Last-Modified: Fri, 08 Mar 2024 21:52:28 GMT ETag: "73b9f4a9eb62a2176090bf9c21a639a7" x-amz-server-side-encryption: AES256 x-amz-version-id: rlUjojg2gTbtwdGP_pdjObQJE7FQKLQJ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 67 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dbd1543e724393accac6fa465477c430.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: X3T93_6PhY455Z0hlldVHk5P6_8oymLDF7s4XbzReJtv1N-0_uDYTg== Age: 3352372
2024-04-16 17:43:21 UTC	7215	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 22 2f 37 51 41 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 45 2e 72 28 69 29 2c 22 70 72 6f 64 75 63 74 69 6f 6e 22 21 3d 3d 45 28 22 4c 65 4a 30 22 29 2e 61 2e 45 4e 56 26 26 45 28 22 43 70 34 31 22 29 3b 76 61 72 20 41 3d 45 28 22 39 45 57 48 22 29 2c 5f 3d 45 28 22 41 44 47 43 22 29 3b 4f 62 6a 65 63 74 28 5f 2e 62 29 28 29 26 26 4f 62 6a 65 63 74 28 41 2e 62 29 28 29 3b 21 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 79 66 69 6c 6c 4b 69 63 6b 6f 66 66 28 74 29 7b 74 72 79 7b 5b 31 5d 2e 69 6e 63 6c 75 64 65 73 28 31 29 26 26 74 28 29 7d 63 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49906	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	1966	OUT	GET /s/sfsites/c/resource/123456789/RSC_ChatBotCookieCheckScript HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
2024-04-16 17:43:21 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:21 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:21 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Thu, 30 Jun 2022 02:32:49 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 279fbda9fa483593ffb18e1e6a9c1c67
2024-04-16 17:43:21 UTC	1285	IN	Data Raw: 34 66 39 0d 0a 6c 65 74 20 69 6e 74 65 72 76 61 6c 44 75 72 61 74 69 6f 6e 20 3d 20 35 30 30 3b 20 2f 2f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 0d 0a 0d 0a 09 6c 65 74 20 67 65 74 41 63 74 69 76 65 47 72 6f 75 70 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 09 77 69 6e 64 6f 77 2e 4f 70 74 61 6e 6f 6e 41 63 74 69 76 65 47 72 6f 75 70 73 20 3f 20 5b 2e 2e 2e 77 69 6e 64 6f 77 2e 4f 70 74 61 6e 6f 6e 41 63 74 69 76 65 47 72 6f 75 70 73 2e 73 70 6c 69 74 28 27 2c 27 29 5d 2e 66 69 6c 74 65 72 28 61 63 74 69 76 65 47 72 6f 75 70 3d 3e 20 61 63 74 69 76 65 47 72 6f 75 70 2e 69 6e 64 65 78 4f 66 28 27 43 27 29 3e 20 2d 31 29 3a 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 6c 65 74 20 63 68 65 63 6b 4f 70 74 61 Data Ascii: 4f9let intervalDuration = 500; //millisecondslet getActiveGroups = function() {returnwindow.OptanonActiveGroups ? [...window.OptanonActiveGroups.split(',')].filter(activeGroup=> activeGroup.indexOf('C')> -1): new Array();}let checkOpta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49904	18.160.10.75	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	382	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:43:21 GMT Apigw-Requestid: WVHNEj5uoAMEVgA= X-Cache: Miss from cloudfront Via: 1.1 c3d335addde48969fafe25d4064cee80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 1Vo4fW2KwejTm7t-gv7Ds7NDmw10zsYFg5Fon60QS8gg7YCUO6ZeQg==
2024-04-16 17:43:21 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49903	172.217.215.104	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	581	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=1437446112&_u=YGBACEAABAAAACgAI~&z=2121927031 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49901	3.161.193.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	518	OUT	GET /log?vendor=liveramp&user_id=Xc1297BSuJ860XgyvrpSnIXRiU-nde780obxFICBZrFLSgEVU HTTP/1.1 Host: segments.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
2024-04-16 17:43:21 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Tue, 16 Apr 2024 17:43:21 GMT X-Cache: Miss from cloudfront Via: 1.1 052215bfd8d35ecb703b208e875bd350.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P8 X-Amz-Cf-Id: fvVs1Ba2XzSNWl_1ARznQsfJNgzTJk8JMcaXPdmbVTN6716lRMKxfg==
2024-04-16 17:43:21 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49899	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	987	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:21 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:43:21 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:43:21 UTC	1510	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-16 17:43:21 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49908	35.201.112.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	540	OUT	GET /datalayer/v4/latest.js HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	837	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPpogja7ikm28mIY2fRB5rMa69kaxfcRs47FNRKJ5qYkg1X9-Xi7gLrv4Q9uf1inJIz026m77Xewgw x-goog-generation: 1712689870542441 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 11986 Content-Encoding: gzip x-goog-hash: crc32c=StVZlg== x-goog-hash: md5=27m+BE/bh7t5LrewuEioVw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 11986 Access-Control-Allow-Origin: * Server: UploadServer Date: Tue, 16 Apr 2024 17:11:59 GMT Expires: Tue, 16 Apr 2024 18:11:59 GMT Cache-Control: public, max-age=3600,no-transform Age: 1883 Last-Modified: Tue, 09 Apr 2024 19:11:10 GMT ETag: "dbb9be044fdb87bb792eb7b0b848a857" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:22 UTC	418	IN	Data Raw: 1f 8b 08 08 ce 92 15 66 02 ff 74 6d 70 68 66 7a 37 63 37 33 62 00 d5 7d 69 73 db 46 d2 f0 77 ff 0a 08 e5 92 81 68 cc 50 d9 a3 de 07 34 cc 52 64 39 d1 ae 2d 79 25 39 79 76 15 ae 0b 22 87 12 62 08 e0 02 a0 6c 45 e4 7f 7f bb 7b 6e 1c 94 7c 24 f5 ec d6 c6 22 e6 e8 99 e9 e9 e9 6b 7a 66 b6 e6 cb 7c 5a a7 45 1e 84 77 fe b2 e2 5e 55 97 e9 b4 f6 47 37 49 e9 71 56 b3 72 b4 a5 8b f0 f0 8e 9f f3 c1 c1 c9 c9 f1 49 3c 9c c4 3e fd f2 19 26 fe bc 77 72 14 ef 42 1a fe 10 49 87 47 2f 8f e3 ef 20 09 7f 88 a4 17 07 df bf fd 21 fe 13 a4 d1 2f 7f 1d f0 d5 2a e0 f1 dd 3a 0c 99 d3 ce e0 e0 86 e7 f5 c1 f5 a2 be 85 76 f0 8f 47 29 00 47 64 bd cd f9 c7 05 9f d6 7c 16 fb e6 b7 29 f4 ba c8 d3 ba 28 f7 93 2c 3b 28 cb a2 8c 7d 99 e2 61 92 47 69 76 b9 92 27 35 6f 96 c4 44 e8 51 ab f4 8b Data Ascii: ftmphfz7c73b}isFwhP4Rd9-y%9yv"blE{n\|$"kzf\|ZEw^UG7IqVrI<>&wrBIG/ !/*:vG)Gd\|)(,;(}aGiv'5oDQ
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 4b 40 0a a4 78 19 26 79 79 51 7b f3 62 99 d3 70 34 b2 7e 4a b2 25 0c 99 fe 78 8f 87 5e 92 01 61 cc 6e 3d 58 30 54 f0 f4 2a bd 7e 99 a4 59 ec e3 2f 02 02 34 56 7c 00 7a bc e0 d3 04 d7 55 71 f1 2b 10 a8 97 56 50 9f aa f0 0c be 8b 52 62 e9 30 9f f1 8f 50 5d a6 7a 29 7e 63 53 50 81 c0 79 f9 f2 fa 82 63 86 f7 78 d7 05 30 2d ca 12 7e 9e 15 ef 79 be 0f 7d af 2d 38 57 49 05 55 64 09 05 23 78 3c 0c bd 62 ee d5 58 a3 6a 83 7c 9d 64 f3 a2 bc c6 95 a5 01 89 ae 5c ab 1c a7 b8 c0 23 b5 6f 0f 01 8a 8b 1c aa dc 6c e4 a8 c0 35 52 75 57 58 88 e5 93 f2 ca ae 72 7a 9b d7 c9 c7 b7 79 b5 5c 2c 8a b2 76 fa 57 51 9e ec e6 d2 14 c1 fa 67 49 79 c9 eb d3 25 4d c1 31 fd 1b fb 22 d1 ab 44 aa 77 bd ac 6a 98 2c 2f c9 e5 54 99 8a 6a 2d 6b 7a 91 55 65 27 6f ad 8e 5b 95 92 fa aa 55 01 d2 Data Ascii: K@x&yyQ{bp4~J%x^an=X0T*~Y/4V\|zUq+VPRb0P]z)~cSPycx0-~y}-8WIUd#x<bXj\|d\#ol5RuWXrzy\,vWQgIy%M1"Dwj,/Tj-kzUe'o[U
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: ff 82 98 f3 e6 9c a3 c2 77 c5 4b 7e 71 eb 5d 96 09 ac c3 19 34 7c f6 e3 81 77 7a fc f2 0c 96 ca 81 77 78 ea bd 39 39 fe e9 f0 c5 c1 0b cf df 3b 85 6f df db 3b 7a e1 61 a1 bd b7 67 3f 1e 9f 78 2f 0e 4f f7 5f ed 1d be 3e f5 f6 5e bd f2 a0 d6 c9 de d1 d9 e1 c1 a9 f7 f3 e1 d9 8f 8f 4e 0e 7e d8 3b 81 f2 c7 50 05 80 19 c0 47 fb af de be 38 3c fa 81 6a 1d be 7e f3 ea 10 9a b0 6a 1f bf f4 5e 1f 9c ec ff 08 9f 7b df 1f be 3a 3c fb e7 23 6c f8 e5 e1 d9 d1 c1 e9 e9 00 00 78 47 c7 de c1 4f 07 47 67 de e9 8f 08 c4 ea d3 f7 07 de ab c3 bd ef 5f 1d 78 2f e1 6b ef e8 9f de e9 9b 83 fd c3 bd 57 0c ba 7b 72 b0 7f c6 1e 1d 1e c9 5f 1e 94 d8 3f 3e 3a 3d f8 c7 5b 80 05 65 bc 17 7b af f7 7e c0 2e 88 aa ea f3 e7 1f f7 ce 4e 8f a1 c5 13 ef e4 e0 f4 ed ab 33 ec fd cb 93 e3 d7 8f Data Ascii: wK~q]4\|wzwx99;o;zag?x/O_>^N~;PG8<j~j^{:<#lxGOGg_x/kW{r_?>:=[e{~.N3
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 40 9d f0 d8 28 14 99 5c 44 8e c8 93 48 88 fa 08 24 10 ee 59 d5 75 03 02 3a 3d 6a f8 6a c9 d5 2a 84 da 9e d8 6a 11 30 1a 6a 0d fa 4f a1 24 08 2c d7 b9 86 1e bb 2c a9 ea 43 a9 76 f8 ef fc 90 30 f2 6c e8 16 44 77 5e b5 bc 10 63 06 0a 53 ec 70 86 7a 62 50 36 64 f8 75 b2 38 2b 5a 44 cc 4a 66 9c b8 a8 4d 98 d5 8d b2 26 1e 86 4c a7 e4 64 84 0f 05 07 49 81 2b 8d f4 10 34 f5 a7 94 09 b2 6e 67 b3 0c 05 d9 b6 04 86 6d 51 07 f2 77 09 44 b4 b8 15 93 22 3e e6 3b bb 11 50 08 1b 12 16 92 e7 ce aa 77 65 cc 91 d8 21 02 82 90 1b 56 66 27 c6 e3 1f a7 9c cf 2a d0 c5 b8 97 a5 b8 75 19 48 15 45 c1 da 01 3c e3 76 13 fa 23 b9 a7 52 d1 b6 f6 77 12 8d dd 4f d5 0d 24 7a 81 93 9e e7 13 b6 8c 15 6e fd 45 72 c9 8f a4 42 03 d6 83 0f 66 fa 22 4b 6e ed 24 7e 9d a4 19 7d 84 ab 55 07 3d 01 Data Ascii: @(\DH$Yu:=jjj0jO$,,Cv0lDw^cSpzbP6du8+ZDJfM&LdI+4ngmQwD">;Pwe!Vf'uHE<v#RwO$znErBf"Kn$~}U=
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 9f c4 4d e4 6f c9 2f e5 17 0d 6b ab 6f 58 b2 1f ca e5 49 c1 6f 4f c0 b2 44 5f 28 85 62 12 b1 37 d7 a5 ed 70 07 5b 1d 16 af e4 0c 39 ac 54 8c ab c2 3f cb 78 6b 38 52 7d e4 56 1f 31 66 63 19 bb 6b 31 09 c7 49 bf 73 66 cb d1 8e c8 1d 1b b9 69 09 ca 54 35 83 18 55 f3 45 0d 20 5f c1 98 9e 20 ec 6a ca ca 0d d9 12 06 83 a3 8e 41 19 b1 a3 56 82 50 86 c5 d5 6e 5c 31 bb 2b e4 67 e4 4b d2 f1 99 0a 7b 8c 6c c5 94 89 10 a4 c8 c7 30 58 0c 4c 2c 34 ad 91 f5 cf 77 7c da 2c 17 91 8d fe 4e 25 b5 b0 86 b1 a3 17 58 a7 89 a2 56 04 98 32 44 e1 f7 15 7a 88 e9 e4 a8 57 f7 01 34 44 de 59 52 d0 32 93 26 2f 94 a7 f4 fe 92 d4 47 d2 e1 1e 06 ce d5 f7 ee e9 ac d8 02 60 d7 5f c9 34 63 b8 6b a0 9d d4 85 c9 cd d1 49 9d 3b 96 5b c3 ed 5c 74 6d 56 ce b3 a4 ae 79 fe 23 cf 00 a3 ad 20 27 b9 Data Ascii: Mo/koXIoOD_(b7p[9T?xk8R}V1fck1IsfiT5UE _ jAVPn\1+gK{l0XL,4w\|,N%XV2DzW4DYR2&/G`_4ckI;[\tmVy# '
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 67 30 bb 14 f8 92 c6 97 62 4f b2 ab ba 21 64 1b d6 3e 57 6d 3b bc 9c ee 88 40 1b ec 78 90 3f d7 ac 0c bd b8 cf c4 81 2e bd 0b 9d 87 0c d2 42 60 a4 e5 ad 3e 78 78 9e 4f d6 d3 04 69 48 a3 71 dd 8d f4 74 fa fe f3 71 85 b5 3f 03 55 41 f8 25 b8 02 56 58 c4 5b bb 23 25 d2 ec 9e 09 91 d8 1d d2 6b 22 e3 84 64 c7 dd d8 5c fd 36 a9 08 7c 48 01 e0 5b bb b8 ed a2 83 53 3b f1 47 ae 8a cf c6 1f d6 fe 74 fc 6d 01 02 3f 0b 7f e6 e4 ab c4 21 4b e2 8d 3e 55 56 c5 c3 51 f5 2c 51 ee 8f 4a bb 3f 96 71 72 5e 4d 46 9d 13 40 b5 8d f2 b0 0c 69 f3 61 89 38 5e 2a f4 92 52 70 3f 7a a5 fb e7 f3 09 94 ea 7f 3a 8a ff fd d9 34 fa e9 38 5e 02 8e 97 06 c7 4b c4 b1 82 b2 00 34 03 ce a6 50 64 fa 6c 03 b2 65 dd 29 d6 c5 d0 8a 60 c1 fa 4b 9f 4f 27 61 78 97 63 a0 60 0d ff d0 8c 48 bf d3 03 a7 Data Ascii: g0bO!d>Wm;@x?.B`>xxOiHqtq?UA%VX[#%k"d\6\|H[S;Gtm?!K>UVQ,QJ?qr^MF@ia8^*Rp?z:48^K4Pdle)`KO'axc`H
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 4b 6a 2f e3 49 55 03 67 a3 db be cc ed 39 cc 99 fd e6 f9 d1 8d e0 2f 90 30 d4 f9 85 a7 74 56 94 58 2b b6 21 46 d4 79 5a d4 a6 c9 4d 01 c2 4c 06 17 8b 15 6c c7 18 3f 60 b1 8b 8e df 13 d8 7c f3 d9 5d d0 94 f3 90 40 d2 b3 3f 42 78 df ad ef 13 de 1b d8 c9 09 a7 c0 b3 6e f5 ff be db 65 4c 13 a1 32 14 1c e3 40 cb b2 12 5d 84 6d a1 c2 52 90 f0 39 2a 6f 19 af b9 87 bf 19 05 2a a7 eb 07 c5 28 77 29 04 2e fb e9 d7 02 d4 01 00 7d 4f 32 5d 7d db 96 ff b5 38 11 d8 e0 6a f6 06 ac 8d 48 74 ca 7e 46 04 f4 57 3b 2e 6e d0 3b 42 e2 d8 30 81 a0 48 8b a9 6a 2e 7c e7 24 93 c3 3d 34 aa d4 59 9b 92 c6 0c ac c4 d2 31 36 36 29 43 55 73 27 54 d5 9c b2 51 b6 c3 79 0e 44 30 d9 d8 b1 a9 9a 47 d1 07 14 09 02 8c 10 11 95 ff 75 75 05 ad d8 37 d5 f3 bd df f7 70 f9 03 a5 ff af 0e d5 28 41 Data Ascii: Kj/IUg9/0tVX+!FyZMLl?`\|]@?BxneL2@]mR9o(w).}O2]}8jHt~FW;.n;B0Hj.\|$=4Y166)CUs'TQyD0Guu7p(A
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 00 d9 13 37 84 b6 f4 f3 39 56 da 00 d8 63 40 71 90 7a 78 fa 7a 06 c9 6b 6a 7e 8f 0d c4 3f d2 ce 62 a9 d8 87 f4 f8 ed 19 2a ba 5b 77 ee 42 e3 9c 13 dd 35 2e a0 36 f1 c2 d8 2b ce 95 d6 a5 1a d2 f3 25 8f f5 f3 f2 92 63 f0 da 8b 66 c3 48 37 cd 70 63 6f 33 fe b1 4f f7 4d 00 bb 83 f6 23 0b 29 eb 66 0c f3 94 1e 3d 6b 31 5a 18 58 7b 20 74 a8 43 52 de 67 51 dc 86 f1 a3 ab 9d bc 9e 5f 42 81 34 98 0e 12 b4 5e 5f e9 6a bc f3 e1 99 6e fa 10 f3 db b8 db b4 77 54 5d 80 a7 81 b8 c3 ab 13 3e 1e 8f 91 c4 5c f2 f8 4e 51 8f 73 2a dc 7d 8c cb 3f d3 a3 3f 25 d1 42 e7 cf d5 64 3d ac 22 15 a5 9a 6b 96 77 36 0b 84 d3 05 14 e9 89 15 fc 01 3a 92 78 5a e1 26 9d 39 66 3b 9e 59 d7 4f fa d0 25 78 38 3f 07 6a 95 76 1d 64 40 75 88 07 fa fd 23 3a d4 50 02 39 da d7 e1 28 25 7f cc a3 5c f8 Data Ascii: 79Vc@qzxzkj~?b[wB5.6+%cfH7pco3OM#)f=k1ZX{ tCRgQ_B4^_jnwT]>\NQs}??%Bd="kw6:xZ&9f;YO%x8?jvd@u#:P9(%\
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 1a b5 6d 41 69 ca 91 4f a5 f7 f9 ad c9 a7 ad 3c 98 f2 c0 09 58 4b ed a5 d0 61 8c 74 bc d0 2e 8e 13 d4 bd 85 1b af b2 8b e2 79 7f 71 f3 1e bb 8a 68 14 fd 09 9c 0e 8f 7f 0d f4 60 c2 c8 1e 76 63 4b 53 bf 70 9e 34 38 61 23 26 5f cc 22 3e 99 97 34 af ca e9 d2 9c cb e6 7b ef 52 73 ce cd 5e 53 cd 54 67 a3 62 6d 0e 2a 49 2e 25 42 06 f5 5e b0 45 89 cc 97 23 41 54 f8 ec 0e 5a 8f da 7e 04 73 38 c7 b9 be c4 1c d9 b1 df d5 19 f8 44 ed fa da 76 dc 84 02 7b 75 9e 5e 2e e5 f7 70 ad ef eb dc d4 33 f1 fc 45 5f 9f ec 39 91 27 56 bb 27 e5 fe be d8 2b 93 2c a9 b8 07 05 4d 82 50 df 92 28 84 0a c0 d0 28 b6 9d ef fa 76 82 37 41 dd 47 91 1b cf 65 d5 d6 a9 30 5c 7a 60 d4 c2 3f 4b fc 67 01 86 ae 3a f7 23 8f 82 2f 1c e5 f9 4e e8 c6 0b 50 99 d9 3c ce e8 24 2f bb 82 1f 78 e3 d2 0c fe Data Ascii: mAiO<XKat.yqh`vcKSp48a#&_">4{Rs^STgbm*I.%B^E#ATZ~s8Dv{u^.p3E_9'V'+,MP((v7AGe0\z`?Kg:#/NP<$/x
2024-04-16 17:43:22 UTC	1255	IN	Data Raw: 0d cf e8 dc 05 0d 02 c9 95 9e 6e 6d 06 33 97 63 97 15 80 9d dd e4 0d 0a b4 39 d1 2a 1e 6f 0a 9a 05 33 6c 33 ce 61 e9 6f 6f ab 63 00 78 af be bc 55 c9 de 41 7c c5 08 b9 62 f7 50 95 5d 87 a3 a2 9b 02 b4 65 27 02 07 79 89 a8 14 4f fc b0 44 ec 84 ac 7b 64 ca 8f 02 7d 5d 2b dd 75 d4 3a 01 0b 62 f7 33 ed 8e 58 90 5b a2 b8 d6 52 b3 d6 3a 0e ce 29 8f 2a b0 f6 c2 5d 71 d0 b1 96 66 68 af 3a e5 67 a1 e3 cd 9a cb 16 26 03 7d 49 64 c5 10 57 4e f4 21 e8 82 38 93 cd be f0 16 0e 68 32 5c b6 02 43 84 75 2a 1e 67 4a 25 7f 4a b6 b7 37 17 2c c4 f0 2b 7d d6 7a 13 1b d0 91 08 dd 62 b3 bf a5 0a 90 9a d2 02 6e e1 cd ac 10 f7 7d 29 fb 52 32 b5 4f 2c 56 18 3d f3 78 c1 a1 0b dc 5a b2 f4 dc 63 7b 25 b3 85 39 48 b0 1c 3b cb 3a 5a d2 a5 5f 16 33 50 fb bf 65 f7 f8 b8 9c 7e 42 8e 15 ca Data Ascii: nm3c9o3l3aoocxUA\|bP]e'yOD{d}]+u:b3X[R:)]qfh:g&}IdWN!8h2\Cu*gJ%J7,+}zbn})R2O,V=xZc{%9H;:Z_3Pe~B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49909	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:21 UTC	630	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=1&ClientTime=1713289400187&PageStart=1713289396931&PrevBundleTime=0&LastActivity=2771&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:22 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:22 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49911	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	622	OUT	GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23897 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:30 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "cd29b9bc973e48a7fcd0ee7153bdf03b" x-amz-server-side-encryption: AES256 x-amz-version-id: O2lV9BfAoMGuWCy5h2KZx1r2hHWHdRQH Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c022ca80d7b946eb138dfd2e55c98980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: aIvF4pKVq3n6xC19Zxsr5vgktbffb5Kl5fl1Do2paE2yxO8aJEicGg== Age: 3352372
2024-04-16 17:43:22 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 5d 2c 7b 6a 72 76 45 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6e 66 62 41 22 29 2c 61 3d 6e 28 22 63 67 66 43 22 29 2c 69 3d 6e 28 22 61 34 67 62 22 29 2c 6f 3d 6e 28 22 2b 6e 78 76 22 29 2c 63 3d 6e 28 22 75 73 69 5a 22 29 2c 73 3d 6e 28 22 6e 62 34 72 22 29 2c 75 3d 6e 28 22 32 6e 50 2b 22 29 2c 6c 3d 6e 28 22 41 48 51 66 22 29 2c 64 3d 6e 28 22 6a 69 59 50 22 29 2c 70 3d 6e 28 22 7a 67 64 4f 22 29 2c 66 3d 6e 28 22 62 54 7a 4e 22 29 2c 76 3d 6e 28 22 6a 6e 69 43 22 29 2c 5f 3d 6e 28 22 75 49 4a 53 22 29 2c 68 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n
2024-04-16 17:43:22 UTC	8506	IN	Data Raw: 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 77 2e 65 29 28 65 29 3f 65 2e 6d 65 73 73 61 67 65 3a 65 2c 69 3d 22 45 72 72 6f 72 22 2c 6f 3d 61 2e 6d 61 74 63 68 28 2f 5e 28 3f 3a 5b 55 75 5d 6e 63 61 75 67 68 74 20 28 3f 3a 65 78 63 65 70 74 69 6f 6e 3a 20 29 3f 29 3f 28 3f 3a 28 28 3f 3a 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 7c 29 45 72 72 6f 72 29 3a 20 29 3f 28 2e 2a 29 24 2f 69 29 3b 6f 26 26 28 69 3d 6f 5b 31 5d 2c 61 3d 6f 5b 32 5d 29 3b 72 65 74 75 72 6e 20 5f 65 6e 68 61 6e 63 65 45 76 65 6e 74 57 69 74 68 49 6e 69 74 69 61 6c 46 72 61 6d 65 28 7b 65 78 63 65 70 74 69 6f 6e 3a 7b 76 61 6c 75 65 73 3a 5b 7b 74 79 70 65 3a 69 2c 76 61 6c 75 65 3a 61 7d 5d 7d Data Ascii: var a=Object(w.e)(e)?e.message:e,i="Error",o=a.match(/^(?:[Uu]ncaught (?:exception: )?)?(?:((?:Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI\|)Error): )?(.*)$/i);o&&(i=o[1],a=o[2]);return _enhanceEventWithInitialFrame({exception:{values:[{type:i,value:a}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49910	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	622	OUT	GET /core/assets/js/35.d0f1ccda.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 36995 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:30 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "46fa5a7bc37a22544a908e4ad950309c" x-amz-server-side-encryption: AES256 x-amz-version-id: iDlm0704p57xpyc1Ms6iL04qxwuGFiw5 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3f8050fbf1460156d177f2d3d6a03332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: G-zd7gBZQg6XeW4RhRhc9hWRPKBftNDUl7nnXIlCprG2hPRH1e8sxA== Age: 3352372
2024-04-16 17:43:22 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 5d 2c 7b 22 2b 6e 78 76 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 7d 29 3b 76 61 72 20 72 3d 6e 28 22 7a 67 64 4f 22 29 2c 69 3d 6e 28 22 75 73 69 5a 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 28 65 2c 74 29 7b 21 30 3d 3d 3d 74 2e 64 65 62 75 67 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DE
2024-04-16 17:43:22 UTC	16384	IN	Data Raw: 72 73 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 45 76 65 6e 74 46 69 6c 74 65 72 55 72 6c 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3b 74 72 79 7b 74 3d 65 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 5b 30 5d 2e 73 74 61 63 6b 74 72 61 63 65 2e 66 72 61 6d 65 73 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 74 3f 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 4c 61 73 74 56 61 6c 69 64 55 72 6c 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 74 2d 2d 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 26 26 22 3c 61 6e 6f 6e 79 Data Ascii: rs}();function _getEventFilterUrl(e){try{var t;try{t=e.exception.values[0].stacktrace.frames}catch(n){}return t?function _getLastValidUrl(){for(var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=e.length-1;t>=0;t--){var n=e[t];if(n&&"<anony
2024-04-16 17:43:22 UTC	5220	IN	Data Raw: 61 63 6b 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6c 61 73 74 45 76 65 6e 74 49 64 3d 74 26 26 74 2e 65 76 65 6e 74 5f 69 64 3f 74 2e 65 76 65 6e 74 5f 69 64 3a 4f 62 6a 65 63 74 28 61 2e 66 29 28 29 2c 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 53 65 6e 74 72 79 20 73 79 6e 74 68 65 74 69 63 45 78 63 65 70 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 69 74 68 43 6c 69 65 6e 74 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 73 2e 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a Data Ascii: ack.length-1]}},{key:"captureException",value:function captureException(e,t){var n=this._lastEventId=t&&t.event_id?t.event_id:Object(a.f)(),i=new Error("Sentry syntheticException");return this._withClient(function(s,a){s.captureException(e,Object(r.a)(Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49912	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	636	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:43:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49913	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	669	OUT	GET /recaptcha/api.js?render=explicit&onload=onloadCallback HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 16 Apr 2024 17:43:22 GMT Date: Tue, 16 Apr 2024 17:43:22 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:22 UTC	727	IN	Data Raw: 35 30 31 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 501/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-16 17:43:22 UTC	561	IN	Data Raw: 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f Data Ascii: SI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.cro
2024-04-16 17:43:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49915	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	673	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713289397446&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289395096&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:43:22 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:43:22 UTC	1540	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49914	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	1960	OUT	GET /s/sfsites/c/resource/1702515884138/DSC_GenesysChatbot HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
2024-04-16 17:43:22 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:22 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Wed, 13 Dec 2023 23:01:57 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 025b56c66e8e4233f333523ccd1e469b
2024-04-16 17:43:22 UTC	5712	IN	Data Raw: 31 36 34 33 0d 0a 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 40 6c 77 63 2f 6c 77 63 2f 6e 6f 2d 64 6f 63 75 6d 65 6e 74 2d 71 75 65 72 79 20 2a 2f 0a 0a 63 6f 6e 73 74 20 4d 41 58 5f 52 45 54 52 59 20 3d 20 35 3b 0a 63 6f 6e 73 74 20 54 49 4d 45 5f 49 4e 54 45 52 4e 41 4c 5f 4d 53 20 3d 20 35 30 30 3b 0a 63 6f 6e 73 74 20 43 48 41 54 5f 42 4f 54 5f 43 4f 4e 54 41 49 4e 45 52 5f 43 4c 41 53 53 20 3d 20 27 67 65 6e 65 73 79 73 2d 61 70 70 27 3b 0a 77 69 6e 64 6f 77 2e 5f 75 73 65 72 49 6e 66 6f 72 6d 61 74 69 6f 6e 3d 7b 7d 3b 2f 2f 20 73 74 6f 72 65 20 74 68 65 20 6c 6f 67 67 65 64 20 69 6e 20 75 73 65 72 27 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 63 6f 6e 73 74 20 5f 55 53 45 52 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 5f 54 41 47 53 3d 7b 22 4e Data Ascii: 1643/* eslint-disable @lwc/lwc/no-document-query */const MAX_RETRY = 5;const TIME_INTERNAL_MS = 500;const CHAT_BOT_CONTAINER_CLASS = 'genesys-app';window._userInformation={};// store the logged in user's informationconst _USER_INFORMATION_TAGS={"N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49916	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	637	OUT	GET /core/assets/css/8.ab226b4a.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31339 Connection: close Server: istio-envoy Date: Fri, 26 Jan 2024 21:39:56 GMT Last-Modified: Fri, 26 Jan 2024 18:11:46 GMT ETag: "1e97f00f07b87f701d0bf06259f954e4" x-amz-server-side-encryption: AES256 x-amz-version-id: Iy50rWLvnka9klYMF5qa_8hsgho0e_uB Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 51164155275c508076425faa0467bff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 8ok1HHR_I2ZXW-G1DSOIV1KbL_hXieR0wz5oOYIge5b2WYmmQdJuyA== Age: 6984206
2024-04-16 17:43:22 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 76 61 74 61 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 7d 2e 64 72 Data Ascii: .drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.dr
2024-04-16 17:43:22 UTC	15919	IN	Data Raw: 66 2c 55 2b 32 31 31 33 2c 55 2b 32 63 36 30 2d 32 63 37 66 2c 55 2b 61 37 32 30 2d 61 37 66 66 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 53 6c 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6a 73 2e 64 72 69 66 74 74 2e 63 6f 6d 2f 64 65 70 6c 6f 79 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 42 6e 67 4d 55 58 5a 59 54 58 50 49 76 49 42 67 4a 4a 53 62 36 75 66 4e 35 71 57 72 34 78 43 43 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 3f 3f 2c 55 Data Ascii: f,U+2113,U+2c60-2c7f,U+a720-a7ff}@font-face{font-family:Roboto Slab;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/assets/static/fonts/BngMUXZYTXPIvIBgJJSb6ufN5qWr4xCC.woff2) format("woff2");unicode-range:U+00??,U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49917	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	638	OUT	GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:22 UTC	938	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 24 Connection: close Server: istio-envoy Date: Mon, 01 Jan 2024 02:07:05 GMT Last-Modified: Fri, 29 Dec 2023 19:54:11 GMT ETag: "0c5dad92482d9a7c7c253510f5082465" x-amz-server-side-encryption: AES256 x-amz-version-id: 4QrtRu53TbP2_JzFsOffdujZ14HP_jFw Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 X-Cache: Hit from cloudfront Via: 1.1 51164155275c508076425faa0467bff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: tbS78WZCSVgi2GVHrTV121clPcaSyehun9gzaVIq4_Ng5Nun86zSjA== Age: 9214577
2024-04-16 17:43:22 UTC	24	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: body{margin:0;padding:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49918	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:22 UTC	1947	OUT	GET /s/sfsites/c/resource/3/DSC_HeadOverrides HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
2024-04-16 17:43:22 UTC	705	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:22 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:22 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Wed, 20 Mar 2024 22:03:04 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 9bf3d827d9d81483e68d4c597d955870
2024-04-16 17:43:22 UTC	4368	IN	Data Raw: 31 31 30 33 0d 0a 2f 2a 20 65 73 6c 69 6e 74 2d 64 69 73 61 62 6c 65 20 40 6c 77 63 2f 6c 77 63 2f 6e 6f 2d 64 6f 63 75 6d 65 6e 74 2d 71 75 65 72 79 20 2a 2f 0a 2f 2f 20 53 45 4f 3a 20 41 64 64 20 6d 65 74 61 20 64 65 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 47 75 69 64 65 73 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 5a 4d 53 65 74 4d 65 74 61 64 61 74 61 22 2c 20 28 65 29 20 3d 3e 20 7b 0a 20 20 20 20 63 72 65 61 74 65 4d 65 74 61 54 61 67 28 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 20 65 2e 64 65 74 61 69 6c 2e 64 65 73 63 72 69 70 74 69 6f 6e 29 3b 0a 7d 29 3b 0a 0a 2f 2f 20 4c 69 73 74 65 6e 20 66 6f 72 20 65 76 65 6e 74 20 66 72 6f 6d 20 47 75 69 64 65 73 20 74 6f 20 72 65 70 6f 72 74 20 70 72 6f 64 75 63 74 Data Ascii: 1103/* eslint-disable @lwc/lwc/no-document-query */// SEO: Add meta description to Guidesdocument.addEventListener("ZMSetMetadata", (e) => { createMetaTag("description", e.detail.description);});// Listen for event from Guides to report product

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49921	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	622	OUT	GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 33094 Connection: close Server: istio-envoy Date: Mon, 01 Jan 2024 01:23:44 GMT Last-Modified: Fri, 29 Dec 2023 19:54:13 GMT ETag: "d8739a9fe9a3a42936f5cd86c8727494" x-amz-server-side-encryption: AES256 x-amz-version-id: PDBAHyRPdaEdnVM2HzR7IIgprTTT3gPA Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dbd1543e724393accac6fa465477c430.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: OpXo_q0x9u_hvYM9C_42_phZtr2PMqYycdxEm7IM_wf_0jc_LWdsyA== Age: 9217179
2024-04-16 17:43:23 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 5d 2c 7b 22 2b 4f 53 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 7d 29 3b 76 61 72 20 72 3d 65 28 22 38 64 56 64 22 29 2c 69 3d 65 28 22 78 71 46 54 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 5b 7b 74 79 70 65 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 2c 7b 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{ti
2024-04-16 17:43:23 UTC	16384	IN	Data Raw: 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 34 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 35 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 36 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 72 79 7b 74 28 74 68 69 73 2e 5f 72 65 73 6f 6c 76 65 2c 74 68 69 73 2e 5f 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 69 73 2e 5f 72 65 6a 65 63 74 28 6e 29 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 61 29 28 53 79 6e 63 50 72 6f 6d 69 73 65 2c 5b 7b 6b 65 79 3a 22 5f 5f 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 5f 69 Data Ascii: l(this),SyncPromise.prototype.__init4.call(this),SyncPromise.prototype.__init5.call(this),SyncPromise.prototype.__init6.call(this);try{t(this._resolve,this._reject)}catch(n){this._reject(n)}}return Object(o.a)(SyncPromise,[{key:"__init",value:function __i
2024-04-16 17:43:23 UTC	1319	IN	Data Raw: 72 28 29 7d 2c 7a 71 68 6a 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 7d 29 2c 65 2e 64 28 6e 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 70 64 61 74 65 52 61 74 65 4c 69 6d 69 74 73 7d 29 3b 76 61 72 20 72 3d 65 28 22 73 38 44 49 22 29 2c 69 3d 65 28 22 6e 66 62 41 22 29 2c 6f 3d 36 65 34 3b 66 75 6e 63 74 69 6f 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 28 74 2c 6e 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 44 61 Data Ascii: r()},zqhj:function(t,n,e){"use strict";e.d(n,"a",function(){return isRateLimited}),e.d(n,"b",function(){return updateRateLimits});var r=e("s8DI"),i=e("nfbA"),o=6e4;function isRateLimited(t,n){var e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:Da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49922	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	622	OUT	GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17065 Connection: close Server: istio-envoy Date: Mon, 01 Jan 2024 01:23:44 GMT Last-Modified: Fri, 29 Dec 2023 19:54:13 GMT ETag: "e28ebc3391b56e8f01ea063dc089e9d3" x-amz-server-side-encryption: AES256 x-amz-version-id: EfYd1537XV0P6L0J2FcreHvtj3HNBoe5 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 02d40d77941fe6c2f8e7ff5156c01128.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: _7tJ4x8wBbNUFrNd4HLr9RzAm06kL5EZgJ64f3DYhTw3jdETQ6E0ww== Age: 9217179
2024-04-16 17:43:23 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 5d 2c 7b 22 31 4a 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 7d 7d 2c 22 32 6a 62 67 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototyp
2024-04-16 17:43:23 UTC	1674	IN	Data Raw: 2c 6f 3d 21 31 2c 69 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 61 2c 75 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 75 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 72 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 6e 3d 21 30 29 3b 7d 63 61 74 63 68 28 63 29 7b 6f 3d 21 30 2c 69 3d 63 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 75 2e 72 65 74 75 72 6e 7c 7c 75 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 69 7d 7d 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 76 4d 4e 55 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 Data Ascii: ,o=!1,i=void 0;try{for(var a,u=t[Symbol.iterator]();!(n=(a=u.next()).done)&&(r.push(a.value),!e\|\|r.length!==e);n=!0);}catch(c){o=!0,i=c}finally{try{n\|\|null==u.return\|\|u.return()}finally{if(o)throw i}}return r}}},vMNU:function(t,e){t.exports=function _defi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49924	172.64.155.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	607	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:23 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fa336dc7b051-ATL
2024-04-16 17:43:23 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49923	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	1965	OUT	GET /s/sfsites/c/resource/1709165610000/DSC_ZoominZMSetMetadata HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
2024-04-16 17:43:23 UTC	715	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:23 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:23 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Thu, 29 Feb 2024 00:13:30 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 27c03914a9efd18c6301cc37571b8e63
2024-04-16 17:43:23 UTC	899	IN	Data Raw: 33 37 37 0d 0a 2f 2f 73 63 72 69 70 74 20 74 68 61 74 20 61 64 64 73 20 74 61 67 73 20 74 6f 20 7a 6f 6f 6d 69 6e 20 63 6f 6e 74 65 6e 74 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 5a 4d 53 65 74 4d 65 74 61 64 61 74 61 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 61 70 70 65 6e 64 4d 65 74 61 54 61 67 54 6f 48 65 61 64 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 65 74 61 54 61 67 4e 61 6d 65 2c 20 6d 65 74 61 54 61 67 43 6f 6e 74 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 74 61 54 61 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 6d 65 74 61 5b 6e 61 6d 65 3d 22 27 20 2b 20 6d 65 74 61 54 61 67 4e 61 6d Data Ascii: 377//script that adds tags to zoomin contentdocument.addEventListener("ZMSetMetadata", function (event) { const appendMetaTagToHeader = function (metaTagName, metaTagContent) { var metaTag = document.querySelector('meta[name="' + metaTagNam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49925	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	1032	OUT	GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 25600 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:31 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "48be1563378f7c36bdadc0f2eb616856" x-amz-server-side-encryption: AES256 x-amz-version-id: kSQfBnXe3RrQ76A7.epJ9X5L3Vb2TouI Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f9c59ce0e830fcb72cbcdb26622739f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: fzcNw3W8Dv-_Erd3GPPYHme_8l2Unb12iIIqItwY3pbEeQZgEVv9cg== Age: 3352372
2024-04-16 17:43:23 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 22 31 46 6f 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 22 2c 22 67 69 22 29 2c 66 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 2b 22 2c 22 67 69 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 43 6f 6d 70 6f 6e 65 6e 74 73 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 66 29 7b 7d 69 66 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(
2024-04-16 17:43:23 UTC	9200	IN	Data Raw: 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 38 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 49 6e 74 38 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 3f 2d 31 2a 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 49 6e 74 31 36 4c 45 28 74 2c 65 29 7b 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 Data Ascii: fer.prototype.readInt8=function readInt8(t,e){return e\|\|checkOffset(t,1,this.length),128&this[t]?-1*(255-this[t]+1):this[t]},Buffer.prototype.readInt16LE=function readInt16LE(t,e){e\|\|checkOffset(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4
2024-04-16 17:43:23 UTC	16	IN	Data Raw: 64 65 41 74 28 30 29 5d 3d 36 33 7d 7d 5d 29 3b Data Ascii: deAt(0)]=63}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49926	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	622	OUT	GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 75961 Connection: close Server: istio-envoy Date: Thu, 28 Dec 2023 13:37:40 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "6d77a76055d81227033363af2f18caf8" x-amz-server-side-encryption: AES256 x-amz-version-id: 4VyxTF9cOmpvyHPO7jaWSto1hTdtU.sl Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 28 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 db8c74a249442b107d8358be4371339e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: jZGpYnMSS53PAAeYB93xs52uvuJ_ibGoktlGFszqT5Z7HVRNUgaDMA== Age: 9518743
2024-04-16 17:43:23 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 5d 2c 7b 22 31 31 48 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 28 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnPrope
2024-04-16 17:43:23 UTC	16384	IN	Data Raw: 65 28 61 2c 65 2c 30 2c 30 2c 74 2e 69 67 6e 6f 72 65 57 68 69 74 65 73 70 61 63 65 29 2c 61 7d 7d 2c 48 30 44 57 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 61 73 73 65 74 73 2f 6d 65 64 69 61 2f 67 65 74 46 65 74 63 68 2e 30 31 33 66 30 62 39 30 2e 63 6a 73 22 7d 2c 49 39 69 52 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 6e 76 61 72 69 61 6e 74 28 65 2c 74 2c 6e 2c 6f 2c 72 2c 69 2c 61 2c 73 29 7b 69 66 28 21 65 29 7b 76 61 72 20 63 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 6e 69 66 69 65 64 20 65 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 3b Data Ascii: e(a,e,0,0,t.ignoreWhitespace),a}},H0DW:function(e,t,n){e.exports=n.p+"assets/media/getFetch.013f0b90.cjs"},I9iR:function(e,t,n){"use strict";e.exports=function invariant(e,t,n,o,r,i,a,s){if(!e){var c;if(void 0===t)c=new Error("Minified exception occurred;
2024-04-16 17:43:23 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 54 72 61 6e 73 6c 61 74 6f 72 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 54 72 61 6e 73 6c 61 74 6f 72 29 2c 74 3d 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 68 69 73 2c 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 54 72 61 6e 73 6c 61 74 6f 72 29 2e 63 61 6c 6c 28 74 68 69 73 29 29 2c 69 2e 63 61 6c 6c 28 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 28 65 2c 74 2c Data Ascii: function Translator(e){var t,n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return _classCallCheck(this,Translator),t=_possibleConstructorReturn(this,_getPrototypeOf(Translator).call(this)),i.call(_assertThisInitialized(t)),function copy(e,t,
2024-04-16 17:43:23 UTC	16384	IN	Data Raw: 6f 6e 20 68 61 6e 64 6c 65 46 6f 72 6d 61 74 28 65 29 7b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3c 30 29 7b 76 61 72 20 72 3d 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 28 74 2c 63 2c 65 29 3b 72 65 74 75 72 6e 20 73 2e 61 6c 77 61 79 73 46 6f 72 6d 61 74 3f 73 2e 66 6f 72 6d 61 74 28 72 2c 76 6f 69 64 20 30 2c 6e 29 3a 72 7d 76 61 72 20 69 3d 65 2e 73 70 6c 69 74 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2c 61 3d 69 2e 73 68 69 66 74 28 29 2e 74 72 69 6d 28 29 2c 75 3d 69 2e 6a 6f 69 6e 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 73 2e 66 6f 72 6d 61 74 28 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 28 Data Ascii: on handleFormat(e){if(e.indexOf(s.formatSeparator)<0){var r=getPathWithDefaults(t,c,e);return s.alwaysFormat?s.format(r,void 0,n):r}var i=e.split(s.formatSeparator),a=i.shift().trim(),u=i.join(s.formatSeparator).trim();return s.format(getPathWithDefaults(
2024-04-16 17:43:23 UTC	11418	IN	Data Raw: 64 65 66 61 75 6c 74 3d 6d 7d 2c 67 6e 7a 78 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 73 7d 29 3b 76 61 72 20 6f 3d 5b 5d 2c 72 3d 6f 2e 66 6f 72 45 61 63 68 2c 69 3d 6f 2e 73 6c 69 63 65 3b 66 75 6e 63 74 69 6f 6e 20 64 65 66 61 75 6c 74 73 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 69 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 76 6f 69 64 20 30 3d 3d 3d 65 5b 6e 5d 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 2c 65 7d 7d 2c 6c 66 75 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 Data Ascii: default=m},gnzx:function(e,t,n){"use strict";n.d(t,"a",function(){return defaults});var o=[],r=o.forEach,i=o.slice;function defaults(e){return r.call(i.call(arguments,1),function(t){if(t)for(var n in t)void 0===e[n]&&(e[n]=t[n])}),e}},lfu7:function(e,t){f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49927	104.18.32.137	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:23 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fa36997517f7-ATL
2024-04-16 17:43:24 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49928	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	1979	OUT	GET /s/sfsites/c/resource/1710540190000/DSC_SetGoogleAnalyticsWindowVariables HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A14+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==
2024-04-16 17:43:24 UTC	715	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:24 GMT X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Fri, 15 Mar 2024 22:03:10 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 9a2b6edc8099419ae93d8fd6e41a0386
2024-04-16 17:43:24 UTC	700	IN	Data Raw: 32 62 30 0d 0a 76 61 72 20 73 65 74 57 69 6e 64 6f 77 56 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 7b 65 78 63 6c 75 64 65 41 6e 61 6c 79 74 69 63 73 2c 20 61 63 63 6f 75 6e 74 49 64 2c 20 75 73 65 72 49 64 7d 20 3d 20 65 76 65 6e 74 2e 64 65 74 61 69 6c 3b 0a 20 20 20 20 20 20 20 20 2f 2f 73 65 74 20 77 69 6e 64 6f 77 20 76 61 72 69 61 62 6c 65 73 20 66 6f 72 20 69 6e 74 65 72 61 63 74 69 6f 6e 20 65 76 65 6e 74 73 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 65 78 63 6c 75 64 65 41 6e 61 6c 79 74 69 63 73 20 3d 20 65 78 63 6c 75 64 65 41 6e 61 6c 79 74 69 63 73 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 63 63 6f 75 6e 74 49 64 20 3d 20 61 63 63 6f 75 6e 74 49 64 3b 0a 20 20 Data Ascii: 2b0var setWindowVar = function(event){ const {excludeAnalytics, accountId, userId} = event.detail; //set window variables for interaction events window.excludeAnalytics = excludeAnalytics; window.accountId = accountId;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49930	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:23 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289402940&PageStart=1713289396931&PrevBundleTime=1713289401231&LastActivity=2023&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 11623 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:23 UTC	11623	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 7d 89 96 db b6 b2 e0 af e8 f5 1c 2b c9 79 a2 44 6c 24 e1 8c c6 e3 2d ab b3 3d 67 b9 c9 bd 39 7d 40 12 54 b3 9b 22 15 92 ea c5 f7 dc f9 f6 a9 02 29 b5 08 aa b5 b8 ed c4 49 6c b5 29 09 2c 14 0a b5 a1 0a 04 a0 7f 9f bc d4 bf 9d 3c a4 a3 93 9f ce 74 0e 1f 3c 57 8e 4e 9e 5f d6 d5 c9 c3 7f fe fb e4 cb 34 8f 4f 1e fa c1 e8 e4 71 39 c3 a2 7f ba 23 02 2f 03 c6 5d f9 eb af 9b 15 ff 33 ba ab 86 68 6b 10 ef ae 1a d2 bd ad 01 f8 03 7a 17 a0 d7 03 1c fd f3 64 1c 55 95 43 16 37 51 7a 56 0e fe 3d 88 d3 6a 91 a9 9b 87 83 24 d3 d7 1f 9b ab 13 a7 a5 8e ea b4 c8 1f 0e a2 22 5b ce f3 8f 07 33 b5 78 38 70 c7 a2 d4 f3 8f 07 ff 39 19 75 d1 2c b3 c1 7f 0f ce 28 a0 9b ab 72 96 e6 4e 5d 00 38 b1 c1 eb df 6e d8 c5 ab fb 36 da 62 39 b0 4d 3f 4d cf af Data Ascii: }+yDl$-=g9}@T")Il),<t<WN_4Oq9#/]3hkzdUC7QzV=j$"[3x8p9u,(rN]8n6b9M?M
2024-04-16 17:43:24 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:24 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 34 30 31 37 7d 0a Data Ascii: {"BundleTime":1713289404017}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49936	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289403062&PageStart=1713289396931&PrevBundleTime=1713289401231&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 62428 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 32 2c 22 57 68 65 6e 22 3a 32 36 30 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 37 38 2c 22 41 72 67 73 22 3a 5b 5b 30 2c 31 2c 31 2c 32 36 30 39 2c 34 30 39 5d 5d 2c 22 57 68 65 6e 22 3a 32 36 30 39 7d 2c 7b 22 4b 69 6e 64 22 3a 37 38 2c 22 41 72 67 73 22 3a 5b 5b 30 2c 31 2c 35 2c 32 36 30 39 2c 34 31 36 5d 5d 2c 22 57 68 65 6e 22 3a 32 36 30 39 7d 2c 7b 22 4b 69 6e 64 22 3a 39 30 2c 22 41 72 67 73 22 3a 5b 5b 31 2c 32 38 32 5d 5d 2c 22 57 68 65 6e 22 3a 32 36 30 39 7d 2c 7b 22 4b 69 6e 64 22 3a 36 30 2c 22 41 72 67 73 22 3a 5b 5b 31 2c 32 38 32 5d 2c 5b 22 2e 63 73 73 2d 31 70 79 63 69 68 72 20 7b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 20 67 61 Data Ascii: {"Seq":2,"When":2609,"Evts":[{"Kind":78,"Args":[[0,1,1,2609,409]],"When":2609},{"Kind":78,"Args":[[0,1,5,2609,416]],"When":2609},{"Kind":90,"Args":[[1,282]],"When":2609},{"Kind":60,"Args":[[1,282],[".css-1pycihr { display: flex; flex-direction: column; ga
2024-04-16 17:43:24 UTC	16384	OUT	Data Raw: 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 68 61 73 68 3d 64 35 65 30 66 34 31 36 26 61 6c 67 6f 72 69 74 68 6d 3d 66 6e 76 33 32 22 2c 32 31 36 35 2e 35 2c 31 30 39 39 2e 35 2c 22 63 73 73 22 2c 30 2c 30 2c 32 31 36 35 2e 35 2c 32 37 38 35 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 32 37 38 35 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 32 37 38 35 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 33 30 30 30 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 32 37 38 35 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 33 30 30 30 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 33 32 34 34 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 33 32 36 35 2c 32 39 35 31 36 2c 32 39 35 31 36 2c 32 39 38 31 36 5d 2c 22 57 68 65 6e 22 3a 33 31 31 39 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 Data Ascii: scated.invalid?hash=d5e0f416&algorithm=fnv32",2165.5,1099.5,"css",0,0,2165.5,2785.100000000006,2785.100000000006,2785.100000000006,3000.2000000000116,2785.600000000006,3000.3000000000175,3244.3000000000175,3265,29516,29516,29816],"When":3119},{"Kind":57,"
2024-04-16 17:43:24 UTC	16384	OUT	Data Raw: 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 6c 65 67 61 63 79 2d 77 77 77 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 66 72 61 6d 65 77 6f 72 6b 2d 65 39 65 36 35 39 64 62 38 39 64 32 38 36 64 31 2e 6a 73 22 2c 31 32 33 37 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 31 39 38 35 2e 38 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 73 63 72 69 70 74 22 2c 30 2c 30 2c 31 32 33 37 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 32 32 37 36 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 32 37 36 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 32 37 36 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 35 36 36 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 32 32 37 36 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 32 35 36 36 2e 33 30 30 30 30 30 Data Ascii: //www.docusign.com/legacy-www/_next/static/chunks/framework-e9e659db89d286d1.js",1237.6000000000058,1985.8999999999942,"script",0,0,1237.6000000000058,2276.3000000000175,2276.3000000000175,2276.3000000000175,2566.100000000006,2276.600000000006,2566.300000
2024-04-16 17:43:24 UTC	13276	OUT	Data Raw: 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 33 32 66 66 63 30 30 30 31 31 30 38 30 30 30 31 30 30 30 31 30 33 30 31 32 32 30 30 30 32 31 31 30 31 30 33 31 31 30 31 66 66 63 34 30 30 31 66 30 30 30 30 30 31 30 35 30 31 30 31 30 31 30 31 30 31 30 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 30 32 30 33 30 34 30 35 30 36 30 37 30 38 30 39 30 61 30 62 66 66 63 34 30 30 62 35 31 30 30 30 30 32 30 31 30 33 30 33 30 32 30 34 30 33 30 35 30 35 30 34 30 34 30 30 30 30 30 31 37 64 30 31 30 32 30 33 30 30 30 34 31 31 30 35 31 32 32 31 33 31 34 31 30 36 31 33 35 31 36 31 30 37 32 32 37 31 31 34 33 32 38 31 39 31 61 31 30 38 32 33 34 32 62 31 63 31 31 35 35 32 64 31 66 30 32 34 33 33 36 32 37 32 38 32 30 39 30 61 31 Data Ascii: 323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a1
2024-04-16 17:43:24 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49934	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 68076 Connection: close Server: istio-envoy Date: Sat, 30 Dec 2023 18:36:36 GMT Last-Modified: Fri, 29 Dec 2023 19:54:13 GMT ETag: "49ce5445ddcf5d24ef3badc4eb1a11dd" x-amz-server-side-encryption: AES256 x-amz-version-id: y6zttos3ioTeFP6rzSgto2PcGmt3z85g Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 33 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 512f238cbc4caf579dfdfec080d485e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: VEYAA_W6afUr0LZ5VH3WycptrOaRyeFQo0_UstEd9DVnwPvuc07ppA== Age: 9328008
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 5d 2c 7b 22 38 53 79 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2c 61 3d 69 26 26 69 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 6f 77 28 29 7d 3a 66 75 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:fun
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 20 6e 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 3b 65 3d 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 72 65 6a 65 63 74 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 45 72 72 6f 72 2c 20 67 6f 74 20 22 2b 6e 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6a 65 63 74 65 64 3d 21 30 2c 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 Data Ascii: n=e&&"function"==typeof e.toString?e.toString():{}.toString.call(e);e=new Error("Expected reject to be called with Error, got "+n)}return this.rejected=!0,this.error=e,this.errorHandled\|\|setTimeout(function(){t.errorHandled\|\|function(e,t){if(-1===c.index
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 69 6e 67 69 66 79 28 74 29 29 3b 69 66 28 22 70 6f 73 74 22 3d 3d 3d 69 29 72 65 74 75 72 6e 20 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 20 6e 6f 74 20 70 6f 73 74 20 74 6f 20 77 69 6e 64 6f 77 20 77 69 74 68 6f 75 74 20 74 61 72 67 65 74 20 6e 61 6d 65 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 72 6c 2c 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 65 2e 62 6f 64 79 2c 6f 3d 65 2e 6d 65 74 68 6f 64 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 22 70 6f 73 74 22 3a 6f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 Data Ascii: ingify(t));if("post"===i)return s().then(function(e){if(!e)throw new Error("Can not post to window without target name");!function(e){var t=e.url,n=e.target,r=e.body,o=e.method,i=void 0===o?"post":o,a=document.createElement("form");if(a.setAttribute("targ
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 7d 69 66 28 67 65 74 50 61 72 65 6e 74 28 65 29 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 77 69 6e 64 6f 77 2c 65 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 65 2c 77 69 6e 64 6f 77 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 41 6c 6c 43 68 69 6c 64 46 72 61 6d 65 73 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 2c 72 3d 67 65 74 46 72 61 6d 65 73 28 65 29 3b 6e Data Ascii: }if(getParent(e)===e)return e;try{if(isAncestorParent(window,e)&&window.top)return window.top}catch(o){}try{if(isAncestorParent(e,window)&&window.top)return window.top}catch(o){}for(var t=0,n=function getAllChildFrames(e){for(var t=[],n=0,r=getFrames(e);n
2024-04-16 17:43:24 UTC	3533	IN	Data Raw: 70 65 72 74 79 28 69 2c 6c 29 3f 72 28 69 5b 6c 5d 29 3f 69 5b 6c 5d 2e 70 75 73 68 28 68 29 3a 69 5b 6c 5d 3d 5b 69 5b 6c 5d 2c 68 5d 3a 69 5b 6c 5d 3d 68 7d 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 7d 2c 76 6e 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 73 72 63 5f 41 6e 79 3d 6e 28 22 37 45 41 30 22 29 2e 73 6f 75 72 63 65 2c 74 2e 73 72 63 5f Data Ascii: perty(i,l)?r(i[l])?i[l].push(h):i[l]=[i[l],h]:i[l]=h}return i};var r=Array.isArray\|\|function(e){return"[object Array]"===Object.prototype.toString.call(e)}},vn14:function(e,t,n){"use strict";e.exports=function(e){var t={};t.src_Any=n("7EA0").source,t.src_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49932	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 92674 Connection: close Server: istio-envoy Date: Mon, 12 Feb 2024 00:38:12 GMT Last-Modified: Fri, 09 Feb 2024 17:52:43 GMT ETag: "16d7ae86e21434a32157d3226ac9bb77" x-amz-server-side-encryption: AES256 x-amz-version-id: Qi0pb60zA_K3oEJE1aGWSTeEGbmkzIAV Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 268f65a0b054ce4bd2ab49c3b30f4bae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: U14R4s31aucrQCZi_l1NDIL1XOJp5CpCrqwDKKnvmmSl-E8o-S97BA== Age: 5591112
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 22 2b 57 61 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 72 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 75 6e 63 74 69 6f 6e 7d 29 7d 2c 22 2f 56 33 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 31 33 57 53 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){fu
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 31 2f 73 61 6d 6f 61 22 2c 22 2d 31 30 7c 6e 22 3a 22 31 31 2f 68 6f 6e 6f 6c 75 6c 75 2c 31 31 2f 6a 6f 68 6e 73 74 6f 6e 2c 31 31 2f 72 61 72 6f 74 6f 6e 67 61 2c 31 31 2f 74 61 68 69 74 69 22 7d 7d 29 29 2c 73 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 7b 6f 66 66 73 65 74 3a 4e 75 6d 62 65 72 28 74 5b 30 5d 29 2c 68 65 6d 3a 74 5b 31 5d 7d 3b 74 5b 32 5d 26 26 28 72 2e 64 73 74 3d 74 5b 32 5d 29 2c 75 5b 65 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5b 30 2d 39 5d 2b 29 5c 2f 2f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 1/samoa","-10\|n":"11/honolulu,11/johnston,11/rarotonga,11/tahiti"}})),s={};Object.keys(u).forEach(function(e){var t=e.split("\|"),r={offset:Number(t[0]),hem:t[1]};t[2]&&(r.dst=t[2]),u[e].split(",").forEach(function(e){e=e.replace(/(^[0-9]+)\//,function(e,t
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 73 3d 74 65 28 65 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 54 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 75 29 2e 63 6f 6e 63 61 74 28 73 29 7d 2c 22 69 73 6f 2d 73 68 6f 72 74 22 3a 66 75 6e 63 74 69 6f 6e 20 69 73 6f 53 68 6f 72 74 28 65 29 7b 76 61 72 20 74 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 6d 6f 6e 74 68 28 29 2b 31 29 2c 72 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 64 61 74 65 28 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 2e 79 65 61 72 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 Data Ascii: s=te(e);return"".concat(t,"-").concat(r,"-").concat(n,"T").concat(o,":").concat(i,":").concat(a,".").concat(u).concat(s)},"iso-short":function isoShort(e){var t=C.zeroPad(e.month()+1),r=C.zeroPad(e.date());return"".concat(e.year(),"-").concat(t,"-").conca
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 31 32 3d 74 2e 67 65 74 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 68 6f 75 72 31 32 3e 31 32 26 26 28 68 6f 75 72 31 32 2d 3d 31 32 29 2c 30 3d 3d 3d 68 6f 75 72 31 32 26 26 28 68 6f 75 72 31 32 3d 31 32 29 2c 68 6f 75 72 31 32 7d 2c 74 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 74 2e 65 70 6f 63 68 3d 59 65 28 74 2c 65 29 2c 74 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 68 31 32 28 29 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 43 2e 7a 65 72 6f 50 61 64 28 74 68 69 73 2e 6d 69 6e 75 74 65 28 29 29 29 2e 63 6f 6e 63 61 Data Ascii: 12=t.getHours();return hour12>12&&(hour12-=12),0===hour12&&(hour12=12),hour12},time:function time(e){if(void 0!==e){var t=this.clone();return e=e.toLowerCase().trim(),t.epoch=Ye(t,e),t}return"".concat(this.h12(),":").concat(C.zeroPad(this.minute())).conca
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 73 53 74 6f 70 70 65 64 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 53 75 62 73 63 72 69 62 65 72 2c 72 3d 73 2e 61 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 3b 69 66 28 74 68 69 73 2e 5f 65 72 72 6f 72 29 72 26 26 74 2e 73 79 6e 63 45 72 72 6f 72 54 68 72 6f 77 61 62 6c 65 3f 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 53 65 74 45 72 72 6f 72 28 74 2c 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3a 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 55 6e 73 75 62 28 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3b 65 6c 73 65 20 69 66 28 74 2e 73 79 6e 63 45 72 72 6f 72 54 Data Ascii: sStopped){var t=this._parentSubscriber,r=s.a.useDeprecatedSynchronousErrorHandling;if(this._error)r&&t.syncErrorThrowable?(this.__tryOrSetError(t,this._error,e),this.unsubscribe()):(this.__tryOrUnsub(this._error,e),this.unsubscribe());else if(t.syncErrorT
2024-04-16 17:43:24 UTC	11747	IN	Data Raw: 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 74 68 69 73 2e 69 73 53 74 6f 70 70 65 64 3f 28 65 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 2e 70 75 73 68 28 65 29 2c 6e 65 77 20 73 28 74 68 69 73 2c 65 29 29 7d 2c 53 75 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 4f 62 73 65 72 76 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 6f 2e 61 3b 72 65 74 75 72 6e 20 65 2e 73 6f 75 72 63 65 3d 74 68 69 73 2c 65 7d 2c 53 75 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 28 65 2c 74 29 7d 2c 53 75 62 6a 65 63 74 7d 28 6f 2e 61 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f Data Ascii: ,a.a.EMPTY):this.isStopped?(e.complete(),a.a.EMPTY):(this.observers.push(e),new s(this,e))},Subject.prototype.asObservable=function(){var e=new o.a;return e.source=this,e},Subject.create=function(e,t){return new h(e,t)},Subject}(o.a),h=function(e){functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49931	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23865 Connection: close Server: istio-envoy Date: Tue, 26 Dec 2023 16:29:26 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "4049f38c00add1738dc4806148ff8829" x-amz-server-side-encryption: AES256 x-amz-version-id: cZI1cI6WRHhkzkWa3N1Jh4ekBwSSYCCx Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7b5972b440c3b8ed7f221569a5195fa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: iG0xgcWyUI4j1VdVh9q9Ik3nQ6oPynDVGHE-FKwE1yh6GXIi3GfC8w== Age: 9681238
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 5d 2c 7b 22 30 42 38 45 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 22 72 41 63 31 22 29 2c 75 3d 65 28 22 50 59 63 48 22 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 73 4f 72 41 64 64 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 63 3d 74 79 70 65 6f 66 20 74 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 30 3d 3d 3d 74 26 26 31 2f 74 3d 3d 3d 2d 31 2f 30 3f 21 21 65 2e 5f 69 74 65 6d 73 5b 22 2d 30 22 5d 7c 7c 28 6e 26 26 28 65 2e 5f 69 74 65 6d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._item
2024-04-16 17:43:24 UTC	8474	IN	Data Raw: 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 64 75 63 65 64 22 5d 29 7b 6e 3d 6e 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 76 61 6c 75 65 22 5d 3b 62 72 65 61 6b 7d 72 3d 65 2e 6e 65 78 74 28 29 7d 72 65 74 75 72 6e 20 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6d 65 74 68 6f 64 52 65 64 75 63 65 28 74 2c 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 28 65 5b 72 5d 28 69 28 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 73 74 65 70 22 5d 2c 74 29 2c 6e 29 29 7d 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 72 65 64 75 63 65 7d 29 3b 76 61 72 20 6f 3d 22 75 6e 64 65 66 69 6e Data Ascii: @@transducer/reduced"]){n=n["@@transducer/value"];break}r=e.next()}return t["@@transducer/result"](n)}function _methodReduce(t,n,e,r){return t["@@transducer/result"](e[r](i(t["@@transducer/step"],t),n))}e.d(n,"a",function(){return _reduce});var o="undefin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49937	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289403063&PageStart=1713289396931&PrevBundleTime=1713289401231&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 36 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":3,"When":6107,"Evts":[{"Kind":100,"Args":["visible"],"When":6107},{"Kind":100,"Args":["hidden"],"When":6107},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:24 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49938	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289403063&PageStart=1713289396931&PrevBundleTime=1713289401231&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 31 32 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":4,"When":6128,"Evts":[{"Kind":100,"Args":["visible"],"When":6128},{"Kind":100,"Args":["hidden"],"When":6128},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:24 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49933	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 63529 Connection: close Server: istio-envoy Date: Mon, 12 Feb 2024 00:38:12 GMT Last-Modified: Fri, 09 Feb 2024 17:52:43 GMT ETag: "02f09379c544befa413d22eb57ed41de" x-amz-server-side-encryption: AES256 x-amz-version-id: L3EEOmaY8uAY49QWlchguIxgqp.rjlPC Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 268f65a0b054ce4bd2ab49c3b30f4bae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: udt0ik35-naW85sUj5SN_Y_-feUoWkPOd4mIo9-Ny2X7356w5qQJwA== Age: 5591112
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 5d 2c 7b 22 30 4f 39 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6c 45 61 71 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 45 52 6b 50 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 22 61 57 7a 7a 22 29 2c 73 3d 6e 2e 6e 28 63 29 2c 75 3d 6e 28 22 31 31 48 6d 22 29 2c 6c 3d 6e 28 22 49 39 69 52 22 29 2c 70 3d 6e 2e 6e 28 6c 29 2c 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 2e 70 61 74 74 65 72 6e 2b 22 29 24 22 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 6f 72 28 76 61 72 20 69 3d 22 22 2c 61 3d 6e 7c 7c 7b 7d 2c 63 3d 28 6f 7c 7c 7b 7d 29 2e 70 72 65 74 74 79 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 50 72 65 74 74 79 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 65 5b 73 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 75 29 7b 76 61 72 20 6c 2c 70 3d 61 5b 75 2e 6e 61 6d 65 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 70 29 7b 69 66 28 75 2e 6f 70 74 69 6f 6e 61 6c 29 7b 75 2e 70 61 72 74 69 61 6c 26 26 28 69 2b 3d 75 2e 70 72 65 66 69 78 29 3b 63 6f 6e 74 69 6e 75 65 7d 74 68 Data Ascii: .pattern+")$"));return function(n,o){for(var i="",a=n\|\|{},c=(o\|\|{}).pretty?encodeURIComponentPretty:encodeURIComponent,s=0;s<e.length;s++){var u=e[s];if("string"!==typeof u){var l,p=a[u.name];if(null==p){if(u.optional){u.partial&&(i+=u.prefix);continue}th
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 28 74 68 69 73 2c 65 2c 22 66 6f 72 63 65 55 70 64 61 74 65 22 29 7d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 3d 45 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 4f 3d 47 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 46 3b 4f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 47 2c 72 28 4f 2c 45 2e 70 72 6f 74 6f 74 79 70 65 29 2c 4f 2e 69 73 50 75 72 65 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 21 30 3b 76 61 72 20 77 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 78 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 50 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6a 3d 7b 6b 65 79 3a 21 30 2c 72 65 66 3a 21 30 2c 5f 5f 73 65 6c 66 3a 21 Data Ascii: .updater.enqueueForceUpdate(this,e,"forceUpdate")},F.prototype=E.prototype;var O=G.prototype=new F;O.constructor=G,r(O,E.prototype),O.isPureReactComponent=!0;var w={current:null},x={current:null},P=Object.prototype.hasOwnProperty,j={key:!0,ref:!0,__self:!
2024-04-16 17:43:24 UTC	15370	IN	Data Raw: 31 38 6e 3a 22 6c 61 6e 67 75 61 67 65 43 68 61 6e 67 65 64 22 2c 62 69 6e 64 49 31 38 6e 53 74 6f 72 65 3a 22 22 2c 74 72 61 6e 73 45 6d 70 74 79 4e 6f 64 65 56 61 6c 75 65 3a 22 22 2c 74 72 61 6e 73 53 75 70 70 6f 72 74 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 3a 21 30 2c 74 72 61 6e 73 4b 65 65 70 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 46 6f 72 3a 5b 22 62 72 22 2c 22 73 74 72 6f 6e 67 22 2c 22 69 22 2c 22 70 22 5d 2c 75 73 65 53 75 73 70 65 6e 73 65 3a 21 30 7d 2c 66 3d 6e 2e 6e 28 75 29 2e 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 65 74 44 65 66 61 75 6c 74 73 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 Data Ascii: 18n:"languageChanged",bindI18nStore:"",transEmptyNodeValue:"",transSupportBasicHtmlNodes:!0,transKeepBasicHtmlNodesFor:["br","strong","i","p"],useSuspense:!0},f=n.n(u).a.createContext();function setDefaults(){var e=arguments.length>0&&void 0!==arguments[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49935	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	995	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 107348 Connection: close Server: istio-envoy Date: Mon, 04 Mar 2024 15:19:35 GMT Last-Modified: Sat, 02 Sep 2023 21:37:08 GMT ETag: "114785899ceb423273fcc17aaad202e9" x-amz-server-side-encryption: AES256 x-amz-version-id: BQZuTQT9enIwqk7q5.sMrzSRZtXMoUNL Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 122 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 665d1c5fbd9802ee4a4f61e7446fc81e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: zbSDpA479zHbbxGDGj9S3mHiAGmEMRIARmZJJr-5MApxHhSl2geJ9Q== Age: 3723829
2024-04-16 17:43:24 UTC	15389	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 22 37 6e 6d 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 43 45 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 2e 63 68 65 63 6b 44 43 45 29 74 72 79 7b 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLO
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 22 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 20 61 73 79 6e 63 20 61 75 74 6f 46 6f 63 75 73 20 61 75 74 6f 50 6c 61 79 20 63 6f 6e 74 72 6f 6c 73 20 64 65 66 61 75 6c 74 20 64 65 66 65 72 20 64 69 73 61 62 6c 65 64 20 66 6f 72 6d 4e 6f 56 61 6c 69 64 61 74 65 20 68 69 64 64 65 6e 20 6c 6f 6f 70 20 6e 6f 4d 6f 64 75 6c 65 20 6e 6f 56 61 6c 69 64 61 74 65 20 6f 70 65 6e 20 70 6c 61 79 73 49 6e 6c 69 6e 65 20 72 65 61 64 4f 6e 6c 79 20 72 65 71 75 69 72 65 64 20 72 65 76 65 72 73 65 64 20 73 63 6f 70 65 64 20 73 65 61 6d 6c 65 73 73 20 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 74 5b 65 5d 3d 6e 65 77 20 43 28 65 2c 33 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: "allowFullScreen async autoFocus autoPlay controls default defer disabled formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach(function(e){_t[e]=new C(e,3,!1,e.toLowerCase
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 65 2e 61 6e 63 65 73 74 6f 72 73 2e 6c 65 6e 67 74 68 3d 30 2c 31 30 3e 6f 6e 2e 6c 65 6e 67 74 68 26 26 6f 6e 2e 70 75 73 68 28 65 29 7d 7d 7d 76 61 72 20 63 6e 3d 7b 7d 2c 73 6e 3d 30 2c 66 6e 3d 22 5f 72 65 61 63 74 4c 69 73 74 65 6e 65 72 73 49 44 22 2b 28 22 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 29 3b 66 75 6e 63 74 69 6f 6e 20 49 64 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 66 6e 29 7c 7c 28 65 5b 66 6e 5d 3d 73 6e 2b 2b 2c 63 6e 5b 65 5b 66 6e 5d 5d 3d 7b 7d 29 2c 63 6e 5b 65 5b 66 6e 5d 5d 7d 66 75 6e 63 74 69 6f 6e 20 4a 64 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 28 Data Ascii: e.ancestors.length=0,10>on.length&&on.push(e)}}}var cn={},sn=0,fn="_reactListenersID"+(""+Math.random()).slice(2);function Id(e){return Object.prototype.hasOwnProperty.call(e,fn)\|\|(e[fn]=sn++,cn[e[fn]]={}),cn[e[fn]]}function Jd(e){if("undefined"===typeof(
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 3f 64 65 6c 65 74 65 20 62 5b 6c 5d 3a 62 5b 6c 5d 3d 65 7d 29 2e 5f 73 74 72 69 6e 67 52 65 66 3d 6c 2c 74 29 7d 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 65 26 26 78 28 22 32 38 34 22 29 2c 6e 2e 5f 6f 77 6e 65 72 7c 7c 78 28 22 32 39 30 22 2c 65 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 66 28 65 2c 74 29 7b 22 74 65 78 74 61 72 65 61 22 21 3d 3d 65 2e 74 79 70 65 26 26 78 28 22 33 31 22 2c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 3f 22 6f 62 6a 65 63 74 20 77 69 74 68 20 6b 65 79 73 20 7b 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 74 2c 22 22 29 7d 66 Data Ascii: ?delete b[l]:b[l]=e})._stringRef=l,t)}"string"!==typeof e&&x("284"),n._owner\|\|x("290",e)}return e}function Bf(e,t){"textarea"!==e.type&&x("31","[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t,"")}f
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 43 6f 6e 74 65 78 74 21 3d 3d 74 2e 63 6f 6e 74 65 78 74 29 3a 74 2e 63 6f 6e 74 65 78 74 26 26 4d 65 28 30 2c 74 2e 63 6f 6e 74 65 78 74 2c 21 31 29 2c 4a 66 28 65 2c 74 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 53 67 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 6d 6f 64 65 2c 6c 3d 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 61 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 30 3d 3d 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 29 7b 61 3d 6e 75 6c 6c 3b 76 61 72 20 69 3d 21 31 7d 65 6c 73 65 20 61 3d 7b 74 69 6d 65 64 4f 75 74 41 74 3a 6e 75 6c 6c 21 3d 3d 61 3f 61 2e 74 69 6d 65 64 4f 75 74 41 74 3a 30 7d 2c 69 3d 21 30 2c 74 2e 65 66 66 65 63 74 54 61 67 26 3d 2d 36 35 3b 69 66 28 6e 75 6c 6c 3d Data Ascii: Context!==t.context):t.context&&Me(0,t.context,!1),Jf(e,t.containerInfo)}function Sg(e,t,n){var r=t.mode,l=t.pendingProps,a=t.memoizedState;if(0===(64&t.effectTag)){a=null;var i=!1}else a={timedOutAt:null!==a?a.timedOutAt:0},i=!0,t.effectTag&=-65;if(null=
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 2e 75 70 64 61 74 65 51 75 65 75 65 29 29 7b 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 6e 75 6c 6c 3b 76 61 72 20 69 3d 74 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 75 6c 6c 3d 3d 3d 69 26 26 28 69 3d 74 2e 73 74 61 74 65 4e 6f 64 65 3d 6e 65 77 20 55 72 29 2c 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 41 68 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 2e 64 65 6c 65 74 65 28 74 29 2c 74 3d 6d 66 28 74 3d 6c 66 28 29 2c 65 29 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 68 69 28 65 2c 74 29 29 26 26 28 63 66 28 65 2c 74 29 2c 30 21 3d 3d 28 74 3d 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 29 26 26 58 68 28 65 2c 74 29 29 7d 2e 62 69 6e 64 28 Data Ascii: .updateQueue)){t.updateQueue=null;var i=t.stateNode;null===i&&(i=t.stateNode=new Ur),n.forEach(function(e){var n=function Ah(e,t){var n=e.stateNode;null!==n&&n.delete(t),t=mf(t=lf(),e),null!==(e=hi(e,t))&&(cf(e,t),0!==(t=e.expirationTime)&&Xh(e,t))}.bind(
2024-04-16 17:43:24 UTC	10039	IN	Data Raw: 6f 6e 54 69 6d 65 3d 6e 2c 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 74 2c 78 69 28 29 2c 67 6c 3d 68 6c 2c 42 69 28 65 2c 6e 29 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 74 2c 6e 29 2c 6c 29 29 3a 28 65 2e 70 65 6e 64 69 6e 67 43 6f 6d 6d 69 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 6e 2c 65 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 66 28 29 7b 72 65 74 75 72 6e 20 61 6c 3f 67 6c 3a 28 43 69 28 29 2c 30 21 3d 3d 6f 6c 26 26 31 21 3d 3d 6f 6c 7c 7c 28 78 69 28 29 2c 67 6c 3d 68 6c 29 2c 67 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 58 68 28 65 2c 74 29 7b 6e 75 6c 6c 3d 3d 3d 65 2e 6e 65 78 74 53 63 68 65 64 75 6c 65 64 52 6f 6f 74 3f 28 65 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 74 2c 6e 75 6c 6c 3d 3d 3d Data Ascii: onTime=n,e.finishedWork=t,xi(),gl=hl,Bi(e,n)}.bind(null,e,t,n),l)):(e.pendingCommitExpirationTime=n,e.finishedWork=t)}function lf(){return al?gl:(Ci(),0!==ol&&1!==ol\|\|(xi(),gl=hl),gl)}function Xh(e,t){null===e.nextScheduledRoot?(e.expirationTime=t,null===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49939	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	622	OUT	GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11808 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:31 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "c65db597e762d33246cfbec56b886523" x-amz-server-side-encryption: AES256 x-amz-version-id: vXeKg.tGpOUOXbODWyYzAbmB8cSGPgwQ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aaf016fef66eecea8770da00a4c0e9d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 80wo2RFNHFjcEXKS57ZCj9-S5a0qCrzew2TPM7jlYCqr7QH_pBRsRg== Age: 3352373
2024-04-16 17:43:24 UTC	11808	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 22 39 4f 55 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 53 74 6f 72 65 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6f 6d 62 69 6e 65 52 65 64 75 63 65 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 69 6e 64 41 63 74 69 6f 6e 43 72 65 61 74 6f 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49940	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	3182	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A22+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:24 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=31536000,immutable Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:24 GMT Server: sfdcedge X-SFDC-Request-Id: 1fe25f7545caaca8ace6dd181f7444b8
2024-04-16 17:43:24 UTC	15957	IN	Data Raw: 33 65 61 39 0d 0a 3a 72 6f 6f 74 7b 2d 2d 6c 77 63 2d 6d 71 4c 61 72 67 65 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 2e 30 36 32 35 65 6d 29 3b 2d 2d 6c 77 63 2d 6d 71 53 69 6e 67 6c 65 43 6f 6c 75 6d 6e 52 65 63 6f 72 64 4c 61 79 6f 75 74 3a 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 39 39 70 78 29 3b 2d 2d 6c 77 63 2d 6d 71 4d 65 64 69 75 6d 4c 61 6e 64 73 63 61 70 65 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 20 61 6e 64 20 28 6d 69 6e 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 20 34 2f 33 29 3b 2d 2d 6c 77 63 2d 6d 71 4d 65 64 69 75 6d 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 3b 2d 2d 6c Data Ascii: 3ea9:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--l
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 2d 6c 77 63 2d 63 6f 6c 6f 72 47 72 61 79 32 3a 72 67 62 28 32 35 30 2c 20 32 35 30 2c 20 32 34 39 29 3b 2d 2d 6c 77 63 2d 6f 70 61 63 69 74 79 38 3a 30 2e 38 3b 2d 2d 6c 77 63 2d 73 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 42 6f 6c 64 49 74 61 6c 69 63 57 6f 66 66 32 3a 0d 0a 38 30 30 30 0d 0a 75 72 6c 28 2f 5f 73 6c 64 73 2f 66 6f 6e 74 73 2f 76 32 2e 33 2e 30 2f 53 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 77 6f 66 66 32 29 3b 2d 2d 6c 77 63 2d 6f 70 61 63 69 74 79 35 3a 30 2e 35 3b 2d 2d 6c 77 63 2d 73 71 75 61 72 65 49 63 6f 6e 47 6c 6f 62 61 6c 49 64 65 6e 74 69 74 79 49 63 6f 6e 3a 31 2e 32 35 72 65 6d 3b 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 72 6f 77 73 65 72 3a 72 67 62 28 31 31 36 2c 20 Data Ascii: -lwc-colorGray2:rgb(250, 250, 249);--lwc-opacity8:0.8;--lwc-salesforceSansBoldItalicWoff2:8000url(/_slds/fonts/v2.3.0/SalesforceSans-BoldItalic.woff2);--lwc-opacity5:0.5;--lwc-squareIconGlobalIdentityIcon:1.25rem;--lwc-colorBackgroundBrowser:rgb(116,
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 6c 77 63 2d 70 61 6c 65 74 74 65 56 69 6f 6c 65 74 32 30 3a 72 67 62 28 37 32 2c 20 32 36 2c 20 38 34 29 3b 2d 2d 6c 77 63 2d 66 6f 6e 74 53 69 7a 65 48 65 61 64 69 6e 67 53 6d 61 6c 6c 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 50 69 63 6b 65 72 52 61 6e 67 65 49 6e 64 69 63 61 74 6f 72 53 69 7a 65 3a 30 2e 37 35 72 65 6d 3b 2d 2d 6c 77 63 2d 70 61 6c 65 74 74 65 4f 72 61 6e 67 65 31 35 3a 72 67 62 28 35 35 2c 20 33 30 2c 20 33 29 3b 2d 2d 6c 77 63 2d 73 6c 69 64 65 72 48 61 6e 64 6c 65 53 69 7a 65 3a 31 72 65 6d 3b 2d 2d 6c 77 63 2d 74 61 62 6c 65 42 6f 72 64 65 72 52 61 64 69 75 73 3a 30 3b 2d 2d 6c 77 63 2d 70 61 6c 65 74 74 65 54 65 61 6c 36 30 3a 72 67 62 28 36 2c 20 31 36 35 2c 20 31 35 34 29 3b 2d 2d 6c 77 63 2d 75 73 65 72 44 Data Ascii: lwc-paletteViolet20:rgb(72, 26, 84);--lwc-fontSizeHeadingSmall:0.875rem;--lwc-colorPickerRangeIndicatorSize:0.75rem;--lwc-paletteOrange15:rgb(55, 30, 3);--lwc-sliderHandleSize:1rem;--lwc-tableBorderRadius:0;--lwc-paletteTeal60:rgb(6, 165, 154);--lwc-userD
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 70 6c 69 74 5f 76 69 65 77 5f 68 65 61 64 65 72 20 2e 61 6e 63 68 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 62 61 73 65 2d 39 35 2c 20 76 61 72 28 2d 2d 6c 77 63 2d 73 70 6c 69 74 56 69 65 77 43 0d 0a 34 31 35 37 0d 0a 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 2c 72 67 62 28 32 34 33 2c 20 32 34 33 2c 20 32 34 33 29 29 29 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6c 69 73 74 5f 76 69 65 77 5f 68 65 61 64 65 72 20 2e 61 6e 63 68 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 62 61 73 65 2d 39 35 2c 20 76 61 72 28 Data Ascii: plit_view_header .anchor{background-color:var(--slds-g-color-neutral-base-95, var(--lwc-splitViewC4157olorBackground,rgb(243, 243, 243)))}.forcePlaceholder .placeholder.list_view_header .anchor{background-color:var(--slds-g-color-neutral-base-95, var(
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 36 70 78 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 42 75 74 74 6f 6e 7b 77 69 64 74 68 3a 32 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 6c 77 63 2d 73 70 61 63 69 6e 67 53 6d 61 6c 6c 2c 30 2e 37 35 72 65 6d 29 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 53 74 65 70 3a 62 65 66 6f 72 65 2c 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 53 74 65 70 3a 61 66 74 65 72 7b 68 65 69 67 68 74 3a 31 36 Data Ascii: 6px}.forcePlaceholder .placeholder.path .chevronButton{width:20%;margin:0;max-width:300px;padding-left:var(--lwc-spacingSmall,0.75rem)}.forcePlaceholder .placeholder.path .chevronStep:before,.forcePlaceholder .placeholder.path .chevronStep:after{height:16
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 72 67 65 74 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 75 69 50 6f 70 75 70 54 72 69 67 67 65 72 20 61 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 66 6f 72 63 65 41 63 74 69 6f 6e 4c 69 6e 6b 20 2e 5f 66 6f 63 75 73 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 66 6f 72 63 65 41 63 74 69 6f 6e 4c 69 6e 6b 20 2e 5f 75 6e 66 6f 63 75 73 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 6f 72 63 65 44 6f 74 73 53 70 69 6e 6e 65 72 20 2e 73 6c 64 73 2d 73 70 69 6e 6e 65 72 2e 73 6c 64 73 Data Ascii: rget ul{list-style:none;margin:0;padding:0}.uiPopupTrigger a[aria-disabled=true]{pointer-events:none;cursor:default}.forceActionLink ._focused{text-decoration:underline}.forceActionLink ._unfocused{text-decoration:none}.forceDotsSpinner .slds-spinner.slds
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 74 69 6f 6e 42 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6c 77 63 2d 73 70 61 63 69 6e 67 58 53 6d 61 6c 6c 2c 30 2e 35 72 65 6d 29 7d 2e 66 6f 72 63 65 4d 6f 62 69 6c 65 41 63 74 69 6f 6e 4d 6f 64 61 6c 20 2e 66 6f 72 63 65 41 63 74 69 6f 6e 42 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 74 68 69 6e 7d 2e 66 6f 72 63 65 4d 6f 62 69 6c 65 4f 76 65 72 6c 61 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 6c 77 63 2d 64 75 72 61 74 69 6f 6e 51 75 69 63 6b 6c 79 2c 30 2e 31 73 29 20 6c 69 6e 65 61 72 2c 6f 70 61 63 69 74 79 20 76 61 72 28 2d 2d 6c 77 63 2d 64 75 72 61 Data Ascii: tionButton{width:100%;margin-bottom:var(--lwc-spacingXSmall,0.5rem)}.forceMobileActionModal .forceActionButton:last-child{-webkit-text-stroke-width:thin}.forceMobileOverlay{transition:transform var(--lwc-durationQuickly,0.1s) linear,opacity var(--lwc-dura
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 79 65 6c 6c 6f 77 2d 31 30 3a 23 32 38 31 32 30 32 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 31 35 3a 23 32 65 32 32 30 34 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 32 30 3a 23 34 66 32 31 30 30 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 33 30 3a 23 36 66 33 34 30 30 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 34 30 3a 23 38 63 34 62 30 32 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 35 30 3a 23 61 38 36 34 30 33 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 36 30 Data Ascii: yellow-10:#281202;--slds-g-color-palette-yellow-15:#2e2204;--slds-g-color-palette-yellow-20:#4f2100;--slds-g-color-palette-yellow-30:#6f3400;--slds-g-color-palette-yellow-40:#8c4b02;--slds-g-color-palette-yellow-50:#a86403;--slds-g-color-palette-yellow-60
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 6c 61 73 74 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 6c 69 73 74 20 6c 69 2b 6c 69 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 7d 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 62 72 61 6e 64 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 6c 61 73 74 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 69 63 6f 6e 2d 62 72 61 6e 64 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 62 72 61 6e 64 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 6c 61 73 74 20 2e 73 Data Ascii: tton-group .slds-button+.slds-button--last .slds-button,.slds-button-group-list li+li .slds-button{margin-left:-1px}.slds-button-group .slds-button_brand+.slds-button_last .slds-button_icon-brand,.slds-button-group .slds-button_brand+.slds-button--last .s
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 65 64 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 2d 6f 70 61 63 69 74 79 2d 31 30 2c 20 76 61 72 28 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 42 75 74 74 6f 6e 49 6e 76 65 72 73 65 44 69 73 61 62 6c 65 64 2c 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 29 29 7d 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 69 6e 76 65 72 73 65 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e Data Ascii: ed,.slds-button--inverse[disabled],.slds-button--inverse:disabled{background-color:transparent;border-color:var(--slds-g-color-neutral-100-opacity-10, var(--lwc-colorBorderButtonInverseDisabled,rgba(255, 255, 255, 0.15)))}.slds-button_inverse,.slds-button

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49943	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=1713289402940&PageStart=1713289396931&PrevBundleTime=1713289401231&LastActivity=2023&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:24 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49950	35.201.112.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	586	OUT	GET /s/settings/o-19DFBM-na1/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	942	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPokg6okZoH6Ct2Y7VCFapnA06tZv2e2FIDPiQ73ifpfL-jbJ6xx4NFzjleYBo1t6tKJOzcJ-JiFUQ x-goog-generation: 1713204074310891 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1891 Content-Encoding: gzip x-goog-hash: crc32c=cvTREg== x-goog-hash: md5=3eqikxmMCOU4HcgpSdV/8w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1891 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Tue, 16 Apr 2024 17:43:24 GMT Expires: Tue, 16 Apr 2024 17:58:24 GMT Cache-Control: public,max-age=900,no-transform Last-Modified: Tue, 16 Apr 2024 17:41:14 GMT ETag: "ddeaa293198c08e5381dc82949d57ff3" Content-Type: application/json Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:24 UTC	313	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec 58 5f 6f db 38 12 7f bf 4f 11 68 5f ba 85 29 34 c9 de 61 61 a0 0f 49 ba 87 14 9b a6 be 26 41 1f d2 ac 31 26 47 12 63 8a e4 91 94 ff a0 c8 77 3f 90 94 65 d9 96 63 79 af c0 01 87 7d 68 63 ce cc 6f fe 93 1c f1 7b 72 f1 0c 8b af e0 68 81 36 19 3e 3e 0d 92 4b 2c 60 c6 95 b9 e3 b9 04 71 87 ce 71 99 db 64 f8 3d f9 4d 60 89 d2 5d 0a 45 a7 36 19 ca 4a 88 97 41 f2 41 95 c0 65 10 68 7e 3e 26 b6 d2 5a 19 97 32 45 2b cb 73 99 52 55 26 4f 83 e4 b3 14 cb df a5 9a cb 46 36 03 61 f1 65 b0 ad fd f1 7b 72 87 02 a9 53 26 19 26 5c ea ca 3d ba a5 c6 f7 1a ac 9d 2b c3 9e 92 41 72 a5 a4 45 e9 6a 25 83 e4 7e a9 31 19 9e be 0c f6 81 0b ce 18 ca fe d0 47 a8 9c a2 aa d4 02 1d fe f1 9e 52 72 a4 d9 bd d2 67 5b d2 0e 17 0e 0c 42 6f 80 0d 3f 7b 8b 3f 52 Data Ascii: X_o8Oh_)4aaI&A1&Gcw?ecy}hco{rh6>>K,`qqd=M`]E6JAAeh~>&Z2E+sRU&OF6ae{rS&&\=+ArEj%~1GRrg[Bo?{?R
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 86 e2 7d 81 25 de c0 52 55 ee ce 81 71 68 52 b7 43 fa 6a 40 6b 34 27 de ca 44 b1 65 ca ed 08 72 fc ca 99 2b fe c9 17 b5 b1 c0 6e 14 5f c5 0c 5e 18 84 c0 a0 aa 2c 49 9d 56 52 04 5f 22 4d 04 4b 84 2a 51 95 d2 8b 86 7f 9e 55 49 ee 96 63 09 33 9e 83 e3 4a 12 c7 05 92 12 65 15 91 cd f2 80 34 a9 f8 a3 51 02 df 7f 4b b4 41 9f cd 20 f0 2d 79 3a 04 e4 0e cb 2d 5b e3 71 43 ec 04 7e 42 59 7d 74 58 8e db 0b 52 28 eb 4e a0 53 15 11 5c 4e 8f d4 f7 58 18 cc 7a 79 4f 2a c9 33 8e ac 4e f3 61 3b 0f 51 3e d6 7f bc 97 13 23 6a 0a db 8e a9 84 1c 89 36 38 e3 38 ef 8e 78 a2 16 c4 16 c0 d4 1e be 5f ff 30 4f 7b 65 69 02 52 ae 1a 72 c7 db 35 ef 55 7f 2e 83 dc 78 97 14 72 f5 e3 e2 e9 4c 7a 4c 9b eb 93 b7 bd 7e ee 3d 6d ce ff 67 a7 4d 3c 28 9a 53 c1 93 ea d3 a5 0e 32 68 8c c6 2e c1 Data Ascii: }%RUqhRCj@k4'Der+n_^,IVR_"MKQUIc3Je4QKA -y:-[qC~BY}tXR(NS\NXzyO3Na;Q>#j688x_0O{eiRr5U.xrLzL~=mgM<(S2h.
2024-04-16 17:43:24 UTC	323	IN	Data Raw: ca 15 be a4 34 1a d5 d5 44 70 4a a6 b8 24 9a 4b 1b 9a d1 99 25 81 cc 85 86 6c eb b3 68 66 81 68 1d b8 ca 86 1f 86 53 ff 3d 07 d2 6a 65 1c b1 48 2b c3 dd d2 b7 b2 01 2e 62 53 7b 76 86 a6 9d 57 37 dd ec 6d 30 cb 8e 16 9f cf e7 db 0e 6f 74 bd 5f 86 71 8c c4 9b c0 fa 7d f0 09 16 17 cf b0 18 c1 52 28 60 37 b1 4a c3 d3 7f 9c ff fa 4b 60 fa 41 57 09 bc 51 f9 08 cd c8 d7 74 78 fa ee 2c f2 46 68 b2 4f 60 a6 76 cd 6a 70 0f 46 ac 94 9d bd fb e5 d7 41 f2 25 cc fe 1e a2 7c 92 28 7e c1 f8 4e f4 b1 cc 57 a3 ff 5e 99 7b 5e fa 18 6b b1 07 23 46 e0 8a f6 48 fc 14 a9 86 cf 80 2e af 94 cc 78 1e 06 e5 df ea cf c5 e1 f7 e4 1a 6c 51 d3 b4 41 6b c3 b1 9f fc 14 f7 d3 d8 a9 29 ca f4 6d e2 af 81 7f 55 68 96 23 30 50 ee ca bf 69 ee ad b7 ef 7f 7e 93 be fd 39 f1 17 cd a6 48 ad 6b 1f Data Ascii: 4DpJ$K%lhfhS=jeH+.bS{vW7m0ot_q}R(`7JK`AWQtx,FhO`vjpFA%\|(~NW^{^k#FH.xlQAk)mUh#0Pi~9Hk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49949	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 13063 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:31 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "455157cb49065fb85fed54901ddaeb0e" x-amz-server-side-encryption: AES256 x-amz-version-id: 4.AWrkwkcmSV3EGhwrdBs84571BYamhK Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 30 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 512f238cbc4caf579dfdfec080d485e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: uzpwUGGTzrgFz8b0Ve5vXThJQXqGYAorYmSiK4TiNJ4jxa43nAVEtA== Age: 3352373
2024-04-16 17:43:24 UTC	13063	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 5d 2c 7b 22 37 45 41 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 30 2d 5c 75 44 37 46 46 5c 75 45 30 30 30 2d 5c 75 46 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 7c 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 2f 7d 2c 43 6b 69 75 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 20 5c 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49951	35.186.235.23	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	547	OUT	GET /libs/mixpanel-2-latest.min.js HTTP/1.1 Host: cdn4.mxpnl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	879	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPrIyZh1Dx9-x-If7laCmuxtVRMfhH_Qt2ib9lGeyZU0rLn75HyfuSBc9s7OLwZE6Mrl_TMtYLaX6g Date: Tue, 16 Apr 2024 17:43:24 GMT Cache-Control: public,max-age=600 Expires: Tue, 16 Apr 2024 17:53:24 GMT Last-Modified: Tue, 06 Feb 2024 00:09:36 GMT ETag: W/"eb0675a8749ea5d76345796217db928f" Vary: Accept-Encoding x-goog-generation: 1707178176338436 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 18490 Content-Type: text/javascript x-goog-hash: crc32c=fWmQwA== x-goog-hash: md5=6wZ1qHSepddjRXliF9uSjw== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:24 UTC	376	IN	Data Raw: 61 39 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 76 61 72 20 6c 3d 76 6f 69 64 20 30 2c 6d 3d 21 30 2c 71 3d 6e 75 6c 6c 2c 44 3d 21 31 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 41 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 69 66 28 21 61 2e 41 63 29 6c 61 3d 61 2e 41 63 3d 6d 2c 6d 61 3d 44 2c 63 2e 61 28 46 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 63 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 72 79 7b 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 64 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 31 29 3b 72 65 74 75 72 6e 7d 61 28 29 7d 69 66 28 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 22 63 6f 6d 70 Data Ascii: a95(function() {var l=void 0,m=!0,q=null,D=!1;(function(){function Aa(){function a(){if(!a.Ac)la=a.Ac=m,ma=D,c.a(F,function(a){a.nc()})}function b(){try{w.documentElement.doScroll("left")}catch(d){setTimeout(b,1);return}a()}if(w.addEventListener)"comp
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 6e 67 65 22 2c 61 29 3b 76 61 72 20 64 3d 44 3b 74 72 79 7b 64 3d 6f 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 3d 71 7d 63 61 74 63 68 28 66 29 7b 7d 77 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 26 26 64 26 26 62 28 29 7d 63 2e 52 62 28 6f 2c 22 6c 6f 61 64 22 2c 61 2c 6d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 29 7b 79 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 64 29 72 65 74 75 72 6e 20 79 5b 64 5d 7c 7c 28 79 5b 64 5d 3d 46 5b 64 5d 3d 53 28 61 2c 0a 62 2c 64 29 2c 79 5b 64 5d 2e 6a 61 28 29 29 2c 79 5b 64 5d 3b 64 3d 79 3b 69 66 28 46 2e 6d 69 78 70 61 6e 65 6c 29 64 3d 46 2e 6d 69 78 70 61 6e 65 6c 3b 65 6c 73 65 20 69 66 28 61 29 64 3d 53 28 61 2c 62 2c 22 6d 69 78 70 61 6e 65 6c Data Ascii: nge",a);var d=D;try{d=o.frameElement===q}catch(f){}w.documentElement.doScroll&&d&&b()}c.Rb(o,"load",a,m)}function Ba(){y.init=function(a,b,d){if(d)return y[d]\|\|(y[d]=F[d]=S(a,b,d),y[d].ja()),y[d];d=y;if(F.mixpanel)d=F.mixpanel;else if(a)d=S(a,b,"mixpanel
2024-04-16 17:43:24 UTC	1085	IN	Data Raw: 73 2e 6c 6f 61 64 28 29 3b 74 68 69 73 2e 68 63 28 61 29 3b 74 68 69 73 2e 73 64 28 61 29 3b 74 68 69 73 2e 73 61 76 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 74 68 69 73 2e 49 3d 62 2e 49 3b 74 68 69 73 2e 61 61 3d 6e 65 77 20 47 28 61 2c 7b 49 3a 63 2e 62 69 6e 64 28 74 68 69 73 2e 68 2c 74 68 69 73 29 2c 69 3a 62 2e 69 7d 29 3b 74 68 69 73 2e 41 3d 62 2e 41 3b 74 68 69 73 2e 57 63 3d 62 2e 58 63 3b 74 68 69 73 2e 6b 61 3d 62 2e 6b 61 3b 74 68 69 73 2e 66 64 3d 62 2e 67 64 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 41 2e 62 61 74 63 68 5f 73 69 7a 65 3b 74 68 69 73 2e 6f 61 3d 74 68 69 73 2e 41 2e 62 61 74 63 68 5f 66 6c 75 73 68 5f 69 6e 74 65 72 76 61 6c Data Ascii: s.load();this.hc(a);this.sd(a);this.save()}function j(){}function v(){}function C(a,b){this.I=b.I;this.aa=new G(a,{I:c.bind(this.h,this),i:b.i});this.A=b.A;this.Wc=b.Xc;this.ka=b.ka;this.fd=b.gd;this.C=this.A.batch_size;this.oa=this.A.batch_flush_interval
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 38 30 30 30 0d 0a 72 65 74 75 72 6e 20 61 3f 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 29 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 2c 62 29 7b 69 66 28 66 61 21 3d 3d 71 26 26 21 62 29 72 65 74 75 72 6e 20 66 61 3b 76 61 72 20 64 3d 6d 3b 74 72 79 7b 76 61 72 20 61 3d 61 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2c 63 3d 22 5f 5f 6d 70 6c 73 73 5f 22 2b 65 61 28 38 29 3b 61 2e 73 65 74 49 74 65 6d 28 63 2c 22 78 79 7a 22 29 3b 22 78 79 7a 22 21 3d 3d 61 2e 67 65 74 49 74 65 6d 28 63 29 26 26 28 64 3d 44 29 3b 61 2e 72 65 6d 6f 76 65 49 74 65 6d 28 63 29 7d 63 61 74 63 68 28 68 29 7b 64 3d 44 7d 72 65 74 75 72 6e 20 66 61 3d 64 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 29 7b 72 65 74 75 72 6e 7b 6c 6f 67 3a 68 61 28 73 2e 6c 6f Data Ascii: 8000return a?b.substring(0,a):b}function U(a,b){if(fa!==q&&!b)return fa;var d=m;try{var a=a\|\|window.localStorage,c="__mplss_"+ea(8);a.setItem(c,"xyz");"xyz"!==a.getItem(c)&&(d=D);a.removeItem(c)}catch(h){d=D}return fa=d}function ga(a){return{log:ha(s.lo
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 6e 20 4b 61 28 61 29 7b 69 66 28 61 26 26 61 2e 44 62 29 72 65 74 75 72 6e 20 44 3b 76 61 72 20 61 3d 61 26 26 61 2e 77 69 6e 64 6f 77 7c 7c 6f 2c 62 3d 61 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 7b 7d 2c 64 3d 44 3b 63 2e 61 28 5b 62 2e 64 6f 4e 6f 74 54 72 61 63 6b 2c 62 2e 6d 73 44 6f 4e 6f 74 54 72 61 63 6b 2c 61 2e 64 6f 4e 6f 74 54 72 61 63 6b 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 6a 28 5b 6d 2c 31 2c 22 31 22 2c 22 79 65 73 22 5d 2c 0a 61 29 26 26 28 64 3d 6d 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 2c 64 29 7b 21 63 2e 56 61 28 62 29 7c 7c 21 62 2e 6c 65 6e 67 74 68 3f 73 2e 65 72 72 6f 72 28 22 67 64 70 72 2e 22 2b 28 61 3f 22 6f 70 74 49 6e 22 3a 22 6f 70 74 4f 75 74 22 29 2b 22 20 63 61 6c 6c 65 Data Ascii: n Ka(a){if(a&&a.Db)return D;var a=a&&a.window\|\|o,b=a.navigator\|\|{},d=D;c.a([b.doNotTrack,b.msDoNotTrack,a.doNotTrack],function(a){c.j([m,1,"1","yes"],a)&&(d=m)});return d}function sa(a,b,d){!c.Va(b)\|\|!b.length?s.error("gdpr."+(a?"optIn":"optOut")+" calle
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 6b 61 3d 7b 7d 2c 63 3d 7b 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 22 22 29 7d 7d 2c 73 3d 7b 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 67 28 7a 29 26 26 7a 29 74 72 79 7b 7a 2e 6c 6f 67 2e 61 70 70 6c 79 28 7a 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 61 74 63 68 28 61 29 7b 63 2e 61 28 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 7a 2e 6c 6f 67 28 61 29 7d 29 7d 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 26 26 21 63 2e 67 28 7a 29 26 26 7a 29 7b 76 61 72 20 61 3d 5b 22 Data Ascii: =Array.isArray,ka={},c={trim:function(a){return a.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},s={log:function(){if(J&&!c.g(z)&&z)try{z.log.apply(z,arguments)}catch(a){c.a(arguments,function(a){z.log(a)})}},warn:function(){if(J&&!c.g(z)&&z){var a=["
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 61 28 4b 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 29 62 5b 64 5d 21 3d 3d 6c 26 26 28 61 5b 64 5d 3d 62 5b 64 5d 29 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 63 2e 69 73 41 72 72 61 79 3d 42 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 51 2e 63 61 6c 6c 28 61 29 7d 3b 63 2e 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 2f 5e 5c 73 2a 5c 62 66 75 6e 63 74 69 6f 6e 5c 62 2f 2e 74 65 73 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 44 7d 7d 3b 0a 63 2e 49 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: xtend=function(a){c.a(K.call(arguments,1),function(b){for(var d in b)b[d]!==l&&(a[d]=b[d])});return a};c.isArray=B\|\|function(a){return"[object Array]"===Q.call(a)};c.Ua=function(a){try{return/^\s*\bfunction\b/.test(a)}catch(b){return D}};c.Ic=function(a)
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 21 28 61 26 26 0a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7d 3b 63 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 2e 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 2e 4a 63 28 62 29 3f 61 5b 64 5d 3d 63 2e 43 63 28 62 29 3a 63 2e 65 28 62 29 26 26 28 61 5b 64 5d 3d 63 2e 4c 61 28 62 29 29 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 63 2e 74 69 6d 65 73 74 61 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 44 61 74 65 2e 6e 6f 77 3d 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 3b 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 63 2e 43 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 31 30 3e 61 3f 22 Data Ascii: eturn!!(a&&1===a.nodeType)};c.La=function(a){c.a(a,function(b,d){c.Jc(b)?a[d]=c.Cc(b):c.e(b)&&(a[d]=c.La(b))});return a};c.timestamp=function(){Date.now=Date.now\|\|function(){return+new Date};return Date.now()};c.Cc=function(a){function b(a){return 10>a?"
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 22 3a 22 3a 22 29 2b 69 29 3b 72 65 74 75 72 6e 20 69 3d 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 3f 22 7b 7d 22 3a 67 3f 22 7b 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 22 2b 65 2b 22 7d 22 3a 22 7b 22 2b 72 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 7d 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 76 61 72 20 62 3d 2f 5b 5c 5c 22 5c 78 30 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 78 39 66 5c 75 30 30 61 64 5c 75 30 36 30 30 2d 5c 75 30 36 30 34 5c 75 30 37 30 66 5c 75 31 37 62 34 5c 75 31 37 62 35 5c 75 32 30 30 63 2d 5c 75 32 30 30 66 5c 75 32 30 32 38 2d 5c 75 32 30 32 66 5c 75 32 30 36 30 2d 5c 75 32 30 36 66 5c 75 66 65 66 66 5c 75 66 66 66 30 2d 5c 75 66 66 66 66 5d 2f 67 2c 64 3d 7b 22 5c 75 30 30 30 38 22 3a 22 5c 5c 62 22 2c 22 5c 74 22 3a 22 5c 5c 74 22 Data Ascii: ":":")+i);return i=0===r.length?"{}":g?"{"+r.join(",")+""+e+"}":"{"+r.join(",")+"}"}}function d(a){var b=/[\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,d={"\u0008":"\\b","\t":"\\t"
2024-04-16 17:43:24 UTC	1255	IN	Data Raw: 28 61 29 29 72 65 74 75 72 6e 20 61 3b 67 28 22 42 61 64 20 6e 75 6d 62 65 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 61 26 26 0a 61 21 3d 3d 69 26 26 67 28 22 45 78 70 65 63 74 65 64 20 27 22 2b 61 2b 22 27 20 69 6e 73 74 65 61 64 20 6f 66 20 27 22 2b 69 2b 22 27 22 29 3b 69 3d 72 2e 63 68 61 72 41 74 28 70 29 3b 70 2b 3d 31 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 61 3d 6e 65 77 20 53 79 6e 74 61 78 45 72 72 6f 72 28 61 29 3b 61 2e 76 64 3d 70 3b 61 2e 74 65 78 74 3d 72 3b 74 68 72 6f 77 20 61 3b 7d 76 61 72 20 70 2c 69 2c 65 3d 7b 27 22 27 3a 27 22 27 2c 22 5c 5c 22 3a 22 5c 5c 22 2c 22 2f 22 3a 22 2f 22 2c 62 3a 22 5c 75 30 30 30 38 22 2c 66 3a 22 5c 75 30 30 30 63 22 2c 6e 3a 22 5c 6e 22 2c 72 3a 22 5c 72 22 Data Ascii: (a))return a;g("Bad number")}function h(a){a&&a!==i&&g("Expected '"+a+"' instead of '"+i+"'");i=r.charAt(p);p+=1;return i}function g(a){a=new SyntaxError(a);a.vd=p;a.text=r;throw a;}var p,i,e={'"':'"',"\\":"\\","/":"/",b:"\u0008",f:"\u000c",n:"\n",r:"\r"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49945	35.163.210.43	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1501	OUT	GET /f HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:25 UTC	532	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Type: application/json Content-Length: 59 Connection: close Server: DS-Arya Expires: Wed, 17 Apr 2024 17:43:24 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: https://support.docusign.com Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Vary: Origin Set-Cookie: ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-16 17:43:25 UTC	59	IN	Data Raw: 7b 22 44 53 5f 41 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 44 53 5f 41 5f 43 22 3a 22 22 7d Data Ascii: {"DS_A":"305622db-cab4-46c0-8a17-15a582e0ed4c","DS_A_C":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49946	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	560	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:24 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:25 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49952	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	622	OUT	GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17003 Connection: close Server: istio-envoy Date: Thu, 28 Dec 2023 13:37:40 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "65e5c965272e021ae33ff8bc39565ef5" x-amz-server-side-encryption: AES256 x-amz-version-id: 9XBjxFxayKbabIF2yelSQk8jdbs.8_S0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1ad0e11a95c9a5b3f4d80fde7d23fea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: bnIQJcRMy699l0j_m4f0KOQM7JD6JF6UEEHJLiTspQ-SjghpWcIX7w== Age: 9518744
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 5d 2c 7b 22 32 53 56 64 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 73 41 62 73 6f 6c 75 74 65 55 52 4c 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 5b 61 2d 7a 5d 5b 61 2d 7a 5c 64 5c 2b 5c 2d 5c 2e 5d 2a 3a 29 3f 5c 2f 5c 2f 2f 69 2e 74 65 73 74 28 65 29 7d 7d 2c 22 35 6f 4d 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 65 55 52 4c 73 28 65 2c 74 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){retur
2024-04-16 17:43:24 UTC	1612	IN	Data Raw: 65 29 7d 2c 69 73 46 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 20 69 73 46 69 6c 65 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 6f 62 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 69 73 46 75 6e 63 74 69 6f 6e 2c 69 73 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 20 69 73 53 74 72 65 61 6d 28 65 29 7b 72 65 74 75 72 6e 20 69 73 4f 62 6a 65 63 74 28 65 29 26 26 69 73 46 75 6e 63 74 69 6f 6e 28 65 2e 70 69 70 65 29 7d 2c 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 69 73 55 52 4c 53 65 61 72 63 Data Ascii: e)},isFile:function isFile(e){return"[object File]"===a.call(e)},isBlob:function isBlob(e){return"[object Blob]"===a.call(e)},isFunction:isFunction,isStream:function isStream(e){return isObject(e)&&isFunction(e.pipe)},isURLSearchParams:function isURLSearc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49953	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1031	OUT	GET /core/assets/js/8.10f90e75.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 83519 Connection: close Server: istio-envoy Date: Tue, 26 Mar 2024 18:05:07 GMT Last-Modified: Tue, 26 Mar 2024 14:12:59 GMT ETag: "a8ceac2e3bd2c128d8f2e2f1b0ef0290" x-amz-server-side-encryption: AES256 x-amz-version-id: eF3QYn.XJzBI9KjaY4UJ5tbNakOAL7P5 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 51 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 383ad280f1e2a4497aecb7ee8d8e9144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: -N35B8GRxzOuPy7dlzNQP4xZiRq5zF5wQECvf2o3rQRV91zt2dzlSA== Age: 1813097
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 22 2b 2f 4a 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 2d 31 2c 61 3d 22 50 52 45 2d 52 45 4e 44 45 52 22 7d 2c 22 2b 4b 62 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 59 57 68 70 22 29 2c 61 3d 6e 28 22 53 30 69 67 22 29 2c 6f 3d 6e 28 22 45 52 6b 50 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 67 64 70 72 2d 61 63 74 69 6f 6e 2d 2d 74 65 78 74 22 7d 2c 63 29 29 29 29 7d 2c 6b 3d 28 6e 28 22 73 5a 42 74 22 29 2c 66 75 6e 63 74 69 6f 6e 20 44 65 63 6c 69 6e 65 64 43 6f 6e 73 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6e 73 65 6e 74 4d 65 73 73 61 67 65 2c 6e 3d 65 2e 63 6f 70 79 53 74 79 6c 65 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 3b 72 65 74 75 72 6e 20 45 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 67 64 70 72 2d 63 6f 6e 73 65 6e 74 2d 2d 63 6f 70 79 22 2c 73 74 79 6c 65 3a 72 2c 74 61 62 49 6e 64 65 78 3a 30 7d 2c 74 29 7d 29 2c 53 3d 66 75 6e 63 74 69 6f 6e 20 49 6e 71 75 Data Ascii: {className:"drift-gdpr-action--text"},c))))},k=(n("sZBt"),function DeclinedConsent(e){var t=e.consentMessage,n=e.copyStyle,r=void 0===n?{}:n;return E.a.createElement("p",{className:"drift-widget-gdpr-consent--copy",style:r,tabIndex:0},t)}),S=function Inqu
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 20 30 3d 3d 3d 69 7c 7c 69 3b 72 65 74 75 72 6e 20 72 2e 70 2e 70 6f 73 74 28 22 71 75 61 6c 69 66 79 2f 22 2e 63 6f 6e 63 61 74 28 73 3f 22 77 69 74 68 22 3a 22 77 69 74 68 6f 75 74 22 2c 22 5f 6d 61 70 70 69 6e 67 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 7b 63 61 6d 70 61 69 67 6e 49 64 73 3a 6e 2c 6d 61 70 70 69 6e 67 49 64 3a 63 2c 66 6f 72 6d 44 61 74 61 3a 61 2c 63 6c 69 65 6e 74 53 69 64 65 43 6f 6e 74 65 78 74 3a 6f 7d 29 7d 7d 2c 53 57 51 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 63 6f 6e 73 74 20 72 3d 7b Data Ascii: 0===i\|\|i;return r.p.post("qualify/".concat(s?"with":"without","_mapping/").concat(t),{campaignIds:n,mappingId:c,formData:a,clientSideContext:o})}},SWQ0:function(e,t,n){"use strict";n.d(t,"b",function(){return r}),n.d(t,"a",function(){return a});const r={
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 6e 48 69 73 74 6f 72 79 54 6f 67 67 6c 65 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 62 29 28 29 2c 74 3d 4f 62 6a 65 63 74 28 63 2e 63 29 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 2e 67 29 28 65 2e 65 6d 62 65 64 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 48 69 73 74 6f 72 79 45 6e 61 62 6c 65 64 22 2c 21 30 29 7d 29 2c 6e 3d 4f 62 6a 65 63 74 28 63 2e 63 29 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 7d 29 2c 69 3d 4f 62 6a 65 63 74 28 63 2e 63 29 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 76 69 65 77 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 48 69 73 74 6f 72 79 4f 70 65 6e 7d 29 Data Ascii: nHistoryToggle(){var e=Object(c.b)(),t=Object(c.c)(function(e){return Object(r.g)(e.embed,"conversationHistoryEnabled",!0)}),n=Object(c.c)(function(e){return e.conversations.conversations}),i=Object(c.c)(function(e){return e.view.conversationHistoryOpen})
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 29 7d 69 66 28 68 29 7b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 69 2e 61 29 28 7b 74 6f 70 69 63 3a 22 72 65 64 69 72 65 63 74 2d 74 6f 2d 75 72 6c 22 2c 6d 65 73 73 61 67 65 3a 7b 75 72 6c 3a 68 7d 7d 29 7d 3b 6e 3f 6e 2e 74 68 65 6e 28 75 29 3a 75 28 29 7d 7d 2c 5b 65 2c 45 2c 68 2c 74 2e 69 64 2c 4f 5d 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 43 68 61 74 28 29 7b 62 28 21 30 29 2c 70 26 26 43 28 29 7d 2c 5b 70 2c 43 5d 29 7d 7d 2c 71 53 41 6a 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f Data Ascii: )}if(h){var u=function redirect(){return Object(i.a)({topic:"redirect-to-url",message:{url:h}})};n?n.then(u):u()}},[e,E,h,t.id,O]);return Object(d.useCallback)(function closeChat(){b(!0),p&&C()},[p,C])}},qSAj:function(e,t,n){"use strict";n.d(t,"a",functio
2024-04-16 17:43:25 UTC	2592	IN	Data Raw: 69 67 68 74 3a 22 34 31 2e 33 37 36 22 2c 72 78 3a 22 31 30 22 7d 29 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 65 6c 6c 69 70 73 65 22 2c 7b 6f 70 61 63 69 74 79 3a 22 2e 35 22 2c 63 78 3a 22 31 30 31 2e 31 31 32 22 2c 63 79 3a 22 31 34 35 2e 33 30 31 22 2c 72 78 3a 22 31 34 2e 38 38 36 22 2c 72 79 3a 22 31 34 2e 38 39 35 22 7d 29 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 65 6c 6c 69 70 73 65 22 2c 7b 6f 70 61 63 69 74 79 3a 22 2e 35 22 2c 63 78 3a 22 31 37 32 2e 32 33 34 22 2c 63 79 3a 22 31 34 35 2e 33 30 31 22 2c 72 78 3a 22 31 34 2e 38 38 36 22 2c 72 79 3a 22 31 34 2e 38 39 35 22 7d 29 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 65 6c 6c 69 70 73 65 22 2c 7b 66 69 6c 6c 3a 22 23 30 30 30 22 2c 6f 70 Data Ascii: ight:"41.376",rx:"10"}),s.a.createElement("ellipse",{opacity:".5",cx:"101.112",cy:"145.301",rx:"14.886",ry:"14.895"}),s.a.createElement("ellipse",{opacity:".5",cx:"172.234",cy:"145.301",rx:"14.886",ry:"14.895"}),s.a.createElement("ellipse",{fill:"#000",op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49954	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/16.9ef4a519.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:24 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94897 Connection: close Server: istio-envoy Date: Fri, 22 Mar 2024 05:03:22 GMT Last-Modified: Fri, 22 Mar 2024 04:57:22 GMT ETag: "b32ccc4557ebaeaebc835c96712693c2" x-amz-server-side-encryption: AES256 x-amz-version-id: 5E7jxxxfATsk4OvK3cC2sK7jaXMjyNTX Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1ad0e11a95c9a5b3f4d80fde7d23fea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: PzUvf3lx-8TifJq804zStpWc3JtoDdQ0EgKluPW9gWb5xMQuh9Om-w== Age: 2205602
2024-04-16 17:43:24 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 5d 2c 7b 22 2b 52 79 39 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 69 3d 6e 28 22 6e 66 62 41 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 75 3d 6e 28 22 53 73 5a 4e 22 29 2c 73 3d 6e 28 22 42 38 4a 59 22 29 2c 64 3d 6e 28 22 48 76 68 67 22 29 2c 6c 3d 6e 28 22 53 46 6f 61 22 29 2c 62 3d 6e 28 22 54 44 55 45 22 29 2c 66 3d 6e 28 22 64 61 34 4c 22 29 2c 76 3d 6e 28 22 68 6d 38 62 22 29 2c 70 3d 6e 28 22 4c 56 63 58 22 29 2c 4f 3d 6e 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n(
2024-04-16 17:43:24 UTC	16384	IN	Data Raw: 65 61 64 41 67 65 6e 74 4d 65 73 73 61 67 65 73 5b 69 2e 62 5d 3d 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 7d 29 2c 6e 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5b 69 2e 62 5d 3d 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 7b 69 64 3a 69 2e 62 2c 75 70 64 61 74 65 64 41 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 6c 61 73 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 6c 61 73 74 41 67 65 6e 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 75 6e 72 65 61 64 4d 65 73 73 61 67 65 73 3a 73 2e 6c 65 6e 67 74 68 7d 2c 6e 2e 72 65 73 75 6d 65 46 6c 6f 77 43 6f 6e 74 65 78 74 3d 6f 2c 6e 2e 61 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 3d 69 2e 62 2c 6e 2e 65 78 63 Data Ascii: eadAgentMessages[i.b]=s.map(function(e){return e.id}),n.conversations[i.b]={conversation:{id:i.b,updatedAt:Date.now()},lastMessage:Object(d.a)(s),lastAgentMessage:Object(d.a)(s),unreadMessages:s.length},n.resumeFlowContext=o,n.activeConversation=i.b,n.exc
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 69 66 28 74 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 6d 65 73 73 61 67 65 22 5d 2c 22 22 29 2c 6e 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 61 75 74 6f 6d 61 74 69 63 53 65 6e 64 65 72 22 5d 2c 21 31 29 2c 61 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 64 22 5d 2c 6e 75 6c 6c 29 2c 72 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 6e 66 6f 22 5d 2c 22 22 29 2c 63 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 63 74 61 22 2c 22 43 74 61 54 79 70 65 22 5d 2c 6e 75 6c 6c 29 2c 69 3d 21 21 63 26 26 63 3d 3d 3d 6b 2e 61 2e 53 43 48 45 44 55 4c 45 5f 4d 45 45 54 49 4e 47 26 26 21 61 2c 6f 3d 6e 75 6c 6c 21 3d 3d 74 2e 6d 61 74 63 68 28 46 29 2c 21 28 6f 7c 7c 6e 7c 7c 69 29 29 7b 75 2e Data Ascii: if(t=Object(P.a)(e,["message"],""),n=Object(P.a)(e,["automaticSender"],!1),a=Object(P.a)(e,["senderId"],null),r=Object(P.a)(e,["senderInfo"],""),c=Object(P.a)(e,["cta","CtaType"],null),i=!!c&&c===k.a.SCHEDULE_MEETING&&!a,o=null!==t.match(F),!(o\|\|n\|\|i)){u.
2024-04-16 17:43:25 UTC	15801	IN	Data Raw: 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 63 2c 69 2c 6f 2c 75 2c 73 3b 72 65 74 75 72 6e 20 72 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 72 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 72 2e 70 72 65 76 3d 72 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 69 64 2c 6e 3d 65 2e 65 6d 61 69 6c 2c 61 3d 65 2e 75 73 65 72 4a 77 74 2c 63 3d 65 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 2c 69 3d 65 2e 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 52 65 71 75 69 72 65 64 53 74 61 74 75 73 2c 6f 3d 7b 7d 2c 75 3d 4f 62 6a 65 63 74 28 6c 2e 62 29 28 69 29 26 26 21 61 2c 73 3d 59 28 74 Data Ascii: e=Object(c.a)(r.a.mark(function _callee7(e){var t,n,a,c,i,o,u,s;return r.a.wrap(function _callee7$(r){for(;;)switch(r.prev=r.next){case 0:return t=e.id,n=e.email,a=e.userJwt,c=e.anonymousId,i=e.signedIdentityRequiredStatus,o={},u=Object(l.b)(i)&&!a,s=Y(t
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 44 53 22 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 3d 69 2e 73 65 6e 74 2c 63 3d 6e 2e 64 61 74 61 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 7b 7d 3a 63 2c 69 2e 6e 65 78 74 3d 37 2c 76 2e 62 2e 73 65 74 28 22 41 4c 57 41 59 53 5f 53 45 4e 44 5f 49 44 53 22 2c 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 7b 7d 2c 6f 29 2c 7b 7d 2c 4f 62 6a 65 63 74 28 61 2e 61 29 28 7b 7d 2c 65 2c 74 29 29 29 3b 63 61 73 65 20 37 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 69 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 33 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 53 65 6e 64 49 64 54 6f 53 74 6f 72 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: DS");case 2:return n=i.sent,c=n.data,o=void 0===c?{}:c,i.next=7,v.b.set("ALWAYS_SEND_IDS",Object(r.a)(Object(r.a)({},o),{},Object(a.a)({},e,t)));case 7:case"end":return i.stop()}},_callee3)}));return function addSendIdToStore(t,n){return e.apply(this,argu
2024-04-16 17:43:25 UTC	14553	IN	Data Raw: 61 73 65 20 31 30 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 6e 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 36 2c 6e 75 6c 6c 2c 5b 5b 30 2c 37 5d 5d 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 6d 61 72 6b 4d 65 73 73 61 67 65 41 73 52 65 61 64 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 6d 61 72 6b 41 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 41 73 52 65 61 64 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 79 2e 61 29 28 4f 62 6a 65 63 74 28 75 2e 62 29 28 29 29 3b 4c 28 65 29 7d 2c 4c 3d 66 75 6e 63 74 69 6f 6e 20 6d 61 72 6b 43 6f 6e 76 65 72 73 61 74 69 6f 6e 41 73 52 65 61 64 28 65 29 7b 69 66 Data Ascii: ase 10:case"end":return n.stop()}},_callee6,null,[[0,7]])}));return function markMessageAsRead(t,n){return e.apply(this,arguments)}}(),w=function markActiveConversationAsRead(){var e=Object(y.a)(Object(u.b)());L(e)},L=function markConversationAsRead(e){if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49955	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/24.f2a14bf3.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 52313 Connection: close Server: istio-envoy Date: Thu, 04 Apr 2024 19:46:24 GMT Last-Modified: Thu, 04 Apr 2024 18:49:23 GMT ETag: "eeb141d15a5542cc12f6697498a4dae4" x-amz-server-side-encryption: AES256 x-amz-version-id: h1TpcLqbPY4hV6zMUp0mzajfkh8wVGak Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd5ab138e49a090fd3089313c9c8105c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: MXcoW6nCen1y1yZr0A0PJerhPUk2QGAnqeGymy19OdEy6rz1zneQbg== Age: 1029420
2024-04-16 17:43:25 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 5d 2c 7b 22 2b 66 31 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 71 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 2c 6e 2e 64 28 74 2c 22 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 2c 6e 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 2c 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 52 65 63 65 69 76 65 4d 65 73 73 61 67 65 53 65 6e 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 65 2e 61 63 74 69 6f 6e 2c 61 3d 65 2e 64 72 61 66 74 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 28 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 72 2e 70 61 79 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 65 73 73 61 67 65 29 7c 7c 7b 7d 29 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 6c 61 74 65 64 43 61 6d 70 61 69 67 6e 49 64 29 72 65 74 75 72 6e 20 45 28 7b 61 63 74 69 6f 6e 3a 4f 62 6a 65 63 74 28 76 2e 63 29 28 22 6d 65 65 74 69 6e 67 5f 73 63 68 65 64 75 6c 65 72 5f 72 74 74 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 2c 64 72 61 66 Data Ascii: nction handleReceiveMessageSent(e){var t,n,r=e.action,a=e.draft;if(null===(n=((null===(t=r.payload)\|\|void 0===t?void 0:t.message)\|\|{}).attributes)\|\|void 0===n?void 0:n.relatedCampaignId)return E({action:Object(v.c)("meeting_scheduler_rtt",Date.now()),draf
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 73 4d 65 65 74 69 6e 67 53 63 68 65 64 75 6c 65 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 74 2e 6f 66 66 65 72 53 63 68 65 64 75 6c 65 2c 72 3d 74 2e 70 72 65 73 65 6e 74 53 63 68 65 64 75 6c 65 2c 61 3d 74 2e 73 63 68 65 64 75 6c 65 4d 65 65 74 69 6e 67 46 6c 6f 77 2c 63 3d 74 2e 61 70 70 6f 69 6e 74 6d 65 6e 74 49 6e 66 6f 3b 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 6e 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 72 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 61 29 7c 7c 21 4f 62 6a 65 63 74 28 62 2e 61 29 28 63 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 20 69 73 53 4d 53 4e 75 6d 62 65 72 52 65 71 75 65 73 74 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 Data Ascii: sMeetingScheduleMessage(e){var t=e.attributes,n=t.offerSchedule,r=t.presentSchedule,a=t.scheduleMeetingFlow,c=t.appointmentInfo;return!Object(b.a)(n)\|\|!Object(b.a)(r)\|\|!Object(b.a)(a)\|\|!Object(b.a)(c)},S=function isSMSNumberRequest(e){return e.contentType
2024-04-16 17:43:25 UTC	4154	IN	Data Raw: 72 20 65 3b 72 65 74 75 72 6e 20 61 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 33 24 28 74 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 32 2c 4f 62 6a 65 63 74 28 6c 2e 64 29 28 73 2e 67 29 3b 63 61 73 65 20 32 3a 69 66 28 21 28 65 3d 74 2e 73 65 6e 74 29 29 7b 74 2e 6e 65 78 74 3d 31 30 3b 62 72 65 61 6b 7d 69 66 28 21 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 29 29 7b 74 2e 6e 65 78 74 3d 39 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 37 2c 6a 28 29 3b 63 61 73 65 20 37 3a 74 2e 6e 65 78 74 3d 31 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 Data Ascii: r e;return a.a.wrap(function _callee3$(t){for(;;)switch(t.prev=t.next){case 0:return t.next=2,Object(l.d)(s.g);case 2:if(!(e=t.sent)){t.next=10;break}if(!Object(f.b)(e)){t.next=9;break}return t.next=7,j();case 7:t.next=10;break;case 9:return t.abrupt("ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49956	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:24 UTC	1032	OUT	GET /core/assets/js/17.aa20860d.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41495 Connection: close Server: istio-envoy Date: Thu, 04 Apr 2024 19:52:59 GMT Last-Modified: Thu, 04 Apr 2024 18:49:23 GMT ETag: "a013d30ad611b4379ce2caa016620cbf" x-amz-server-side-encryption: AES256 x-amz-version-id: UqtKlP1fgnBUCni0MHDQ7kjXDpJQX9r9 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 42 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19ce5400ce3c3ceb334a546c0524d848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: Fxd9wrRQPh-whF5q65HjTjUl15bk5GTXdCUlwP8UtmhZsOeXdGBZbw== Age: 1029025
2024-04-16 17:43:25 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 5d 2c 7b 22 2b 44 35 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 48 41 54 3a 22 63 68 61 74 22 2c 55 53 45 52 3a 22 75 73 65 72 22 2c 50 52 45 53 45 4e 43 45 3a 22 70 72 65 73 65 6e 63 65 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",
2024-04-16 17:43:25 UTC	16384	IN	Data Raw: 65 55 72 6c 22 5d 7d 29 2c 65 7d 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 41 6e 64 41 64 64 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 6d 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 28 66 2e 6d 29 28 74 29 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 3d 65 2c 72 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 72 3e 3d 30 3b 72 2d 2d 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 61 3d 27 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 6b 65 79 3d 22 27 2e 63 6f 6e 63 61 74 28 6f 2e 74 65 78 74 2b 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 63 3d 27 3c 61 20 68 72 65 66 3d 22 27 2e 63 6f 6e 63 61 74 28 6f 2e 75 72 6c 2c 27 22 20 27 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 3e 27 29 Data Ascii: eUrl"]}),e}},A=function parseAndAddLinks(e){var t=m(e);if(Object(f.m)(t))return e;for(var n=e,r=t.length-1;r>=0;r--){var o=t[r],a='target="_blank" rel="noopener noreferrer" key="'.concat(o.text+r.toString()),c='<a href="'.concat(o.url,'" ').concat(a,'">')
2024-04-16 17:43:25 UTC	9720	IN	Data Raw: 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 4a 7a 46 73 22 2c 33 29 29 3b 63 61 73 65 22 6a 61 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 36 38 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 4e 36 6f 5a 22 2c 33 29 29 3b 63 61 73 65 22 6b 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 36 39 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 45 41 33 6c 22 2c 33 29 29 3b 63 61 73 65 22 6e 62 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 30 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 2f 70 38 46 22 2c 33 29 29 3b 63 61 73 65 22 6e 6c 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 31 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 78 57 30 63 22 2c 33 29 29 3b 63 61 73 65 22 70 6c 22 3a 72 65 74 75 72 Data Ascii: n.t.bind(null,"JzFs",3));case"ja":return n.e(68).then(n.t.bind(null,"N6oZ",3));case"ko":return n.e(69).then(n.t.bind(null,"EA3l",3));case"nb":return n.e(70).then(n.t.bind(null,"/p8F",3));case"nl":return n.e(71).then(n.t.bind(null,"xW0c",3));case"pl":retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49958	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	610	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 497 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	497	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 6f 2d 31 39 44 46 42 4d 2d 6e 61 31 22 2c 22 55 73 65 72 49 64 22 3a 22 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 3f 6c 61 6e 67 75 61 67 65 3d 65 6e 5f 55 53 26 72 73 63 5f 33 30 31 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 3f 6c 61 6e 67 75 61 67 65 3d 2d 2d 62 6c 6f 63 6b 65 64 2d 2d 26 72 73 63 5f 33 30 31 22 2c 22 57 69 64 74 68 22 3a 31 32 38 30 2c 22 48 65 69 67 68 74 22 3a Data Ascii: {"OrgId":"o-19DFBM-na1","UserId":"eba1c674-a905-448c-ba04-5b4b61191395","Url":"https://support.docusign.com/s/contactSupport?language=en_US&rsc_301","Base":"https://support.docusign.com/s/contactSupport?language=--blocked--&rsc_301","Width":1280,"Height":
2024-04-16 17:43:25 UTC	323	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:25 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:25 UTC	932	IN	Data Raw: 31 66 31 34 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 1f14{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 63 6f 6d 6d 2d 74 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 2d 68 6f 73 74 20 61 2e 63 6f 6d 6d 2d 74 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 6c 69 6e 6b 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5b 68 72 65 66 5d 20 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 2d 6d 65 6e 75 2d 69 74 65 6d 2d 75 6e 69 66 69 65 64 2d 6c 61 79 6f 75 74 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e 69 66 69 65 64 4c 61 79 6f 75 74 5f 74 69 6c Data Ascii: comm-tile-menu__item.community_navigation-tileMenuItem_tileMenuItem-host a.comm-tile-menu__item-link.community_navigation-tileMenuItem_tileMenuItem[href] community_navigation-tile-menu-item-unified-layout.community_navigation-tileMenuItemUnifiedLayout_til
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 65 6d 65 4e 61 76 2d 61 6c 69 67 6e 2d 6c 65 66 74 2e 76 69 73 69 62 6c 65 2d 6c 69 6e 6b 73 20 6c 69 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2e 6d 61 69 6e 4e 61 76 49 74 65 6d 20 61 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2d 6c 69 6e 6b 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2d 6c 69 6e 6b 2d 2d 61 63 74 69 76 65 2e 6a 73 2d 74 6f 70 2d 6c 65 76 65 6c 2d 6d 65 6e 75 2d 69 74 65 6d 2e 6c 69 6e 6b 42 74 6e 5b 68 72 65 66 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 33 7d 2c 7b Data Ascii: emeNav-align-left.visible-links li.comm-navigation__menu-item.comm-navigation__top-level-item.mainNavItem a.comm-navigation__top-level-item-link.comm-navigation__top-level-item-link--active.js-top-level-menu-item.linkBtn[href]","Consent":false,"Type":3},{
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 6d 65 55 74 69 6c 73 43 6f 6e 74 61 69 6e 65 72 20 64 69 76 2e 74 68 65 6d 65 50 72 6f 66 69 6c 65 4d 65 6e 75 2e 74 68 65 6d 65 55 74 69 6c 20 64 69 76 20 64 69 76 20 64 69 76 20 63 6f 6d 6d 75 6e 69 74 79 5f 75 73 65 72 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 2e 63 6f 6d 6d 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 20 64 69 76 20 64 69 76 20 75 6c 5b 72 6f 6c 65 3d 5c 22 6d 65 6e 75 5c 22 5d 20 6c 69 20 61 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 6f 76 65 72 5b 72 6f 6c 65 3d 5c 22 6d 65 6e 75 69 74 65 6d 5c 22 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 33 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 66 73 2d 65 78 63 6c 75 64 65 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 Data Ascii: meUtilsContainer div.themeProfileMenu.themeUtil div div div community_user-user-profile-menu.comm-user-profile-menu div div ul[role=\"menu\"] li a.menu-item-hover[role=\"menuitem\"]","Consent":false,"Type":3},{"Selector":".fs-exclude","Consent":false,"Typ
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 55 73 65 42 75 66 66 65 72 65 64 50 4f 22 3a 74 72 75 65 2c 22 55 73 65 43 6c 69 65 6e 74 53 69 64 65 49 64 22 3a 74 72 75 65 2c 22 55 73 65 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 55 73 65 4c 5a 45 6e 63 6f 64 69 6e 67 22 3a 74 72 75 65 2c 22 55 73 65 53 74 61 74 65 6c 65 73 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 55 73 65 53 74 61 74 69 63 53 65 74 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 57 68 69 74 65 6c 69 73 74 45 6c 65 6d 65 6e 74 73 22 3a 74 72 75 65 7d 2c 22 4f 72 67 53 65 74 74 69 6e 67 73 22 3a 7b 22 41 74 74 72 69 62 75 74 65 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 7b 22 54 61 72 67 65 74 22 3a 30 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 73 72 63 22 2c 22 41 63 74 69 6f 6e 22 3a 32 7d 2c 7b 22 54 61 72 67 65 Data Ascii: UseBufferedPO":true,"UseClientSideId":true,"UseCompression":true,"UseLZEncoding":true,"UseStatelessConsent":true,"UseStaticSettings":true,"WhitelistElements":true},"OrgSettings":{"AttributeBlocklist":[{"Target":0,"Tag":"*","Name":"src","Action":2},{"Targe
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 6f 70 74 69 6f 6e 22 2c 22 4e 61 6d 65 22 3a 22 6c 61 62 65 6c 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 2d 63 6f 6d 2e 61 67 69 6c 65 62 69 74 73 2e 6f 6e 65 70 61 73 73 77 6f 72 64 2e 69 6e 69 74 69 61 6c 2d 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 2d 6b 77 63 61 63 68 65 64 76 61 6c 75 65 22 2c 22 41 Data Ascii: n":1},{"Target":2,"Tag":"option","Name":"label","Action":1},{"Target":2,"Tag":"","Name":"placeholder","Action":1},{"Target":1,"Tag":"","Name":"data-com.agilebits.onepassword.initial-value","Action":0},{"Target":1,"Tag":"*","Name":"data-kwcachedvalue","A
2024-04-16 17:43:25 UTC	757	IN	Data Raw: 65 6c 74 61 2d 62 61 73 65 22 2c 22 65 74 61 67 22 2c 22 65 78 70 69 72 65 73 22 2c 22 69 6d 22 2c 22 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 22 2c 22 6c 69 6e 6b 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 2c 22 70 65 72 6d 61 6e 65 6e 74 22 2c 22 70 33 70 22 2c 22 70 72 61 67 6d 61 22 2c 22 70 72 6f 78 79 2d 61 75 74 68 65 6e 74 69 63 61 74 65 22 2c 22 70 75 62 6c 69 63 2d 6b 65 79 2d 70 69 6e 73 22 2c 22 72 65 74 72 79 2d 61 66 74 65 72 22 2c 22 70 65 72 6d 61 6e 65 6e 74 22 2c 22 73 65 72 76 65 72 22 2c 22 73 74 61 74 75 73 22 2c 22 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 22 2c 22 74 72 61 69 6c 65 72 22 2c 22 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 74 6b 22 2c 22 75 70 67 72 61 64 65 22 2c 22 76 61 72 79 Data Ascii: elta-base","etag","expires","im","last-modified","link","location","permanent","p3p","pragma","proxy-authenticate","public-key-pins","retry-after","permanent","server","status","strict-transport-security","trailer","transfer-encoding","tk","upgrade","vary
2024-04-16 17:43:25 UTC	371	IN	Data Raw: 31 36 37 0d 0a 53 74 72 69 6e 67 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 22 28 70 61 73 73 77 6f 72 64 2e 2a 3d 29 28 2e 2a 29 22 2c 22 28 74 6f 6b 65 6e 2e 2a 3d 29 28 2e 2a 29 22 2c 22 5e 28 63 6f 64 65 3d 29 28 2e 2a 29 22 2c 22 5e 28 6a 77 74 3d 29 28 2e 2a 29 22 5d 7d 2c 22 42 65 68 61 76 69 6f 72 53 69 67 6e 61 6c 53 65 74 74 69 6e 67 73 22 3a 7b 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 6e 75 6c 6c 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 Data Ascii: 167StringBlocklist":["(password.=)(.)","(token.=)(.)","^(code=)(.)","^(jwt=)(.)"]},"BehaviorSignalSettings":{"ElementBlocks":null},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49959	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	893	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289404216&PageStart=1713289396931&PrevBundleTime=1713289404017&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	314	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 90 d1 4a c3 30 14 86 5f 25 9e ab 0d 8e 69 d2 74 6d d3 89 30 e6 50 98 53 61 93 21 b2 8b ae cd d6 b0 ac ad 6d b7 aa 63 ef 6e 06 5e 4c 50 90 e4 ea 3f df 4f be 9c 03 4c d5 1b 44 02 61 9e a9 1c 22 9f b3 00 61 b4 6f 6a 88 5e 0f 30 d6 79 0a 11 67 0c 61 50 ad 4f 19 ec 75 ad 97 46 c1 e2 bc 72 c4 5f d9 4c a7 a9 45 fe 40 a5 3c 23 9b a6 ac 23 c7 69 db 96 a6 45 b2 ab f5 3a a7 49 b1 75 ca 4a ef e3 e4 03 f0 1f 08 77 7d 81 d2 7e 80 bb 21 43 ce 5c 0f 81 53 41 99 6d db 7b 75 71 f3 38 9c bd 3c 8d 48 d6 6c cd 35 60 c8 84 77 9a f0 80 0b 37 94 42 fa 52 70 04 95 5f 3e 4f d1 fa 22 4c 8a 4f 6d 4c ec f4 28 23 9d b9 b5 2e da 9a 3c cc 08 67 94 f5 89 0d 7c af 4f de 7d af 4b 06 65 69 d4 5c 2d c7 ba 71 7a 22 a0 c2 27 9d f1 dd 6c 72 8f c4 e8 8d 22 b7 2a Data Ascii: J0_%itm0PSa!mcn^LP?OLDa"aoj^0ygaPOuFr_LE@<##iE:IuJw}~!C\SAm{uq8<Hl5`w7BRp_>O"LOmL(#.<g\|O}Kei\-qz"'lr"*
2024-04-16 17:43:25 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:25 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 35 33 39 37 7d 0a Data Ascii: {"BundleTime":1713289405397}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49960	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289404208&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 36 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":3,"When":6107,"Evts":[{"Kind":100,"Args":["visible"],"When":6107},{"Kind":100,"Args":["hidden"],"When":6107},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49961	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289404209&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 31 32 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":4,"When":6128,"Evts":[{"Kind":100,"Args":["visible"],"When":6128},{"Kind":100,"Args":["hidden"],"When":6128},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49963	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289404211&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 14838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	14838	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 31 34 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 32 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 33 31 33 33 38 2e 32 38 31 32 35 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 36 34 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 39 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 34 30 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e Data Ascii: {"Seq":5,"When":6140,"Evts":[{"Kind":42,"Args":[1263,31338.28125],"When":6140},{"Kind":10,"Args":[3,0,0],"When":6140},{"Kind":64,"Args":[3,0,0],"When":6140},{"Kind":19,"Args":[1263,907,1280,907],"When":6140},{"Kind":40,"Args":[1263,907],"When":6140},{"Kin
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49962	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289404212&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49965	35.201.112.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	372	OUT	GET /s/settings/o-19DFBM-na1/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	935	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqWvaldQuvfGORliCKa32YwPr2iKJAKf41Lpm3W2YQS8cZdgTc7aftWhSRZSPTE6cu9XjM x-goog-generation: 1713187574287644 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1891 Content-Encoding: gzip x-goog-hash: crc32c=cvTREg== x-goog-hash: md5=3eqikxmMCOU4HcgpSdV/8w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1891 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Server: UploadServer Date: Tue, 16 Apr 2024 17:43:25 GMT Expires: Tue, 16 Apr 2024 17:58:25 GMT Cache-Control: public,max-age=900,no-transform Last-Modified: Tue, 16 Apr 2024 17:41:14 GMT ETag: "ddeaa293198c08e5381dc82949d57ff3" Content-Type: application/json Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:25 UTC	320	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff ec 58 5f 6f db 38 12 7f bf 4f 11 68 5f ba 85 29 34 c9 de 61 61 a0 0f 49 ba 87 14 9b a6 be 26 41 1f d2 ac 31 26 47 12 63 8a e4 91 94 ff a0 c8 77 3f 90 94 65 d9 96 63 79 af c0 01 87 7d 68 63 ce cc 6f fe 93 1c f1 7b 72 f1 0c 8b af e0 68 81 36 19 3e 3e 0d 92 4b 2c 60 c6 95 b9 e3 b9 04 71 87 ce 71 99 db 64 f8 3d f9 4d 60 89 d2 5d 0a 45 a7 36 19 ca 4a 88 97 41 f2 41 95 c0 65 10 68 7e 3e 26 b6 d2 5a 19 97 32 45 2b cb 73 99 52 55 26 4f 83 e4 b3 14 cb df a5 9a cb 46 36 03 61 f1 65 b0 ad fd f1 7b 72 87 02 a9 53 26 19 26 5c ea ca 3d ba a5 c6 f7 1a ac 9d 2b c3 9e 92 41 72 a5 a4 45 e9 6a 25 83 e4 7e a9 31 19 9e be 0c f6 81 0b ce 18 ca fe d0 47 a8 9c a2 aa d4 02 1d fe f1 9e 52 72 a4 d9 bd d2 67 5b d2 0e 17 0e 0c 42 6f 80 0d 3f 7b 8b 3f 52 Data Ascii: X_o8Oh_)4aaI&A1&Gcw?ecy}hco{rh6>>K,`qqd=M`]E6JAAeh~>&Z2E+sRU&OF6ae{rS&&\=+ArEj%~1GRrg[Bo?{?R
2024-04-16 17:43:25 UTC	1255	IN	Data Raw: 52 55 ee ce 81 71 68 52 b7 43 fa 6a 40 6b 34 27 de ca 44 b1 65 ca ed 08 72 fc ca 99 2b fe c9 17 b5 b1 c0 6e 14 5f c5 0c 5e 18 84 c0 a0 aa 2c 49 9d 56 52 04 5f 22 4d 04 4b 84 2a 51 95 d2 8b 86 7f 9e 55 49 ee 96 63 09 33 9e 83 e3 4a 12 c7 05 92 12 65 15 91 cd f2 80 34 a9 f8 a3 51 02 df 7f 4b b4 41 9f cd 20 f0 2d 79 3a 04 e4 0e cb 2d 5b e3 71 43 ec 04 7e 42 59 7d 74 58 8e db 0b 52 28 eb 4e a0 53 15 11 5c 4e 8f d4 f7 58 18 cc 7a 79 4f 2a c9 33 8e ac 4e f3 61 3b 0f 51 3e d6 7f bc 97 13 23 6a 0a db 8e a9 84 1c 89 36 38 e3 38 ef 8e 78 a2 16 c4 16 c0 d4 1e be 5f ff 30 4f 7b 65 69 02 52 ae 1a 72 c7 db 35 ef 55 7f 2e 83 dc 78 97 14 72 f5 e3 e2 e9 4c 7a 4c 9b eb 93 b7 bd 7e ee 3d 6d ce ff 67 a7 4d 3c 28 9a 53 c1 93 ea d3 a5 0e 32 68 8c c6 2e c1 e2 7e ee 95 2a 35 50 Data Ascii: RUqhRCj@k4'Der+n_^,IVR_"MKQUIc3Je4QKA -y:-[qC~BY}tXR(NS\NXzyO3Na;Q>#j688x_0O{eiRr5U.xrLzL~=mgM<(S2h.~*5P
2024-04-16 17:43:25 UTC	316	IN	Data Raw: d5 44 70 4a a6 b8 24 9a 4b 1b 9a d1 99 25 81 cc 85 86 6c eb b3 68 66 81 68 1d b8 ca 86 1f 86 53 ff 3d 07 d2 6a 65 1c b1 48 2b c3 dd d2 b7 b2 01 2e 62 53 7b 76 86 a6 9d 57 37 dd ec 6d 30 cb 8e 16 9f cf e7 db 0e 6f 74 bd 5f 86 71 8c c4 9b c0 fa 7d f0 09 16 17 cf b0 18 c1 52 28 60 37 b1 4a c3 d3 7f 9c ff fa 4b 60 fa 41 57 09 bc 51 f9 08 cd c8 d7 74 78 fa ee 2c f2 46 68 b2 4f 60 a6 76 cd 6a 70 0f 46 ac 94 9d bd fb e5 d7 41 f2 25 cc fe 1e a2 7c 92 28 7e c1 f8 4e f4 b1 cc 57 a3 ff 5e 99 7b 5e fa 18 6b b1 07 23 46 e0 8a f6 48 fc 14 a9 86 cf 80 2e af 94 cc 78 1e 06 e5 df ea cf c5 e1 f7 e4 1a 6c 51 d3 b4 41 6b c3 b1 9f fc 14 f7 d3 d8 a9 29 ca f4 6d e2 af 81 7f 55 68 96 23 30 50 ee ca bf 69 ee ad b7 ef 7f 7e 93 be fd 39 f1 17 cd a6 48 ad 6b 1f ff 8f 37 54 31 dc cf Data Ascii: DpJ$K%lhfhS=jeH+.bS{vW7m0ot_q}R(`7JK`AWQtx,FhO`vjpFA%\|(~NW^{^k#FH.xlQAk)mUh#0Pi~9Hk7T1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49966	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	1296	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289396.59.0.0; fs_lua=1.1713289396921; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::1#/1744825396; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:25 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:25 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49968	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	638	OUT	GET /core/assets/css/39.11d2b6a7.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2783 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:33 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "87532c4db85f1429fa6d759bc3332f36" x-amz-server-side-encryption: AES256 x-amz-version-id: UcZhIKxPiJynhkWzqWd9d6dr.VpqzWB3 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 33 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2741f1723d261cac06de387e29ba4cbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: YDkCBvJ3-dG6JJpxKoHkgdyFeR79fGYNNbPgOwx4mWcab6smrLeO3w== Age: 3352372
2024-04-16 17:43:25 UTC	2783	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 7b 77 69 64 74 68 3a 32 38 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 3e 63 69 72 63 6c 65 7b 66 69 6c 6c 3a 23 34 37 34 36 34 37 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 20 63 69 72 63 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 Data Ascii: .drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49967	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	1031	OUT	GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8798 Connection: close Server: istio-envoy Date: Tue, 02 Jan 2024 03:50:09 GMT Last-Modified: Fri, 29 Dec 2023 19:54:12 GMT ETag: "c5efcdc9e465604f32cf24af10fd6c13" x-amz-server-side-encryption: AES256 x-amz-version-id: Y781S_VzAVL.FvZLy68c4VxLUtkjapgJ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a27022837959b6f70545c8d6d0de9d04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: wrw7OIMB1GyfxWKISdBQZmd8Q0YKnpaWVEer2IfTZikAQA1BKC3STQ== Age: 9121996
2024-04-16 17:43:25 UTC	8798	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 4c 61 47 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 64 65 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 3b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 5b 30 5d 3d 3d 3d 74 26 26 28 6e 3d 72 2c 21 30 29 7d 29 2c 6e 7d 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49970	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	1032	OUT	GET /core/assets/js/31.c043863a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 27881 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:33 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "80a16a7469ece9a85df7ac8d39605662" x-amz-server-side-encryption: AES256 x-amz-version-id: xQshf8Fb.UbAzXwlaVlUWAyR86uYq5q8 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 32 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dbd1543e724393accac6fa465477c430.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: 5o7GB_IdqBKaGxwkZY9KF2EhneUBEj9Kr_d7rJdzkXeBmPgO_D2whQ== Age: 3352372
2024-04-16 17:43:25 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 5d 2c 7b 22 33 37 58 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 6d 61 6b 65 46 6c 61 74 7d 29 3b 76 61 72 20 72 3d 6e 28 22 77 42 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 6d 61 6b 65 46 6c 61 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 66 6c 61 74 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 2c 73 3d 5b 5d 2c 61 3d 30 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 5b 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a
2024-04-16 17:43:25 UTC	12490	IN	Data Raw: 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 42 75 66 66 65 72 29 72 65 74 75 72 6e 20 74 28 74 68 69 73 2e 62 69 6e 61 72 79 44 65 63 6f 64 65 28 65 29 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 2c 6f 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 6e 2c 35 29 3b 72 65 74 75 72 6e 20 74 28 7b 6a 6f 69 6e 5f 72 65 66 3a 6f 5b 30 5d 2c 72 65 66 3a 6f 5b 31 5d 2c 74 6f 70 69 63 3a 6f 5b 32 5d 2c 65 76 65 6e 74 3a 6f 5b 33 5d 2c 70 61 79 6c 6f 61 64 3a 6f 5b 34 5d 7d 29 7d 2c 62 69 6e 61 72 79 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 20 62 69 6e 61 72 79 45 6e 63 6f 64 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 6a 6f 69 6e 5f 72 65 66 2c 6e 3d 65 2e 72 65 66 2c 72 3d 65 2e 65 76 65 6e 74 2c 6f 3d 65 2e 74 6f 70 69 63 2c 69 3d 65 2e 70 61 79 6c 6f Data Ascii: tructor===ArrayBuffer)return t(this.binaryDecode(e));var n=JSON.parse(e),o=Object(r.a)(n,5);return t({join_ref:o[0],ref:o[1],topic:o[2],event:o[3],payload:o[4]})},binaryEncode:function binaryEncode(e){var t=e.join_ref,n=e.ref,r=e.event,o=e.topic,i=e.paylo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49969	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	622	OUT	GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3114 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:34 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "b5201ff04da30312910b71e1da072dd2" x-amz-server-side-encryption: AES256 x-amz-version-id: uVEyZ5tRXLdtqtE229DGMUJWzGeJV7TR Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd3f4df95f7c836cc4eb6a22d92ac2c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: X7fOhQBI6oMdpxJp6qa8Mxyy0GD3dWTADo2H8RQXWt-mA2PhLgNnmg== Age: 3352371
2024-04-16 17:43:25 UTC	3114	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 5d 2c 7b 22 32 41 4f 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 63 3d 61 28 22 6d 6a 32 4f 22 29 2c 6e 3d 61 2e 6e 28 63 29 2c 72 3d 61 28 22 37 53 4d 31 22 29 2c 69 3d 61 28 22 52 71 77 78 22 29 2c 6c 3d 61 28 22 51 74 6c 5a 22 29 2c 6f 3d 61 28 22 4d 79 38 55 22 29 2c 73 3d 61 28 22 42 6a 72 65 22 29 2c 75 3d 61 28 22 49 4c 51 46 22 29 2c 64 3d 61 28 22 4b 37 69 30 22 29 2c 66 3d 61 28 22 45 52 6b 50 22 29 2c 62 3d 61 2e 6e 28 66 29 2c 70 3d 61 28 22 75 44 66 49 22 29 2c 6d 3d 61 28 22 41 44 47 43 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49971	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	555	OUT	GET /rec/integrations?OrgId=o-19DFBM-na1 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	261	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 1835 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:25 UTC	994	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e 20 3d 20 66 75 Data Ascii: (function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn = fu
2024-04-16 17:43:25 UTC	841	IN	Data Raw: 27 73 74 61 74 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 54 79 70 65 3a 20 27 49 4e 54 45 47 52 41 54 49 4f 4e 5f 49 4e 49 54 49 41 4c 49 5a 45 44 27 2c 0a 20 20 20 20 20 20 20 20 70 61 79 6c 6f 61 64 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 72 6f 76 69 64 65 72 5f 69 64 3a 20 27 71 75 61 6c 74 72 69 63 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 5f 73 74 61 74 75 73 3a 20 27 53 55 43 43 45 53 53 27 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 3b 0a 20 20 20 20 20 20 46 53 2e 6c 6f 67 28 22 77 61 72 6e 22 2c 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 6f 72 20 72 75 6e 20 51 53 49 2e 41 50 Data Ascii: 'stat', { eventType: 'INTEGRATION_INITIALIZED', payload: { provider_id: 'qualtrics', event_status: 'SUCCESS' } }); } catch(e) { console.warn(e); FS.log("warn", "Failed to load or run QSI.AP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49972	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:25 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49973	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289404212&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:43:26 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49974	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289404293&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 36 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":3,"When":6107,"Evts":[{"Kind":100,"Args":["visible"],"When":6107},{"Kind":100,"Args":["hidden"],"When":6107},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49975	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289404293&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 31 32 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":4,"When":6128,"Evts":[{"Kind":100,"Args":["visible"],"When":6128},{"Kind":100,"Args":["hidden"],"When":6128},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49976	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 14838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	14838	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 31 34 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 32 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 33 31 33 33 38 2e 32 38 31 32 35 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 36 34 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 39 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 34 30 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e Data Ascii: {"Seq":5,"When":6140,"Evts":[{"Kind":42,"Args":[1263,31338.28125],"When":6140},{"Kind":10,"Args":[3,0,0],"When":6140},{"Kind":64,"Args":[3,0,0],"When":6140},{"Kind":19,"Args":[1263,907,1280,907],"When":6140},{"Kind":40,"Args":[1263,907],"When":6140},{"Kin
2024-04-16 17:43:26 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49977	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:43:25 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49978	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:25 UTC	639	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime=1713289404216&PageStart=1713289396931&PrevBundleTime=1713289404017&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:25 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:25 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:25 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49979	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1048	OUT	GET /core/assets/css/27.b5e8f5e1.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8586 Connection: close Server: istio-envoy Date: Wed, 28 Feb 2024 20:41:16 GMT Last-Modified: Wed, 28 Feb 2024 20:09:21 GMT ETag: "e7107bc29ccb3c6d928f0f8f10a0f22d" x-amz-server-side-encryption: AES256 x-amz-version-id: zyzXY0HiUV0Kx0xDA0irOuT14sRG0uSI Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd5ab138e49a090fd3089313c9c8105c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: LGs9ihDG0Zoibpe1BOBJPwLLuO3GzvXbBgyfLlQ49mh2AzuWFhvZ7A== Age: 4136530
2024-04-16 17:43:26 UTC	8586	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 37 38 38 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 2d 77 65 62 6b 69 74 2d Data Ascii: .drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49981	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	637	OUT	GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 7555 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:34 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "189aeffd571884559dababa22c66d75a" x-amz-server-side-encryption: AES256 x-amz-version-id: NgCjqeUz1DXNz7UV3Lu77YLY5UV53RYZ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 665d1c5fbd9802ee4a4f61e7446fc81e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: P0yOtLyj4b8WJKHUPWU1XljidTlCMxyLbu1GrnfgNs-cvqSpVFtNKQ== Age: 3352372
2024-04-16 17:43:26 UTC	7555	IN	Data Raw: 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 32 32 32 34 32 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 Data Ascii: .emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49980	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1048	OUT	GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	939	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 365 Connection: close Server: istio-envoy Date: Tue, 26 Dec 2023 16:29:30 GMT Last-Modified: Tue, 19 Dec 2023 16:15:21 GMT ETag: "06b2963b029c0824382815165bfea73e" x-amz-server-side-encryption: AES256 x-amz-version-id: cPbJc4l2MPB9ps5uq6ZoKAPlY3rAypeU Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 57 X-Cache: Hit from cloudfront Via: 1.1 4d8384431ad0b8e60c79585b2d139316.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: UUIIqcKiMRpK3VZ24r8mnfZvcBqf0Hl2BScJVCWDutKPYWDByjA1_A== Age: 9681236
2024-04-16 17:43:26 UTC	365	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 6c 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 72 69 67 68 74 3a 31 32 70 78 3b 62 6f 74 74 6f 6d 3a 31 32 Data Ascii: .drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49982	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	621	OUT	GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47358 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:35 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "2d79b64b95d2aa829a460e0d02cca148" x-amz-server-side-encryption: AES256 x-amz-version-id: Ij0e.e6AkWNNfAhEvnGK4qzljUH2ysS9 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19ce5400ce3c3ceb334a546c0524d848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: _7EC5TKPCootBg6tZ7hFVe4WXmxaiT4EzlQCzKKm_0p3Mvhti7Wc6Q== Age: 3352371
2024-04-16 17:43:26 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 2f 6d 44 47 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 22 56 42 6c 42 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 6f 53 70 61 63 65 43 61 73 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 57 5f 5d 2b 28 2e 7c 24 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 20 22 2b 74 3a 22 22 7d 29 2e 74 72 69 6d 28 29 7d 7d 2c 22 2f 76 66 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defi
2024-04-16 17:43:26 UTC	16384	IN	Data Raw: 61 62 65 6c 3d 6f 5b 31 5d 2c 6f 3d 69 3b 62 72 65 61 6b 7d 69 66 28 6f 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 69 29 3b 62 72 65 61 6b 7d 6f 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 3d 74 2e 63 61 6c 6c 28 65 2c 61 29 7d 63 61 74 63 68 28 6c 29 7b 69 3d 5b 36 2c 6c 5d 2c 6e 3d 30 7d 66 69 6e 61 6c 6c 79 7b 72 3d 6f 3d 30 7d 69 66 28 35 26 69 5b 30 5d 29 74 68 72 6f 77 20 69 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 69 5b 30 5d 3f 69 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 28 5b 69 2c 6c 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 5f 72 65 61 64 28 65 2c 74 29 7b 76 61 Data Ascii: abel=o[1],o=i;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(i);break}o[2]&&a.ops.pop(),a.trys.pop();continue}i=t.call(e,a)}catch(l){i=[6,l],n=0}finally{r=o=0}if(5&i[0])throw i[1];return{value:i[0]?i[1]:void 0,done:!0}}([i,l])}}}function __read(e,t){va
2024-04-16 17:43:26 UTC	15583	IN	Data Raw: 2c 69 2e 68 61 6e 64 6c 65 48 6f 72 69 7a 6f 6e 74 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 3d 69 2e 68 61 6e 64 6c 65 48 6f 72 69 7a 6f 6e 74 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 56 65 72 74 69 63 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 3d 69 2e 68 61 6e 64 6c 65 56 65 72 74 69 63 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 57 69 6e 64 6f 77 52 65 73 69 7a 65 3d 69 2e 68 61 6e 64 6c 65 57 69 6e 64 6f 77 52 65 73 69 7a 65 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 3d 69 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 44 72 61 67 3d 69 2e 68 61 6e 64 6c 65 44 Data Ascii: ,i.handleHorizontalThumbMouseDown=i.handleHorizontalThumbMouseDown.bind(i),i.handleVerticalThumbMouseDown=i.handleVerticalThumbMouseDown.bind(i),i.handleWindowResize=i.handleWindowResize.bind(i),i.handleScroll=i.handleScroll.bind(i),i.handleDrag=i.handleD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49983	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:43:26 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49984	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289404294&PageStart=1713289396931&PrevBundleTime=1713289404017&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	4420	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 39 38 35 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 39 38 35 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 38 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 65 6e 74 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 39 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a Data Ascii: {"Seq":8,"When":9856,"Evts":[{"Kind":100,"Args":["visible"],"When":9856},{"Kind":57,"Args":[12,"pointerover",16691.5,48,16738.800000000017,16739,0],"When":9875},{"Kind":57,"Args":[12,"pointerenter",16691.5,48,16739,16739,0],"When":9875},{"Kind":57,"Args":
2024-04-16 17:43:26 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49985	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	637	OUT	GET /core/assets/css/1.1bcc8082.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 45138 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:35 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "3b8ba82e1bac13ee29e9764a55620d99" x-amz-server-side-encryption: AES256 x-amz-version-id: J9K9ed_T2U1DfO8_gHKqtr8IE2EyErto Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1ad0e11a95c9a5b3f4d80fde7d23fea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: DIRuU7nqzmIlNW3cGPgpm8zbrLn2zkEHmvX96CYstZVM-iERKWmIMQ== Age: 3352371
2024-04-16 17:43:26 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6e 61 6b 65 64 2d 62 75 74 74 6f 6e 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 65 6d 6f 6a 69 2d 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 36 70 78 3b 74 6f 70 3a 2d 31 30 30 30 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 35 38 70 78 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d Data Ascii: .drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-
2024-04-16 17:43:26 UTC	16384	IN	Data Raw: 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 3b 66 6c 65 78 3a 31 20 31 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 2d 74 65 78 74 2d 61 72 65 61 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c Data Ascii: -box-flex:1;-ms-flex:1 1;flex:1 1}.drift-widget-composer--text-area,.drift-widget-composer-actions{display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}.drift-widget-composer-actions{-webkit-align-items:flex-end;-moz-box-align:end;-ms-fl
2024-04-16 17:43:26 UTC	13334	IN	Data Raw: 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 31 65 62 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 41 47 45 4e 54 20 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2d 61 75 74 68 6f 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 38 66 61 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 2e 64 72 69 66 74 2d 77 69 64 67 65 74 Data Ascii: r-type{background:#0071eb}.drift-widget-message-sender--AGENT .drift-widget-message--meta-author-type{background:#f5f8fa}.drift-widget-message--meta.drift-widget-message-sender--END_USER{text-align:right}.drift-widget-message-sender--END_USER.drift-widget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49987	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	638	OUT	GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 16436 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:34 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "6f779260053e30787f84dfa7ba6743e5" x-amz-server-side-encryption: AES256 x-amz-version-id: 4DKwArnsEad_45FTV7lDarWR0I2cfneh Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb8674b99d3dfcc6867fb20af353442a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: Rbg9xMe36ozQZLK6XdURt7B3oGqOcfrPoFpTshBXR92BomXUybRPoQ== Age: 3352372
2024-04-16 17:43:26 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 32 30 32 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 33 70 78 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 7d 2e 64 72 69 66 74 2d 77 Data Ascii: .drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-w
2024-04-16 17:43:26 UTC	1016	IN	Data Raw: 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 6f 70 61 63 69 74 79 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 3b 74 72 Data Ascii: rm:translateX(100%);-moz-transform:translateX(100%);-ms-transform:translateX(100%);-o-transform:translateX(100%);transform:translateX(100%);opacity:0;background:#fff;-webkit-transition:opacity .3s ease,-webkit-transform .3s cubic-bezier(.165,.84,.44,1);tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49988	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	3332	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22c7651b2b-36b1-437e-8cfb-f67c34b7b347%22%2C%22routeType%22%3A%22custom-contact-supports%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22rsc_301%22%3A%22%22%2C%22viewid%22%3A%221d92fa59-064f-4fd0-bcea-a400d414b45f%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	447	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=1800 Expires: Mon, 17 Apr 2023 17:43:26 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:26 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 2e4fbdaf09e88676963c4480a309d8fe
2024-04-16 17:43:27 UTC	15937	IN	Data Raw: 33 65 39 35 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6c 61 79 6f 75 74 3a 2f 2f 73 69 74 65 66 6f 72 63 65 2d 67 65 6e 65 72 61 74 65 64 70 61 67 65 2d 31 64 39 32 66 61 35 39 2d 30 36 34 66 2d 34 66 64 30 2d 62 63 65 61 2d 61 34 30 30 64 34 31 34 62 34 35 66 2e 63 31 39 33 22 7d 2c 22 6f 72 69 67 69 6e 61 6c 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 70 61 67 65 4c 6f 61 64 65 72 22 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 70 61 67 65 4c Data Ascii: 3e95{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/*[0]","attributes":{"values":{"pageL
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 63 3a 43 53 50 5f 43 6f 6d 6d 75 6e 69 74 79 42 75 74 74 65 72 42 61 72 22 7d 7d 5d 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 0d 0a 38 30 30 30 0d 0a 3a 22 63 6f 6e 74 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 72 75 6e 74 69 6d 65 52 65 67 69 6f 6e 22 7d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 69 74 65 6d 49 64 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 69 74 65 6d 49 64 22 2c 22 76 61 6c 75 65 22 3a 22 66 30 34 30 31 30 Data Ascii: f":{"descriptor":"markup://c:CSP_CommunityButterBar"}}]}}}}]}}}}]},"content":{"descriptor"8000:"content","value":[{"componentDef":{"descriptor":"markup://siteforce:runtimeRegion"},"attributes":{"values":{"itemId":{"descriptor":"itemId","value":"f04010
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 21 24 41 2e 75 74 69 6c 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 28 61 2e 67 65 74 28 5c 22 76 2e 72 65 63 6f 72 64 49 64 5c 22 29 29 26 26 21 24 41 2e 75 74 69 6c 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 28 61 2e 67 65 74 28 5c 22 76 2e 6d 6f 64 65 5c 22 29 29 26 26 63 2e 6c 6f 61 64 52 65 63 6f 72 64 28 61 2c 24 41 2e 75 74 69 6c 2e 67 65 74 42 6f 6f 6c 65 61 6e 56 61 6c 75 65 28 61 2e 67 65 74 28 5c 22 76 2e 69 67 6e 6f 72 65 45 78 69 73 74 69 6e 67 41 63 74 69 6f 6e 5c 22 29 29 29 7d 2c 67 65 74 4e 65 77 52 65 63 6f 72 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 2e 72 65 63 6f 72 64 4c 69 62 2e 75 74 69 6c 2e 76 61 6c 69 64 61 74 65 4d 6f 64 65 43 61 6e 43 61 6c 6c 4d 65 74 Data Ascii: ction(a,b,c){!$A.util.isUndefinedOrNull(a.get(\"v.recordId\"))&&!$A.util.isUndefinedOrNull(a.get(\"v.mode\"))&&c.loadRecord(a,$A.util.getBooleanValue(a.get(\"v.ignoreExistingAction\")))},getNewRecord:function(a,b,c){c.recordLib.util.validateModeCanCallMet
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 22 6d 66 72 61 63 5c 22 2c 5c 22 6d 67 6c 79 70 68 5c 22 2c 5c 22 6d 69 5c 22 2c 5c 22 6d 6c 61 62 65 6c 65 64 74 72 5c 22 2c 5c 22 6d 6d 75 6c 74 69 73 63 72 69 70 74 73 5c 22 2c 5c 22 6d 6e 5c 22 2c 5c 22 6d 6f 5c 22 2c 5c 22 6d 6f 76 65 72 5c 22 2c 5c 22 6d 70 61 64 64 65 64 5c 22 2c 5c 22 0d 0a 31 36 33 0d 0a 6d 70 68 61 6e 74 6f 6d 5c 22 2c 5c 22 6d 72 6f 6f 74 5c 22 2c 5c 22 6d 72 6f 77 5c 22 2c 5c 22 6d 73 5c 22 2c 5c 22 6d 73 70 61 63 65 5c 22 2c 5c 22 6d 73 71 72 74 5c 22 2c 5c 22 6d 73 74 79 6c 65 5c 22 2c 5c 22 6d 73 75 62 5c 22 2c 5c 22 6d 73 75 70 5c 22 2c 5c 22 6d 73 75 62 73 75 70 5c 22 2c 5c 22 6d 74 61 62 6c 65 5c 22 2c 5c 22 6d 74 64 5c 22 2c 5c 22 6d 74 65 78 74 5c 22 2c 5c 22 6d 74 72 5c 22 2c 5c 22 6d 75 6e 64 65 72 5c 22 2c 5c 22 6d Data Ascii: "mfrac\",\"mglyph\",\"mi\",\"mlabeledtr\",\"mmultiscripts\",\"mn\",\"mo\",\"mover\",\"mpadded\",\"163mphantom\",\"mroot\",\"mrow\",\"ms\",\"mspace\",\"msqrt\",\"mstyle\",\"msub\",\"msup\",\"msubsup\",\"mtable\",\"mtd\",\"mtext\",\"mtr\",\"munder\",\"m
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 75 6c 65 5c 22 2c 7b 76 61 6c 75 65 3a 74 72 75 65 7d 29 7d 29 3b 5c 6e 7d 22 2c 22 63 65 22 3a 22 6c 69 67 68 74 6e 69 6e 67 2d 70 75 72 69 66 79 2d 6c 69 62 22 2c 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 6c 69 67 68 74 6e 69 6e 67 3a 70 75 72 69 66 79 4c 69 62 22 2c 22 6e 22 3a 22 6c 69 67 68 74 6e 69 6e 67 2f 70 75 72 69 66 79 4c 69 62 22 7d 2c 7b 22 78 73 22 3a 22 50 22 2c 22 63 6f 22 3a 22 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 6c 69 67 68 74 6e 69 6e 67 3a 70 72 69 6d 69 74 69 76 65 49 6e 70 75 74 43 68 65 63 6b 62 6f 78 42 75 74 74 6f 6e 27 2c 20 5c 22 6c 69 67 68 74 6e 69 6e 67 2f 70 72 69 6d 69 74 69 Data Ascii: ule\",{value:true})});\n}","ce":"lightning-purify-lib","descriptor":"markup://lightning:purifyLib","n":"lightning/purifyLib"},{"xs":"P","co":"function() { $A.componentService.addModule('markup://lightning:primitiveInputCheckboxButton', \"lightning/primiti
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 79 3d 31 3b 74 68 69 73 2e 68 6f 75 72 3d 30 3b 74 68 69 73 2e 6d 69 6e 75 74 65 3d 30 3b 74 68 69 73 2e 73 65 63 6f 6e 64 3d 30 3b 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 3d 30 7d 67 65 74 44 61 74 65 28 65 3d 32 65 33 29 7b 69 66 28 74 68 69 73 2e 79 65 61 72 3c 31 30 30 26 26 74 68 69 73 2e 79 65 61 72 3e 3d 30 29 7b 74 68 69 73 2e 79 65 61 72 2b 3d 65 7d 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 79 65 61 72 2c 74 68 69 73 2e 6d 6f 6e 74 68 2d 31 2c 74 68 69 73 2e 64 61 79 2c 74 68 69 73 2e 68 6f 75 72 2c 74 68 69 73 2e 6d 69 6e 75 74 65 2c 74 68 69 73 2e 73 65 63 6f 6e 64 2c 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 29 3b 69 66 28 74 68 69 73 2e 74 69 6d 65 5a 6f 6e 65 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 74 Data Ascii: y=1;this.hour=0;this.minute=0;this.second=0;this.millisecond=0}getDate(e=2e3){if(this.year<100&&this.year>=0){this.year+=e}const t=new Date(this.year,this.month-1,this.day,this.hour,this.minute,this.second,this.millisecond);if(this.timeZone){const e=t.get
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 2c 5c 22 73 6c 64 73 2d 69 6e 70 75 74 5f 5f 69 63 6f 6e 5f 72 69 67 68 74 5c 22 3a 74 72 75 65 7d 3b 63 6f 6e 73 74 20 55 3d 7b 70 72 6f 70 73 3a 7b 69 63 6f 6e 4e 61 6d 65 3a 5c 22 75 74 69 6c 69 74 79 3a 63 6c 6f 73 65 5c 22 2c 76 61 72 69 61 6e 74 3a 5c 22 62 61 72 65 5c 22 2c 73 76 67 43 6c 61 73 73 3a 5c 22 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 5c 22 7d 2c 6b 65 79 3a 31 31 7d 3b 63 6f 6e 73 74 20 7a 3d 7b 63 6c 61 73 73 4d 61 70 3a 7b 5c 22 73 6c 64 73 2d 61 73 73 69 73 74 69 76 65 2d 74 65 78 74 5c 22 3a 74 72 75 65 7d 2c 6b 65 79 3a 31 32 7d 3b 63 6f 6e 73 74 20 46 3d 7b 63 6c 61 73 73 4d 61 70 3a 7b 5c 22 73 6c 64 73 2d 69 6e 70 75 74 5f 5f 69 63 6f 6e 2d 67 72 6f 75 70 5c 22 3a 74 72 75 65 2c 5c 22 73 6c 64 73 2d 69 6e 70 75 74 5f Data Ascii: ,\"slds-input__icon_right\":true};const U={props:{iconName:\"utility:close\",variant:\"bare\",svgClass:\"slds-button__icon\"},key:11};const z={classMap:{\"slds-assistive-text\":true},key:12};const F={classMap:{\"slds-input__icon-group\":true,\"slds-input_
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 72 4c 61 62 65 6c 56 61 72 69 61 6e 74 28 29 7b 72 65 74 75 72 6e 5b 67 2e 56 41 52 49 41 4e 54 2e 53 54 41 4e 44 41 52 44 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 49 4e 4c 49 4e 45 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 53 54 41 43 4b 45 44 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 48 49 44 44 45 4e 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 76 61 72 69 61 6e 74 29 7d 67 65 74 20 69 73 44 65 66 61 75 6c 74 52 65 61 64 4f 6e 6c 79 54 79 70 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 53 74 61 6e 64 61 72 64 4f 72 4c 61 62 65 6c 56 61 72 69 61 6e 74 7c 7c 74 68 69 73 2e 68 61 73 49 6e 70 75 74 50 69 6c 6c 7d 67 65 74 20 69 73 55 73 65 72 49 6e 70 75 74 44 69 73 61 62 6c 65 64 28 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: rLabelVariant(){return[g.VARIANT.STANDARD,g.VARIANT.LABEL_INLINE,g.VARIANT.LABEL_STACKED,g.VARIANT.LABEL_HIDDEN].includes(this.variant)}get isDefaultReadOnlyTypes(){return this.isStandardOrLabelVariant\|\|this.hasInputPill}get isUserInputDisabled(){return t
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 66 6f 72 3a 6c 28 5c 22 63 68 65 63 6b 62 6f 78 5c 22 29 2c 70 61 72 74 3a 5c 22 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 7d 2c 6b 65 79 3a 30 7d 2c 5b 74 2e 72 65 71 75 69 72 65 64 3f 6e 28 5c 22 61 62 62 72 5c 22 2c 7b 63 6c 61 73 73 4d 61 70 3a 70 2c 61 74 74 72 73 3a 7b 74 69 74 6c 65 3a 74 2e 6c 61 62 65 6c 52 65 71 75 69 72 65 64 7d 2c 6b 65 79 3a 31 7d 2c 5b 73 28 5c 22 2a 5c 22 29 5d 29 3a 6e 75 6c 6c 2c 6e 28 5c 22 73 70 61 6e 5c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2e 63 6f 6d 70 75 74 65 64 4c 61 62 65 6c 43 6c 61 73 73 2c 6b 65 79 3a 32 7d 2c 5b 73 28 72 28 74 2e 6c 61 62 65 6c 29 29 5d 29 5d 29 3a 6e 75 6c 6c 2c 21 74 2e 69 73 53 74 61 6e 64 61 72 64 56 61 72 69 61 6e 74 3f 74 2e 66 69 65 6c 64 4c 65 76 65 6c 48 65 6c 70 3f 64 Data Ascii: for:l(\"checkbox\"),part:\"label-container\"},key:0},[t.required?n(\"abbr\",{classMap:p,attrs:{title:t.labelRequired},key:1},[s(\"*\")]):null,n(\"span\",{className:t.computedLabelClass,key:2},[s(r(t.label))])]):null,!t.isStandardVariant?t.fieldLevelHelp?d
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 61 6e 63 65 28 29 3b 63 6f 6e 73 74 20 73 3d 6e 65 77 20 64 2e 53 68 6f 77 54 6f 61 73 74 45 76 65 6e 74 28 7b 2e 2e 2e 65 2c 74 6f 61 73 74 3a 74 68 69 73 2c 73 6f 75 72 63 65 3a 74 7d 29 3b 69 66 28 74 29 7b 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 7d 65 6c 73 65 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 7d 7d 7d 72 65 5b 72 2e 69 6e 73 74 61 6e 63 65 4e 61 6d 65 5d 3d 5c 22 6c 69 67 68 74 6e 69 6e 67 2d 74 6f 61 73 74 5c 22 3b 72 65 5b 72 2e 70 72 6f 70 65 72 74 69 65 73 5d 3d 5b 5c 22 76 61 72 69 61 6e 74 5c 22 2c 5c 22 6d 6f 64 65 5c 22 2c 5c 22 6c 61 62 65 6c 5c 22 2c 5c 22 6c 61 62 65 6c 4c 69 6e 6b 73 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 4c 69 6e 6b Data Ascii: ance();const s=new d.ShowToastEvent({...e,toast:this,source:t});if(t){t.dispatchEvent(s)}else{document.body.dispatchEvent(s)}}}re[r.instanceName]=\"lightning-toast\";re[r.properties]=[\"variant\",\"mode\",\"label\",\"labelLinks\",\"message\",\"messageLink

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49986	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1032	OUT	GET /core/assets/js/27.42a90a1f.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15387 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:33 GMT Last-Modified: Fri, 08 Mar 2024 21:52:26 GMT ETag: "3305c113acc7be7b8411abd6abfa37ba" x-amz-server-side-encryption: AES256 x-amz-version-id: uqJrHTB3r0l.Z3re932SJbB_rTNlMYGC Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0c4024c249c7bc0948cf981ba6a5def2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: t5bE_TBmZWhizSUL-1-csWYGyjWfH9HFQEinctI-gxMVaIO0u0velA== Age: 3352373
2024-04-16 17:43:26 UTC	15387	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 5d 2c 7b 22 2b 4d 48 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 6e 28 22 45 52 6b 50 22 29 2c 6f 3d 6e 2e 6e 28 63 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 69 6c 6c 65 72 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 65 78 69 74 69 6e 67 20 64 72 69 66 74 20 77 69 64 67 65 74 22 2c 72 6f 6c 65 3a 22 62 75 74 74 6f 6e 22 2c 74 61 62 49 6e 64 65 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49989	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	2014	OUT	GET /s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Regular.woff HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.docusign.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Type: application/octet-stream Content-Length: 29496 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Expires: Mon, 27 May 2024 02:22:49 GMT P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Wed, 21 Jun 2023 23:55:32 GMT Server: sfdcedge X-SFDC-Request-Id: abe265c255e4c5400d22fbc91f962715
2024-04-16 17:43:27 UTC	15934	IN	Data Raw: 77 4f 46 46 4f 54 54 4f 00 00 73 38 00 0d 00 00 00 00 cb 48 00 01 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 08 a8 00 00 43 88 00 00 63 38 d6 c6 b5 bd 46 46 54 4d 00 00 70 2c 00 00 00 1a 00 00 00 1c 90 85 55 97 47 44 45 46 00 00 4c 30 00 00 00 35 00 00 00 36 04 fd 06 21 47 50 4f 53 00 00 4e 98 00 00 21 94 00 00 4f 86 b4 e8 c4 7e 47 53 55 42 00 00 4c 68 00 00 02 30 00 00 03 f4 f6 79 20 8d 4f 53 2f 32 00 00 01 90 00 00 00 4e 00 00 00 60 6b 00 7c c0 63 6d 61 70 00 00 06 14 00 00 02 7e 00 00 03 ce 73 a2 eb 5f 68 65 61 64 00 00 01 30 00 00 00 32 00 00 00 36 19 23 32 61 68 68 65 61 00 00 01 64 00 00 00 21 00 00 00 24 07 bd 03 fc 68 6d 74 78 00 00 70 48 00 00 02 ed 00 00 05 e0 03 40 36 d7 6d 61 78 70 00 00 01 88 00 00 00 Data Ascii: wOFFOTTOs8HCFF Cc8FFTMp,UGDEFL056!GPOSN!O~GSUBLh0y OS/2N`k\|cmap~s_head026#2ahhead!$hmtxpH@6maxp
2024-04-16 17:43:27 UTC	13562	IN	Data Raw: e2 71 07 22 6e 12 0c f3 e2 ff 5b 5f a6 88 0c 6f ec b0 af d6 f7 57 4e 35 ac bc ea e8 12 f7 c1 7d 3f 2b 60 54 06 ea 0c aa 7d de 51 a2 0f c4 f3 dd 6a 14 82 aa e3 3f 38 a4 84 76 6e 77 71 53 0b 57 34 20 72 f2 14 f6 e8 68 e6 7c e2 f9 9d 17 d1 3d 94 ea b7 a6 2f bb 54 31 0e 05 ad 98 f6 3d e6 96 b8 7a a3 0e 44 69 88 ef 95 3b fc a5 c5 5d 94 9b 78 e6 0e ab cd 8b 5f dd 85 71 f5 0b 9d 8c c6 7c e5 60 70 1c 2c e4 46 87 1e 3e a7 43 59 a9 a7 1f ae fb 75 75 e2 aa 54 f4 83 55 5f bb 6e 84 90 d6 ea 60 96 e4 34 74 f7 b0 20 25 92 7e a6 f7 87 9d fc 15 4e 9b 9e 21 fa 0d 1d df 1b 19 1a 1a 15 39 7d 7a d4 fe 63 ba 63 7b f7 1f b7 20 10 df e1 6f 84 fe 2f ee ff a5 11 bb 2e 7a 41 89 63 96 0c 5e fa 26 d5 5e 50 e9 cb 55 da e4 ef 55 77 71 5b a1 70 5c 75 d9 74 e9 4e e0 c5 0a 9e 11 1c 16 13 Data Ascii: q"n[_oWN5}?+`T}Qj?8vnwqSW4 rh\|=/T1=zDi;]x_q\|`p,F>CYuuTU_n`4t %~N!9}zcc{ o/.zAc^&^PUUwq[p\utN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49990	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1032	OUT	GET /core/assets/js/25.b8d3a33a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=cc8c3240-93e1-4934-8499-0475feb39090&sessionStarted=1713289398.268&campaignRefreshToken=1b94b123-9dea-4535-9a41-e83699089af0&hideController=false&pageLoadStartTime=1713289394744&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:26 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94361 Connection: close Server: istio-envoy Date: Tue, 26 Mar 2024 18:05:10 GMT Last-Modified: Tue, 26 Mar 2024 14:12:58 GMT ETag: "1fab3e8d98e98fe27b86bdea9085f17b" x-amz-server-side-encryption: AES256 x-amz-version-id: nySg3gWFoZpwoITG_phs5J7r7YUpT89V Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 109 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd3f4df95f7c836cc4eb6a22d92ac2c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: pTVFUpLi7nmDCOuNia_GL1m3ntwI-DsLrXLfgnOlhW5tY0PUIDxr3g== Age: 1813096
2024-04-16 17:43:26 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 5d 2c 7b 22 31 6b 75 78 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 69 3d 6e 28 22 49 4c 51 46 22 29 2c 73 3d 6e 28 22 78 77 54 6f 22 29 2c 75 3d 6e 28 22 32 58 59 36 22 29 2c 6c 3d 6e 28 22 4c 56 63 58 22 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r
2024-04-16 17:43:26 UTC	16384	IN	Data Raw: 65 69 67 68 74 22 7d 29 3b 63 61 73 65 20 32 30 3a 72 65 74 75 72 6e 20 4f 3d 63 2e 73 65 6e 74 2c 6a 3d 4f 2e 64 61 74 61 2c 6d 3d 7b 5f 77 69 6e 64 6f 77 3a 64 2c 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 3a 6e 2e 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 66 2c 67 65 6f 3a 6e 2e 67 65 6f 2c 65 6d 62 65 64 3a 74 2c 72 65 66 65 72 72 65 72 3a 67 2c 61 75 74 6f 41 73 73 69 67 6e 65 65 49 64 3a 6f 2c 73 63 72 6f 6c 6c 61 62 6c 65 48 65 69 67 68 74 3a 6a 2c 68 61 73 45 78 69 74 49 6e 74 65 6e 74 3a 72 2e 68 61 73 45 78 69 74 49 6e 74 65 6e 74 7d 2c 63 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 29 3b 63 61 73 65 20 32 34 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 Data Ascii: eight"});case 20:return O=c.sent,j=O.data,m={_window:d,visitInformation:n.visitInformation,cookies:f,geo:n.geo,embed:t,referrer:g,autoAssigneeId:o,scrollableHeight:j,hasExitIntent:r.hasExitIntent},c.abrupt("return",Promise.resolve(m));case 24:case"end":re
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 21 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 26 26 30 21 3d 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 29 7b 6e 2e 6e 65 78 74 3d 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 29 3b 63 61 73 65 20 32 3a 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 3d 21 30 3b 63 61 73 65 20 33 3a 69 66 28 21 28 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 3e 30 29 29 7b 6e 2e 6e 65 78 74 3d 31 31 3b 62 72 65 61 6b 7d 69 66 28 65 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 73 68 69 66 74 28 29 2c 21 28 74 3d Data Ascii: nction _callee$(n){for(;;)switch(n.prev=n.next){case 0:if(!this._running&&0!==this._callbacks.length){n.next=2;break}return n.abrupt("return");case 2:this._running=!0;case 3:if(!(this._callbacks.length>0)){n.next=11;break}if(e=this._callbacks.shift(),!(t=
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 22 61 74 74 72 69 62 75 74 65 73 22 2c 22 70 6c 61 79 62 6f 6f 6b 49 64 22 5d 2c 62 29 2c 75 26 26 4f 62 6a 65 63 74 28 58 65 2e 63 29 28 22 46 6f 72 6d 20 44 61 74 61 20 53 75 62 6d 69 74 74 65 64 22 2c 7b 63 61 6d 70 61 69 67 6e 49 64 3a 6e 2c 70 6c 61 79 62 6f 6f 6b 49 64 3a 70 2c 65 6e 64 55 73 65 72 49 64 3a 6f 7d 29 2c 21 64 29 7b 63 2e 6e 65 78 74 3d 33 31 3b 62 72 65 61 6b 7d 69 66 28 4f 62 6a 65 63 74 28 76 74 2e 61 29 28 22 70 6f 73 74 5f 66 6f 72 6d 5f 74 61 6b 65 6f 76 65 72 5f 65 6e 72 6f 6c 6c 22 29 2c 21 4f 62 6a 65 63 74 28 57 2e 63 29 28 4f 62 6a 65 63 74 28 73 2e 62 29 28 29 29 29 7b 63 2e 6e 65 78 74 3d 32 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 6e 28 29 2c 63 2e 6e 65 78 74 3d 32 30 2c 4f 62 6a 65 63 74 28 58 2e 72 29 28 34 30 Data Ascii: "attributes","playbookId"],b),u&&Object(Xe.c)("Form Data Submitted",{campaignId:n,playbookId:p,endUserId:o}),!d){c.next=31;break}if(Object(vt.a)("post_form_takeover_enroll"),!Object(W.c)(Object(s.b)())){c.next=20;break}return en(),c.next=20,Object(X.r)(40
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 72 79 7b 72 65 74 75 72 6e 20 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 44 61 74 65 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 6d 6e 2e 61 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 74 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 6d 65 6e 74 73 2c 61 29 7d 65 6c 73 65 20 74 3d 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6a 6e 2e 61 29 28 74 68 69 73 2c 74 29 7d 7d 76 61 72 20 6e 61 3d 6e 65 77 28 66 75 6e 63 74 69 Data Ascii: ry{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(mn.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(jn.a)(this,t)}}var na=new(functi
2024-04-16 17:43:27 UTC	12441	IN	Data Raw: 6f 72 64 65 72 3a 31 7d 29 29 2c 72 6e 28 6e 29 2c 21 30 29 7d 2c 65 2e 65 78 65 63 75 74 65 57 69 64 67 65 74 54 61 72 67 65 74 69 6e 67 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 63 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 32 28 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 32 24 28 63 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 72 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 72 5b 30 5d 3f 72 5b 30 5d 3a 5b 5d 2c 6e 3d 72 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 72 5b 31 5d 26 Data Ascii: order:1})),rn(n),!0)},e.executeWidgetTargeting=Object(o.a)(c.a.mark(function _callee2(){var t,n,a,r=arguments;return c.a.wrap(function _callee2$(c){for(;;)switch(c.prev=c.next){case 0:return t=r.length>0&&void 0!==r[0]?r[0]:[],n=r.length>1&&void 0!==r[1]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49991	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1878	OUT	GET /apex/zoomin_app__ZoominGAPage HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:26 GMT Last-Modified: Tue, 16 Apr 2024 17:43:26 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 5385518c805cb7b7901a7649eae87809
2024-04-16 17:43:27 UTC	3276	IN	Data Raw: 63 63 30 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 2f 31 36 33 39 30 37 38 34 36 34 30 30 30 2f 7a 6f 6f 6d 69 6e 5f 61 70 70 5f 5f 65 76 65 6e 74 5f 6c Data Ascii: cc0<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="/resource/1639078464000/zoomin_app__event_l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49992	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	1708	OUT	GET /resource/1639079103000/zoomin_app__iepolyfills HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:26 UTC	432	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:26 GMT Content-Type: text/javascript Content-Length: 595 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:26 GMT Last-Modified: Thu, 9 Dec 2021 19:34:24 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 07fe385bb82dd7d8cfce766158a9b257
2024-04-16 17:43:26 UTC	595	IN	Data Raw: 2f 2f 20 50 6f 6c 79 66 69 6c 6c 20 66 6f 72 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 49 45 20 31 31 0a 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 69 66 20 28 74 61 72 67 65 74 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 75 6e 64 65 66 69 6e 65 64 20 6f 72 20 6e 75 6c 6c 20 74 6f 20 6f 62 6a 65 63 74 27 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 74 61 72 67 65 74 20 3d 20 4f 62 6a Data Ascii: // Polyfill for Object.assign IE 11if (typeof Object.assign != 'function') { Object.assign = function(target) { 'use strict'; if (target == null) { throw new TypeError('Cannot convert undefined or null to object'); } target = Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49993	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	2212	OUT	POST /s/sfsites/aura?r=1&aura.Component.getComponentDef=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 722 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 982350000014945fc7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:26 UTC	722	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 30 36 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 43 6f 6d 70 6f 6e 65 6e 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 6f 6d 70 6f 6e 65 6e 74 44 65 66 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6c 69 67 68 74 6e 69 6e 67 25 33 41 69 63 6f 6e 53 76 67 54 65 6d 70 6c 61 74 65 73 55 74 69 6c Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22106%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FComponentController%2FACTION%24getComponentDef%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22name%22%3A%22lightning%3AiconSvgTemplatesUtil
2024-04-16 17:43:27 UTC	441	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:27 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:27 GMT Server: sfdcedge X-SFDC-Request-Id: 982350000014945fc7
2024-04-16 17:43:27 UTC	15943	IN	Data Raw: 33 65 38 64 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 30 36 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 78 73 22 3a 22 47 22 2c 22 63 6f 22 3a 22 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 6c 69 67 68 74 6e 69 6e 67 3a 69 63 6f 6e 53 76 67 54 65 6d 70 6c 61 74 65 73 55 74 69 6c 69 74 79 27 2c 20 5c 22 6c 69 67 68 74 6e 69 6e 67 2f 69 63 6f 6e 53 76 67 54 65 6d 70 6c 61 74 65 73 55 74 69 6c 69 74 79 5c 22 2c 5b 5c 22 65 78 70 6f 72 74 73 5c 22 2c 5c 22 6c 77 63 5c 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 Data Ascii: 3e8d{"actions":[{"id":"106;a","state":"SUCCESS","returnValue":{"xs":"G","co":"function() { $A.componentService.addModule('markup://lightning:iconSvgTemplatesUtility', \"lightning/iconSvgTemplatesUtility\",[\"exports\",\"lwc\"],function(e,t){var a=void 0
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 63 2d 34 39 66 36 6f 31 67 33 61 65 34 5c 22 3b 74 65 2e 6c 65 67 61 63 79 53 74 79 6c 65 73 68 65 65 74 54 6f 6b 65 6e 3d 5c 22 6c 69 67 68 74 6e 69 6e 67 2d 69 63 6f 6e 53 76 67 54 65 6d 70 6c 61 74 65 73 55 74 69 6c 69 74 79 0d 0a 38 31 36 62 0d 0a 5f 61 6e 6e 6f 75 6e 63 65 6d 65 6e 74 5c 22 3b 74 2e 66 72 65 65 7a 65 54 65 6d 70 6c 61 74 65 28 74 65 29 3b 63 6f 6e 73 74 20 73 65 3d 74 2e 70 61 72 73 65 53 56 47 46 72 61 67 6d 65 6e 74 60 3c 67 24 7b 33 7d 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 32 36 30 20 34 30 43 31 32 37 20 34 30 20 32 30 20 31 33 38 20 32 30 20 32 36 30 63 30 20 33 39 20 31 31 20 37 35 20 33 30 20 31 30 38 20 32 20 34 20 33 20 39 20 32 20 31 33 6c 2d 32 32 20 36 39 63 2d 34 20 31 33 20 38 20 32 34 20 32 31 20 32 30 6c 37 30 2d 32 34 Data Ascii: c-49f6o1g3ae4\";te.legacyStylesheetToken=\"lightning-iconSvgTemplatesUtility816b_announcement\";t.freezeTemplate(te);const se=t.parseSVGFragment`<g${3}><path d=\"M260 40C127 40 20 138 20 260c0 39 11 75 30 108 2 4 3 9 2 13l-22 69c-4 13 8 24 21 20l70-24
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 2d 31 30 38 6c 34 35 2e 35 2d 34 36 2e 37 61 36 20 36 20 30 20 30 31 38 2d 2e 35 6c 2e 35 2e 35 63 33 20 33 20 36 20 36 20 38 2e 36 20 39 2e 35 61 36 20 36 20 30 20 30 31 2e 35 20 38 6c 2d 2e 35 2e 35 2d 31 34 20 31 34 2e 37 63 2d 31 2e 37 20 31 2e 33 2d 32 20 34 2d 2e 36 20 35 2e 35 20 31 20 31 20 32 20 31 2e 35 20 33 20 31 2e 34 68 38 34 63 33 2e 33 20 30 20 36 20 33 20 36 20 36 76 31 33 61 36 20 36 20 30 20 30 31 2d 35 2e 37 20 36 48 33 36 35 63 2d 32 20 30 2d 34 20 32 2d 34 20 34 20 30 20 31 20 2e 35 20 32 20 31 2e 33 20 33 6c 31 34 20 31 33 61 36 20 36 20 30 20 30 31 2e 35 20 38 6c 2d 2e 35 2e 35 2d 38 2e 36 20 38 2e 36 61 36 20 36 20 30 20 30 31 2d 38 20 2e 35 6c 2d 2e 35 2d 2e 35 2d 34 36 2d 34 37 2e 36 61 35 20 35 20 30 20 30 31 2e 35 2d 37 5c 22 Data Ascii: -108l45.5-46.7a6 6 0 018-.5l.5.5c3 3 6 6 8.6 9.5a6 6 0 01.5 8l-.5.5-14 14.7c-1.7 1.3-2 4-.6 5.5 1 1 2 1.5 3 1.4h84c3.3 0 6 3 6 6v13a6 6 0 01-5.7 6H365c-2 0-4 2-4 4 0 1 .5 2 1.3 3l14 13a6 6 0 01.5 8l-.5.5-8.6 8.6a6 6 0 01-8 .5l-.5-.5-46-47.6a5 5 0 01.5-7\"
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 2d 36 2d 34 2d 39 2d 34 7a 4d 31 32 37 20 31 33 34 48 34 34 63 2d 34 20 30 2d 37 20 31 2d 31 30 20 34 73 2d 34 20 36 2d 34 20 31 30 76 32 39 63 30 20 33 20 32 20 37 20 34 20 31 30 20 33 20 32 20 36 20 34 20 31 30 20 34 68 38 33 63 33 20 30 20 37 2d 32 20 39 2d 35 20 33 2d 32 20 34 2d 36 20 35 2d 39 76 2d 32 39 63 30 2d 34 2d 32 2d 37 2d 35 2d 31 30 2d 32 2d 33 2d 36 2d 34 2d 39 2d 34 7a 6d 31 34 37 20 30 68 2d 38 33 63 2d 33 20 30 2d 37 20 31 2d 39 20 34 73 2d 34 20 36 2d 34 20 31 30 76 32 39 61 31 34 20 31 34 20 30 20 30 30 31 34 20 31 34 68 38 32 63 34 20 30 20 37 2d 32 20 31 30 2d 34 73 34 2d 37 20 34 2d 31 30 76 2d 32 39 63 30 2d 34 2d 31 2d 37 2d 34 2d 31 30 61 31 34 20 31 34 20 30 20 30 30 2d 31 30 2d 34 7a 6d 31 34 38 20 30 68 2d 38 33 61 31 35 20 Data Ascii: -6-4-9-4zM127 134H44c-4 0-7 1-10 4s-4 6-4 10v29c0 3 2 7 4 10 3 2 6 4 10 4h83c3 0 7-2 9-5 3-2 4-6 5-9v-29c0-4-2-7-5-10-2-3-6-4-9-4zm147 0h-83c-3 0-7 1-9 4s-4 6-4 10v29a14 14 0 0014 14h82c4 0 7-2 10-4s4-7 4-10v-29c0-4-1-7-4-10a14 14 0 00-10-4zm148 0h-83a15
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 61 73 73 4e 61 6d 65 3a 74 2e 63 6f 6d 70 75 74 65 64 43 6c 61 73 73 2c 61 74 74 72 73 3a 7b 66 6f 63 75 73 61 62 6c 65 3a 5c 22 66 61 6c 73 65 5c 22 2c 5c 22 64 61 74 61 2d 6b 65 79 5c 22 3a 74 2e 6e 61 6d 65 2c 5c 22 61 72 69 61 2d 68 69 64 64 65 6e 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 76 69 65 77 42 6f 78 3a 5c 22 30 20 30 20 35 32 30 20 35 32 30 5c 22 2c 70 61 72 74 3a 5c 22 69 63 6f 6e 5c 22 7d 2c 6b 65 79 3a 30 2c 73 76 67 3a 74 72 75 65 7d 2c 5b 63 28 73 73 28 29 2c 32 29 5d 29 5d 7d 76 61 72 20 6c 73 3d 74 2e 72 65 67 69 73 74 65 72 54 65 6d 70 6c 61 74 65 28 63 73 29 3b 63 73 2e 73 74 79 6c 65 73 68 65 65 74 73 3d 5b 5d 3b 63 73 2e 73 74 79 6c 65 73 68 65 65 74 54 6f 6b 65 6e 3d 5c 22 6c 77 63 2d 37 32 74 71 39 34 61 6f 66 61 6c 5c 22 3b 63 73 2e Data Ascii: assName:t.computedClass,attrs:{focusable:\"false\",\"data-key\":t.name,\"aria-hidden\":\"true\",viewBox:\"0 0 520 520\",part:\"icon\"},key:0,svg:true},[c(ss(),2)])]}var ls=t.registerTemplate(cs);cs.stylesheets=[];cs.stylesheetToken=\"lwc-72tq94aofal\";cs.
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 76 32 33 35 6c 33 20 34 68 36 6c 35 36 2d 35 32 20 34 2d 31 68 35 6c 35 32 20 35 32 20 36 20 31 20 33 2d 35 56 32 30 68 33 33 61 36 30 20 36 30 20 30 20 30 31 33 30 20 31 31 20 35 32 20 35 32 20 30 20 30 31 31 35 20 32 39 76 33 39 34 61 34 32 20 34 32 20 30 20 30 31 2d 38 20 33 31 20 34 36 20 34 36 20 30 20 30 31 2d 33 37 20 31 36 48 31 32 33 63 2d 32 20 30 2d 31 35 20 33 2d 33 34 2d 31 35 61 35 33 20 35 33 20 30 20 30 31 2d 31 34 2d 33 36 76 2d 31 33 48 35 39 61 33 31 20 33 31 20 30 20 30 31 2d 33 32 2d 33 33 63 30 2d 33 30 20 33 31 2d 33 30 20 33 31 2d 33 30 68 31 37 76 2d 38 30 48 35 39 61 33 30 20 33 30 20 30 20 30 31 2d 33 32 2d 33 34 20 33 32 20 33 32 20 30 20 30 31 33 32 2d 33 34 68 31 36 76 2d 37 36 48 35 39 61 33 31 20 33 31 20 30 20 30 31 2d 33 Data Ascii: v235l3 4h6l56-52 4-1h5l52 52 6 1 3-5V20h33a60 60 0 0130 11 52 52 0 0115 29v394a42 42 0 01-8 31 46 46 0 01-37 16H123c-2 0-15 3-34-15a53 53 0 01-14-36v-13H59a31 31 0 01-32-33c0-30 31-30 31-30h17v-80H59a30 30 0 01-32-34 32 32 0 0132-34h16v-76H59a31 31 0 01-3
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 74 72 61 63 74 5f 70 61 79 6d 65 6e 74 5c 22 3b 74 2e 66 72 65 65 7a 65 54 65 6d 70 6c 61 74 65 28 6f 6c 29 3b 63 6f 6e 73 74 20 6d 6c 3d 74 2e 70 61 72 73 65 53 56 47 46 72 61 67 6d 65 6e 74 60 3c 67 24 7b 33 7d 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 34 34 20 32 48 31 38 61 34 20 34 20 30 20 30 30 2d 34 20 34 76 32 68 32 34 61 34 20 34 20 30 20 30 31 34 20 34 76 32 38 68 32 61 34 20 34 20 30 20 30 30 34 2d 34 56 36 61 34 20 34 20 30 20 30 30 2d 34 2d 34 7a 5c 22 24 7b 33 7d 2f 3e 3c 70 61 74 68 20 64 3d 5c 22 4d 33 38 20 31 36 61 34 20 34 20 30 20 30 30 2d 34 2d 34 48 38 61 34 20 34 20 30 20 30 30 2d 34 20 34 76 33 30 61 34 20 34 20 30 20 30 30 34 20 34 68 32 36 61 34 20 34 20 30 20 30 30 34 2d 34 56 31 36 7a 6d 2d 31 38 20 37 63 30 20 2e 36 2d 2e 34 20 31 Data Ascii: tract_payment\";t.freezeTemplate(ol);const ml=t.parseSVGFragment`<g${3}><path d=\"M44 2H18a4 4 0 00-4 4v2h24a4 4 0 014 4v28h2a4 4 0 004-4V6a4 4 0 00-4-4z\"${3}/><path d=\"M38 16a4 4 0 00-4-4H8a4 4 0 00-4 4v30a4 4 0 004 4h26a4 4 0 004-4V16zm-18 7c0 .6-.4 1
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 34 38 2d 34 37 7a 5c 22 24 7b 33 7d 2f 3e 3c 5c 2f 67 3e 60 3b 66 75 6e 63 74 69 6f 6e 20 79 6e 28 65 2c 74 2c 61 2c 73 29 7b 63 6f 6e 73 74 7b 73 74 3a 63 2c 68 3a 6c 7d 3d 65 3b 72 65 74 75 72 6e 5b 6c 28 5c 22 73 76 67 5c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2e 63 6f 6d 70 75 74 65 64 43 6c 61 73 73 2c 61 74 74 72 73 3a 7b 66 6f 63 75 73 61 62 6c 65 3a 5c 22 66 61 6c 73 65 5c 22 2c 5c 22 64 61 74 61 2d 6b 65 79 5c 22 3a 74 2e 6e 61 6d 65 2c 5c 22 61 72 69 61 2d 68 69 64 64 65 6e 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 76 69 65 77 42 6f 78 3a 5c 22 30 20 30 20 35 32 30 20 35 32 30 5c 22 2c 70 61 72 74 3a 5c 22 69 63 6f 6e 5c 22 7d 2c 6b 65 79 3a 30 2c 73 76 67 3a 74 72 75 65 7d 2c 5b 63 28 76 6e 28 29 2c 32 29 5d 29 5d 7d 76 61 72 20 70 6e 3d 74 2e 72 Data Ascii: 48-47z\"${3}/><\/g>`;function yn(e,t,a,s){const{st:c,h:l}=e;return[l(\"svg\",{className:t.computedClass,attrs:{focusable:\"false\",\"data-key\":t.name,\"aria-hidden\":\"true\",viewBox:\"0 0 520 520\",part:\"icon\"},key:0,svg:true},[c(vn(),2)])]}var pn=t.r
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 6f 6d 70 75 74 65 64 43 6c 61 73 73 2c 61 74 74 72 73 3a 7b 66 6f 63 75 73 61 62 6c 65 3a 5c 22 66 61 6c 73 65 5c 22 2c 5c 22 64 61 74 61 2d 6b 65 79 5c 22 3a 74 2e 6e 61 6d 65 2c 5c 22 61 72 69 61 2d 68 69 64 64 65 6e 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 76 69 65 77 42 6f 78 3a 5c 22 30 20 30 20 35 32 30 20 35 32 30 5c 22 2c 70 61 72 74 3a 5c 22 69 63 6f 6e 5c 22 7d 2c 6b 65 79 3a 30 2c 73 76 67 3a 74 72 75 65 7d 2c 5b 63 28 75 72 28 29 2c 32 29 5d 29 5d 7d 76 61 72 20 54 72 3d 74 2e 72 65 67 69 73 74 65 72 54 65 6d 70 6c 61 74 65 28 64 72 29 3b 64 72 2e 73 74 79 6c 65 73 68 65 65 74 73 3d 5b 5d 3b 64 72 2e 73 74 79 6c 65 73 68 65 65 74 54 6f 6b 65 6e 3d 5c 22 6c 77 63 2d 36 32 30 30 32 38 69 74 69 63 36 5c 22 3b 64 72 2e 6c 65 67 61 63 79 53 74 79 6c 65 Data Ascii: omputedClass,attrs:{focusable:\"false\",\"data-key\":t.name,\"aria-hidden\":\"true\",viewBox:\"0 0 520 520\",part:\"icon\"},key:0,svg:true},[c(ur(),2)])]}var Tr=t.registerTemplate(dr);dr.stylesheets=[];dr.stylesheetToken=\"lwc-620028itic6\";dr.legacyStyle

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49994	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:26 UTC	2996	OUT	POST /s/sfsites/aura?r=2&aura.ApexAction.execute=5&aura.Component.getComponent=1&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1&ui-force-components-controllers-hostConfig.HostConfig.getConfigData=1&zoomin_app.ZoominBaseComponent.obtainEventParams=1&zoomin_app.ZoominBaseComponent.obtainLanguageCodes=1&zoomin_app.ZoominBaseComponent.obtainPermission=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 4703 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-LDS-Endpoints: ApexActionController.execute:CommonUtility.configValue, ApexActionController.execute:RSC_FooterController.getExcludeAnalytics, ApexActionController.execute:RSC_LanguageSelectorController.getLanguageOptions, ApexActionController.execute:CommonUtility.configValues, ApexActionController.execute:RSC_LanguageSelectorController.getCurrentUserLanguage X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 997159000061c394f0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:26 UTC	4703	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 36 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 43 6f 6d 70 6f 6e 65 6e 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 6f 6d 70 6f 6e 65 6e 74 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 61 72 6b 75 70 25 33 41 25 32 46 25 32 46 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 33 41 6f 31 31 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%2226%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FComponentController%2FACTION%24getComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22name%22%3A%22markup%3A%2F%2Finstrumentation%3Ao11
2024-04-16 17:43:27 UTC	441	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:27 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:27 GMT Server: sfdcedge X-SFDC-Request-Id: 997159000061c394f0
2024-04-16 17:43:27 UTC	15943	IN	Data Raw: 33 65 38 64 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 36 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 3a 6f 31 31 79 53 65 63 6f 6e 64 61 72 79 4c 6f 61 64 65 72 22 7d 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 7d 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 36 32 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 7b 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 75 73 65 72 4c 61 6e 67 75 61 67 65 43 6f 64 65 5c 22 3a Data Ascii: 3e8d{"actions":[{"id":"26;a","state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"markup://instrumentation:o11ySecondaryLoader"},"creationPath":"/*[0]"},"error":[]},{"id":"62;a","state":"SUCCESS","returnValue":"{\"data\":{\"userLanguageCode\":
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 6f 72 30 31 2e 69 6e 62 65 6e 74 61 2e 63 6f 6d 22 2c 22 68 74 74 70 0d 0a 38 31 36 62 0d 0a 73 3a 2f 2f 64 6f 63 75 73 69 67 6e 2d 2d 63 2e 76 66 2e 66 6f 72 63 65 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6d 66 65 64 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 2a 2e 63 6c 6d 2e 64 6f 63 75 73 69 67 6e 2e 6d 69 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 2a 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 2a 2e 73 70 72 69 6e 67 63 6d 2e 63 6f 6d 22 2c 22 2a 2e Data Ascii: m","https://stats.g.doubleclick.net","https://static-or01.inbenta.com","http816bs://docusign--c.vf.force.com","https://.clmfed.docusign.com","https://.clm.docusign.mil","https://.docusign.net","https://api.mixpanel.com","https://.springcm.com","*.
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 72 2e 69 73 41 62 73 6f 6c 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 3f 3a 5c 5c 2f 7c 5c 5c 77 2b 3a 29 2f 2e 74 65 73 74 28 65 29 7d 2c 69 3d 72 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 5c 5c 2f 67 2c 5c 22 2f 5c 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 7b 32 2c 7d 2f 67 2c 5c 22 2f 5c 22 29 29 2e 73 70 6c 69 74 28 5c 22 2f 5c 22 29 2c 72 3d 6e 28 65 29 2c 65 3d 5c 22 5c 22 3b 72 26 26 28 65 3d 74 2e 73 68 69 66 74 28 29 2b 5c 22 2f 5c 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 29 5c 22 2e 2e 5c 22 3d 3d 3d 74 5b 69 5d 3f 30 3c 69 26 26 5c 22 2e 2e 5c 22 21 3d 3d 74 5b Data Ascii: {var n=r.isAbsolute=function(e){return/^(?:\\/\|\\w+:)/.test(e)},i=r.normalize=function(e){var t=(e=e.replace(/\\\\/g,\"/\").replace(/\\/{2,}/g,\"/\")).split(\"/\"),r=n(e),e=\"\";r&&(e=t.shift()+\"/\");for(var i=0;i<t.length;)\"..\"===t[i]?0<i&&\"..\"!==t[
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 52 65 61 64 65 72 29 7d 6e 2e 62 75 69 6c 64 3d 5c 22 6d 69 6e 69 6d 61 6c 5c 22 2c 6e 2e 57 72 69 74 65 72 3d 65 28 33 38 29 2c 6e 2e 42 75 66 66 65 72 57 72 69 74 65 72 3d 65 28 33 39 29 2c 6e 2e 52 65 61 64 65 72 3d 65 28 32 34 29 2c 6e 2e 42 75 66 66 65 72 52 65 61 64 65 72 3d 65 28 32 35 29 2c 6e 2e 75 74 69 6c 3d 65 28 33 35 29 2c 6e 2e 72 70 63 3d 65 28 32 38 29 2c 6e 2e 72 6f 6f 74 73 3d 65 28 32 37 29 2c 6e 2e 63 6f 6e 66 69 67 75 72 65 3d 69 2c 69 28 29 7d 2c 7b 32 34 3a 32 34 2c 32 35 3a 32 35 2c 32 37 3a 32 37 2c 32 38 3a 32 38 2c 33 35 3a 33 35 2c 33 38 3a 33 38 2c 33 39 3a 33 39 7d 5d 2c 31 38 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 2e 65 78 70 6f 72 74 73 3d 61 3b 76 61 72 20 69 3d 74 28 31 35 29 2c 6f 3d 28 28 28 61 2e 70 Data Ascii: Reader)}n.build=\"minimal\",n.Writer=e(38),n.BufferWriter=e(39),n.Reader=e(24),n.BufferReader=e(25),n.util=e(35),n.rpc=e(28),n.roots=e(27),n.configure=i,i()},{24:24,25:25,27:27,28:28,35:35,38:38,39:39}],18:[function(t,r,n){r.exports=a;var i=t(15),o=(((a.p
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 2c 61 29 3a 6c 28 72 29 3a 63 28 65 2c 6e 29 29 7d 29 7d 76 61 72 20 79 3d 30 3b 70 2e 69 73 53 74 72 69 6e 67 28 72 29 26 26 28 72 3d 5b 72 5d 29 3b 66 6f 72 28 76 61 72 20 6d 2c 67 3d 30 3b 67 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 28 6d 3d 61 2e 72 65 73 6f 6c 76 65 50 61 74 68 28 5c 22 5c 22 2c 72 5b 67 5d 29 29 26 26 64 28 6d 29 3b 72 65 74 75 72 6e 20 75 3f 61 3a 28 79 7c 7c 6c 28 6e 75 6c 6c 2c 61 29 2c 65 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 70 2e 69 73 4e 6f 64 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 61 64 28 65 2c 74 2c 68 29 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 5c 22 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 Data Ascii: ,a):l(r):c(e,n))})}var y=0;p.isString(r)&&(r=[r]);for(var m,g=0;g<r.length;++g)(m=a.resolvePath(\"\",r[g]))&&d(m);return u?a:(y\|\|l(null,a),e)},c.prototype.loadSync=function(e,t){if(p.isNode)return this.load(e,t,h);throw Error(\"not supported\")},c.prototy
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 61 6c 2e 64 63 6f 64 65 49 4f 26 26 69 2e 67 6c 6f 62 61 6c 2e 64 63 6f 64 65 49 4f 2e 4c 6f 6e 67 7c 7c 69 2e 67 6c 6f 62 61 6c 2e 4c 6f 6e 67 7c 7c 69 2e 69 6e 71 75 69 72 65 28 5c 22 6c 6f 6e 67 5c 22 29 2c 69 2e 6b 65 79 32 52 65 3d 2f 5e 74 72 75 65 7c 66 61 6c 73 65 7c 30 7c 31 24 2f 2c 69 2e 6b 65 79 33 32 52 65 3d 2f 5e 2d 3f 28 3f 3a 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 29 24 2f 2c 69 2e 6b 65 79 36 34 52 65 3d 2f 5e 28 3f 3a 5b 5c 5c 5c 5c 78 30 30 2d 5c 5c 5c 5c 78 66 66 5d 7b 38 7d 7c 2d 3f 28 3f 3a 30 7c 5b 31 2d 39 5d 5b 30 2d 39 5d 2a 29 29 24 2f 2c 69 2e 6c 6f 6e 67 54 6f 48 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 69 2e 4c 6f 6e 67 42 69 74 73 2e 66 72 6f 6d 28 65 29 2e 74 6f 48 61 73 68 28 29 3a 69 2e Data Ascii: al.dcodeIO&&i.global.dcodeIO.Long\|\|i.global.Long\|\|i.inquire(\"long\"),i.key2Re=/^true\|false\|0\|1$/,i.key32Re=/^-?(?:0\|[1-9][0-9])$/,i.key64Re=/^(?:[\\\\x00-\\\\xff]{8}\|-?(?:0\|[1-9][0-9]))$/,i.longToHash=function(e){return e?i.LongBits.from(e).toHash():i.
2024-04-16 17:43:28 UTC	4328	IN	Data Raw: 65 3d 30 7d 72 65 74 75 72 6e 20 74 7d 5f 62 75 69 6c 64 50 72 6f 74 6f 45 6e 63 6f 64 65 64 43 6f 72 65 45 6e 76 65 6c 6f 70 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 73 4f 66 43 6f 72 65 45 6e 76 65 6c 6f 70 65 28 65 29 3b 63 6f 6e 73 74 20 72 3d 66 28 74 29 3b 72 65 74 75 72 6e 20 70 28 72 29 7d 72 65 63 65 69 76 65 4d 65 74 72 69 63 73 45 78 74 72 61 63 74 6f 72 73 28 65 29 7b 74 68 69 73 2e 5f 6d 65 74 72 69 63 73 45 78 74 72 61 63 74 6f 72 73 3d 65 7d 7d 63 6f 6e 73 74 20 4f 3d 33 65 34 3b 63 6c 61 73 73 20 6a 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 66 28 74 79 70 65 6f 66 20 5f 5f 6e 69 6d 62 75 73 3d 3d 3d 5c 22 75 6e 64 65 66 69 6e 65 64 5c 22 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 Data Ascii: e=0}return t}_buildProtoEncodedCoreEnvelope(e){const t=this._getContentsOfCoreEnvelope(e);const r=f(t);return p(r)}receiveMetricsExtractors(e){this._metricsExtractors=e}}const O=3e4;class j{constructor(){if(typeof __nimbus===\"undefined\"){throw new Error

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49995	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	621	OUT	GET /core/assets/js/1.0ca46fe3.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 74516 Connection: close Server: istio-envoy Date: Fri, 22 Mar 2024 05:25:10 GMT Last-Modified: Fri, 22 Mar 2024 04:57:21 GMT ETag: "3d2eecfeab24c42f510811f441fc9bcb" x-amz-server-side-encryption: AES256 x-amz-version-id: ReEtMDGHCzPScAsWw7ubL1LDhW3X_GQy Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 76 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4a9d2f26d7f571e9f468d5bd20d9ae18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: qotIKDNDI44LjXzXqrYd3_WB2aqY6KRKp2nzkxSs0Pb5R9VvazpQMg== Age: 2204297
2024-04-16 17:43:27 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 47 5a 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 7d 2c 22 2b 71 47 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 69 6e 67 4d 65 73 73 61 67 65 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 65 64 4d 65 73 73 61 67 65 7d 29 3b 76 61 72 20 61 3d 6e 28 22 64 61 34 4c 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 63 74 28 64 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 6d 5b 65 5d 7d 29 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 72 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 28 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 72 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 61 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 61 2e 70 72 65 76 3d 61 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 61 2e 70 72 65 76 3d 30 2c 61 2e 6e 65 78 74 3d 33 2c 4f 62 6a 65 63 74 28 6e 65 2e 61 29 28 65 2c 67 2e 74 6f 6b 65 6e Data Ascii: ct(d.useEffect)(function(){var e=n.filter(function(e){return!m[e]}),t=function(){var t=Object(i.a)(r.a.mark(function _callee(){var t,n;return r.a.wrap(function _callee$(a){for(;;)switch(a.prev=a.next){case 0:return a.prev=0,a.next=3,Object(ne.a)(e,g.token
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 29 2c 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 70 6f 77 65 72 2d 62 72 61 6e 64 22 7d 2c 22 44 72 69 66 74 22 29 5d 7d 29 29 7d 29 2c 62 3d 6e 28 22 56 6b 48 71 22 29 2c 67 3d 6e 28 22 48 76 68 67 22 29 3b 6e 28 22 32 56 72 57 22 29 2c 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 6f 6f 74 65 72 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 66 2e 63 29 28 67 2e 63 29 2e 73 68 6f 77 42 72 61 6e 64 69 6e 67 2c 74 3d 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2c 6e 3d 4f 62 6a 65 63 74 28 62 2e 61 29 28 29 2c 61 3d 6e 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 2c 69 3d 6e 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 54 65 78 74 2c 73 3d Data Ascii: ),u.a.createElement("span",{className:"drift-widget-power-brand"},"Drift")]}))}),b=n("VkHq"),g=n("Hvhg");n("2VrW"),t.a=function Footer(){var e=Object(f.c)(g.c).showBranding,t=void 0!==e&&e,n=Object(b.a)(),a=n.privacyPolicyLink,i=n.privacyPolicyLinkText,s=
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 61 73 74 65 64 54 65 78 74 46 72 6f 6d 46 69 6c 65 73 3a 75 2c 70 61 73 74 65 64 46 69 6c 65 73 3a 63 2c 63 6c 65 61 72 46 69 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 46 69 6c 65 73 28 29 7b 6f 28 5b 5d 29 2c 64 28 6e 75 6c 6c 29 7d 7d 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 20 75 73 65 53 65 6e 64 4d 65 73 73 61 67 65 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 7a 2e 62 29 28 29 2c 74 3d 4f 62 6a 65 63 74 28 7a 2e 63 29 28 4b 2e 61 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6d 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 68 2e 61 29 28 76 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 28 6e 29 7b 72 65 74 75 72 6e 20 76 2e 61 2e 77 72 61 70 Data Ascii: astedTextFromFiles:u,pastedFiles:c,clearFiles:function clearFiles(){o([]),d(null)}}},ae=function useSendMessage(){var e=Object(z.b)(),t=Object(z.c)(K.a);return Object(m.useCallback)(function(){var n=Object(h.a)(v.a.mark(function _callee(n){return v.a.wrap
2024-04-16 17:43:27 UTC	9973	IN	Data Raw: 28 73 29 2c 75 3d 6e 28 22 54 72 34 4c 22 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 4d 65 65 74 69 6e 67 53 63 68 65 64 75 6c 65 72 43 61 72 64 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 67 65 6e 74 49 64 2c 6e 3d 65 2e 61 64 64 69 74 69 6f 6e 61 6c 41 67 65 6e 74 73 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 5b 5d 3a 6e 2c 73 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 65 2e 64 75 72 61 74 69 6f 6e 2c 66 3d 65 2e 73 68 6f 77 52 65 63 69 70 69 65 6e 74 73 2c 6d 3d 76 6f 69 64 20 30 21 3d 3d 66 26 26 66 2c 62 3d 65 2e 6c 6f 61 64 69 6e 67 46 72 61 6d 65 2c 67 3d 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2c 70 3d 4f 62 6a 65 63 74 28 75 2e 61 29 28 29 2e 74 2c 76 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 74 2c 61 29 2c 68 3d 70 28 22 6d 65 65 74 69 6e 67 2e 73 63 68 Data Ascii: (s),u=n("Tr4L");t.a=function MeetingSchedulerCard(e){var t=e.agentId,n=e.additionalAgents,a=void 0===n?[]:n,s=e.children,d=e.duration,f=e.showRecipients,m=void 0!==f&&f,b=e.loadingFrame,g=void 0!==b&&b,p=Object(u.a)().t,v=Object(o.a)(t,a),h=p("meeting.sch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49997	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	622	OUT	GET /core/assets/js/28.caa75eae.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289394744 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 20426 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:30:36 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "481aab9660002090188fee60921b6ec7" x-amz-server-side-encryption: AES256 x-amz-version-id: mC9SawLOV8oKr2SAmrqkSOSIj6G_pv_0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 383ad280f1e2a4497aecb7ee8d8e9144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: xrOfRx6JY2aBArDOH74ub-vmx_wu_-ljwiNEv9rYJK-wtHdCYrFuFA== Age: 3352371
2024-04-16 17:43:27 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 5d 2c 7b 22 31 53 63 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 52 65 66 6c 6f 77 46 72 61 6d 65 43 6c 61 73 73 4e 61 6d 65 7d 29 3b 76 61 72 20 72 3d 6e 28 22 73 38 44 49 22 29 2c 61 3d 6e 28 22 51 74 6c 5a 22 29 2c 63 3d 6e 28 22 49 4c 51 46 22 29 2c 6f 3d 6e 28 22 67 36 65 44 22 29 2c 73 3d 6e 28 22 4a 42 74 6d 22 29 2c 69 3d 6e 2e 6e 28 73 29 2c 75 3d 6e 28 22 45 52 6b 50 22 29 2c 6c 3d 6e 28 22 45 51 78 69 22 29 2c 66 3d 21 31 3b 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;funct
2024-04-16 17:43:27 UTC	5035	IN	Data Raw: 2c 75 3d 65 2e 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 49 64 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 6f 7c 7c 72 21 3d 3d 73 3f 7b 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 22 22 3a 6f 2c 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 32 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 6f 3a 22 22 2c 6f 6c 64 50 6f 6c 69 74 65 6d 65 73 73 61 67 65 3a 6f 2c 6f 6c 64 50 6f 6c 69 74 65 4d 65 73 73 61 67 65 49 64 3a 73 2c 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3a 21 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 7d 3a 61 21 3d 3d 69 7c 7c 63 21 3d 3d 75 3f 7b 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 Data Ascii: ,u=e.assertiveMessageId;return n!==o\|\|r!==s?{politeMessage1:t.setAlternatePolite?"":o,politeMessage2:t.setAlternatePolite?o:"",oldPolitemessage:o,oldPoliteMessageId:s,setAlternatePolite:!t.setAlternatePolite}:a!==i\|\|c!==u?{assertiveMessage1:t.setAlternate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49998	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	2994	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%222153e4b9-0bdf-4540-bac2-51c1eddcf52a%22%2C%22publishedChangelistNum%22%3A193%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Cache: d5b14152447ba219 X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 9973390000bb31c6a5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=604800 Expires: Mon, 17 Apr 2023 17:43:27 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:27 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 9973390000bb31c6a5
2024-04-16 17:43:27 UTC	2657	IN	Data Raw: 61 35 35 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 31 33 32 66 61 38 64 37 2d 35 34 61 35 2d 34 39 65 37 2d 62 66 34 62 2d 37 66 37 66 30 62 38 65 38 34 35 61 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 4c 6f 67 20 69 6e 22 2c 22 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 72 67 62 28 30 2c 20 31 30 35 2c 20 32 33 36 29 22 2c 22 62 75 74 74 6f 6e 42 6f 72 64 65 72 43 6f 6c 6f 72 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 22 2c 22 6d 65 6e 75 53 74 79 6c 65 53 65 74 74 69 6e 67 73 22 3a 22 7b 5c 22 73 65 6c 65 63 74 65 64 4d 65 6e 75 53 74 79 6c 65 53 65 74 74 69 Data Ascii: a55{"actions":[{"state":"SUCCESS","returnValue":{"132fa8d7-54a5-49e7-bf4b-7f7f0b8e845a":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 0, 0, 0)","menuStyleSettings":"{\"selectedMenuStyleSetti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49999	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	1685	OUT	GET /static/111213/js/perf/stub.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominGAPage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Wed, 14 Aug 2024 17:43:27 GMT Last-Modified: Thu, 18 Dec 2014 19:28:42 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 0b216ed6748cee79c4816458fe267f6e
2024-04-16 17:43:27 UTC	1397	IN	Data Raw: 35 36 39 0d 0a 74 68 69 73 5b 22 50 65 72 66 22 5d 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 22 50 65 72 66 22 5d 2e 65 6e 61 62 6c 65 64 7c 7c 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 3d 7b 44 45 42 55 47 3a 7b 6e 61 6d 65 3a 22 44 45 42 55 47 22 2c 76 61 6c 75 65 3a 31 7d 2c 49 4e 54 45 52 4e 41 4c 3a 7b 6e 61 6d 65 3a 22 49 4e 54 45 52 4e 41 4c 22 2c 76 61 6c 75 65 3a 32 7d 2c 50 52 4f 44 55 43 54 49 4f 4e 3a 7b 6e 61 6d 65 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 76 61 6c 75 65 3a 33 7d 2c 44 49 53 41 42 4c 45 44 3a 7b 6e 61 6d 65 3a 22 44 49 53 41 42 4c 45 44 22 2c 76 61 6c 75 65 3a 34 7d 7d 3b 0a 77 69 6e 64 6f 77 2e 50 65 72 66 43 6f 6e 73 74 61 6e 74 73 3d 7b 50 41 47 45 5f Data Ascii: 569this["Perf"]&&void 0!==this["Perf"].enabled\|\|(function(window){'use strict';var a={DEBUG:{name:"DEBUG",value:1},INTERNAL:{name:"INTERNAL",value:2},PRODUCTION:{name:"PRODUCTION",value:3},DISABLED:{name:"DISABLED",value:4}};window.PerfConstants={PAGE_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50000	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	1702	OUT	GET /resource/1639078464000/zoomin_app__event_layer HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominGAPage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	444	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: text/javascript Content-Length: 95065 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:27 GMT Last-Modified: Thu, 9 Dec 2021 19:34:24 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: c314b1d3ac33c6ebad625a5c22043f7d
2024-04-16 17:43:27 UTC	15940	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 7c 7c 28 69 5b 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 3d 7b 7d 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 5b 74 5d 7c 7c 28 6f 5b 74 5d 3d 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 7b 7d 29 7d 29 28 22 76 65 72 73 69 6f 6e 73 22 2c 5b 5d 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 65 2e 76 65 72 73 69 6f 6e 2c 6d 6f 64 65 3a 72 28 33 30 29 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 39 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 Data Ascii: _core-js_shared__"]\|\|(i["__core-js_shared__"]={});(t.exports=function(t,n){return o[t]\|\|(o[t]=void 0!==n?n:{})})("versions",[]).push({version:e.version,mode:r(30)?"pure":"global",copyright:" 2019 Denis Pushkarev (zloirock.ru)"})},function(t,n,r){var e=r
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 72 2c 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 31 29 2e 70 61 72 73 65 49 6e 74 2c 69 3d 72 28 33 39 29 2e 74 72 69 6d 2c 6f 3d 72 28 36 36 29 2c 75 3d 2f 5e 5b 2d 2b 5d 3f 30 5b 78 58 5d 2f 3b 74 2e 65 78 70 6f 72 74 73 3d 38 21 3d 3d 65 28 6f 2b 22 30 38 22 29 7c 7c 32 32 21 3d 3d 65 28 6f 2b 22 30 78 31 36 22 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 69 28 53 74 72 69 6e 67 28 74 29 2c 33 29 3b 72 65 74 75 72 6e 20 65 28 72 2c 6e 3e 3e 3e 30 7c 7c 28 75 2e 74 65 73 74 28 72 29 3f 31 36 3a 31 30 29 29 7d 3a 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 31 29 2e 70 61 72 73 65 46 6c 6f 61 74 2c 69 3d Data Ascii: )}return t.apply(r,n)}},function(t,n,r){var e=r(1).parseInt,i=r(39).trim,o=r(66),u=/^[-+]?0[xX]/;t.exports=8!==e(o+"08")\|\|22!==e(o+"0x16")?function(t,n){var r=i(String(t),3);return e(r,n>>>0\|\|(u.test(r)?16:10))}:e},function(t,n,r){var e=r(1).parseFloat,i=
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 30 29 2c 69 3d 72 28 39 37 29 3b 65 28 65 2e 47 2b 65 2e 46 2a 28 70 61 72 73 65 49 6e 74 21 3d 69 29 2c 7b 70 61 72 73 65 49 6e 74 3a 69 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 30 29 2c 69 3d 72 28 39 38 29 3b 65 28 65 2e 47 2b 65 2e 46 2a 28 70 61 72 73 65 46 6c 6f 61 74 21 3d 69 29 2c 7b 70 61 72 73 65 46 6c 6f 61 74 3a 69 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 31 29 2c 69 3d 72 28 31 33 29 2c 6f 3d 72 28 32 33 29 2c 75 3d 72 28 36 37 29 2c 63 3d 72 28 Data Ascii: rototype===t)return!0;return!1}})},function(t,n,r){var e=r(0),i=r(97);e(e.G+e.F(parseInt!=i),{parseInt:i})},function(t,n,r){var e=r(0),i=r(98);e(e.G+e.F(parseFloat!=i),{parseFloat:i})},function(t,n,r){"use strict";var e=r(1),i=r(13),o=r(23),u=r(67),c=r(
2024-04-16 17:43:27 UTC	16384	IN	Data Raw: 69 66 28 21 61 2e 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 75 28 61 2c 66 29 3b 76 61 72 20 73 3d 61 2e 75 6e 69 63 6f 64 65 3b 61 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 66 6f 72 28 76 61 72 20 6c 2c 68 3d 5b 5d 2c 70 3d 30 3b 6e 75 6c 6c 21 3d 3d 28 6c 3d 75 28 61 2c 66 29 29 3b 29 7b 76 61 72 20 76 3d 53 74 72 69 6e 67 28 6c 5b 30 5d 29 3b 68 5b 70 5d 3d 76 2c 22 22 3d 3d 3d 76 26 26 28 61 2e 6c 61 73 74 49 6e 64 65 78 3d 6f 28 66 2c 69 28 61 2e 6c 61 73 74 49 6e 64 65 78 29 2c 73 29 29 2c 70 2b 2b 7d 72 65 74 75 72 6e 20 30 3d 3d 3d 70 3f 6e 75 6c 6c 3a 68 7d 5d 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 33 29 2c 69 3d 72 28 31 30 29 2c 6f 3d 72 28 36 29 2c 75 3d 72 28 Data Ascii: if(!a.global)return u(a,f);var s=a.unicode;a.lastIndex=0;for(var l,h=[],p=0;null!==(l=u(a,f));){var v=String(l[0]);h[p]=v,""===v&&(a.lastIndex=o(f,i(a.lastIndex),s)),p++}return 0===p?null:h}]}))},function(t,n,r){"use strict";var e=r(3),i=r(10),o=r(6),u=r(
2024-04-16 17:43:27 UTC	13589	IN	Data Raw: 65 74 75 72 6e 20 6c 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 72 2e 63 61 6c 6c 28 6c 2c 22 5f 5f 61 77 61 69 74 22 29 3f 6e 2e 72 65 73 6f 6c 76 65 28 6c 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 22 6e 65 78 74 22 2c 74 2c 75 2c 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 22 74 68 72 6f 77 22 2c 74 2c 75 2c 63 29 7d 29 29 3a 6e 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 2e 76 61 6c 75 65 3d 74 2c 75 28 73 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 22 74 68 72 6f 77 22 2c 74 2c 75 2c 63 29 7d 29 29 7d 63 28 66 2e 61 72 67 29 7d 28 69 2c 6f 2c 65 2c 75 29 7d 29 29 7d 72 65 74 75 72 6e Data Ascii: eturn l&&"object"==typeof l&&r.call(l,"__await")?n.resolve(l.__await).then((function(t){e("next",t,u,c)}),(function(t){e("throw",t,u,c)})):n.resolve(l).then((function(t){s.value=t,u(s)}),(function(t){return e("throw",t,u,c)}))}c(f.arg)}(i,o,e,u)}))}return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50001	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	1492	OUT	GET /resource/1639079103000/zoomin_app__iepolyfills HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	432	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: text/javascript Content-Length: 595 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:27 GMT Last-Modified: Thu, 9 Dec 2021 19:34:24 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 41e42b43d444e0d84b728adcf25fc728
2024-04-16 17:43:27 UTC	595	IN	Data Raw: 2f 2f 20 50 6f 6c 79 66 69 6c 6c 20 66 6f 72 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 49 45 20 31 31 0a 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 21 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 69 66 20 28 74 61 72 67 65 74 20 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 43 61 6e 6e 6f 74 20 63 6f 6e 76 65 72 74 20 75 6e 64 65 66 69 6e 65 64 20 6f 72 20 6e 75 6c 6c 20 74 6f 20 6f 62 6a 65 63 74 27 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 74 61 72 67 65 74 20 3d 20 4f 62 6a Data Ascii: // Polyfill for Object.assign IE 11if (typeof Object.assign != 'function') { Object.assign = function(target) { 'use strict'; if (target == null) { throw new TypeError('Cannot convert undefined or null to object'); } target = Obj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50002	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	1703	OUT	GET /jslibrary/1698336664248/sfdc/NetworkTracking.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominGAPage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Wed, 14 Aug 2024 17:43:27 GMT Last-Modified: Tue, 15 Aug 2023 06:08:04 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 757e21f85d46e52c0197d226ce3a814e
2024-04-16 17:43:27 UTC	3158	IN	Data Raw: 63 34 61 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 76 61 72 20 4e 65 74 77 6f 72 6b 54 72 61 63 6b 69 6e 67 3d 7b 74 69 6d 65 72 49 64 3a 6e 75 6c 6c 2c 71 75 65 75 65 3a 5b 5d 2c 68 61 73 50 65 72 66 4c 6f 67 67 65 64 3a 21 31 2c 63 6f 6e 66 69 67 3a 7b 55 52 4c 3a 22 22 2c 44 45 46 41 55 4c 54 5f 4c 4f 47 5f 4e 41 4d 45 3a 22 22 Data Ascii: c4a/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */var NetworkTracking={timerId:null,queue:[],hasPerfLogged:!1,config:{URL:"",DEFAULT_LOG_NAME:""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50003	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	2642	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableAttributeLoaderController%2FACTION%24getComponentAttributes%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fsiteforce%3ApageLoader%22%2C%22params%22%3A%7B%22viewOrThemeLayoutId%22%3A%222153e4b9-0bdf-4540-bac2-51c1eddcf52a%22%2C%22publishedChangelistNum%22%3A193%2C%22audienceKey%22%3A%2211FxOYiYfpMxmANj4kGJzg%22%7D%2C%22version%22%3A%2260.0%22%2C%22storable%22%3Atrue%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	449	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=604800 Expires: Mon, 17 Apr 2023 17:43:27 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:27 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 7d65477db5c4dd1240b5862c84ef9666
2024-04-16 17:43:28 UTC	2657	IN	Data Raw: 61 35 35 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 31 33 32 66 61 38 64 37 2d 35 34 61 35 2d 34 39 65 37 2d 62 66 34 62 2d 37 66 37 66 30 62 38 65 38 34 35 61 22 3a 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 4c 6f 67 20 69 6e 22 2c 22 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 72 67 62 28 30 2c 20 31 30 35 2c 20 32 33 36 29 22 2c 22 62 75 74 74 6f 6e 42 6f 72 64 65 72 43 6f 6c 6f 72 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 22 2c 22 6d 65 6e 75 53 74 79 6c 65 53 65 74 74 69 6e 67 73 22 3a 22 7b 5c 22 73 65 6c 65 63 74 65 64 4d 65 6e 75 53 74 79 6c 65 53 65 74 74 69 Data Ascii: a55{"actions":[{"state":"SUCCESS","returnValue":{"132fa8d7-54a5-49e7-bf4b-7f7f0b8e845a":{"attributes":{"buttonText":"Log in","buttonBackgroundColor":"rgb(0, 105, 236)","buttonBorderColor":"rgba(0, 0, 0, 0)","menuStyleSettings":"{\"selectedMenuStyleSetti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50004	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	2299	OUT	POST /s/sfsites/aura?r=4&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 10864000000092fbab User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	1072	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 32 39 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 66 6f 72 63 65 43 6f 6d 6d 75 6e 69 74 79 2e 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 2e 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 44 61 74 61 50 72 6f 76 69 64 65 72 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 25 32 32 25 32 43 25 32 32 63 61 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22129%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.communities.components.aura.components.forceCommunity.navigationMenu.NavigationMenuDataProviderController%2FACTION%24getNavigationMenu%22%2C%22ca
2024-04-16 17:43:28 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:27 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:27 GMT Server-Timing: Total;dur=282 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 10864000000092fbab
2024-04-16 17:43:28 UTC	1396	IN	Data Raw: 35 36 38 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 32 39 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 65 78 74 65 72 6e 61 6c 4d 65 6e 75 49 74 65 6d 73 22 3a 5b 5d 2c 22 69 6e 74 65 72 6e 61 6c 4d 65 6e 75 49 74 65 6d 42 79 49 64 22 3a 7b 7d 7d 2c 22 65 72 72 6f 72 22 3a 5b 5d 2c 22 73 74 6f 72 61 62 6c 65 22 3a 74 72 75 65 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f Data Ascii: 568{"actions":[{"id":"129;a","state":"SUCCESS","returnValue":{"externalMenuItems":[],"internalMenuItemById":{}},"error":[],"storable":true}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDRO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50005	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	2221	OUT	POST /s/sfsites/aura?r=5&other.CSP_AuraMethods.getAlertLocalized=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 11006890000c9bec9f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:27 UTC	780	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 34 32 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 70 65 78 25 33 41 25 32 46 25 32 46 43 53 50 5f 41 75 72 61 4d 65 74 68 6f 64 73 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 41 6c 65 72 74 4c 6f 63 61 6c 69 7a 65 64 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 6d 61 72 6b 75 70 25 33 41 25 32 46 25 32 46 63 25 33 41 43 53 50 5f 43 6f 6d 6d 75 6e 69 74 79 42 75 74 74 65 72 42 61 72 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 61 6c 65 72 74 4c 6f 63 61 74 69 6f 6e Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22142%3Ba%22%2C%22descriptor%22%3A%22apex%3A%2F%2FCSP_AuraMethods%2FACTION%24getAlertLocalized%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fc%3ACSP_CommunityButterBar%22%2C%22params%22%3A%7B%22alertLocation
2024-04-16 17:43:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server-Timing: Total;dur=51 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 11006890000c9bec9f
2024-04-16 17:43:28 UTC	1332	IN	Data Raw: 35 32 38 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 34 32 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f 57 44 64 4c 4f 47 74 58 63 54 5a 71 53 57 5a 69 55 31 39 5a 61 44 4a 46 64 7a 6b 34 62 6b 6b 30 62 56 4a 68 5a 47 4a 43 57 45 39 6d 55 43 31 49 5a 58 5a 52 62 6d 63 79 4e 44 67 75 4d 54 Data Ascii: 528{"actions":[{"id":"142;a","state":"SUCCESS","returnValue":null,"error":[]}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50006	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	3056	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22c7651b2b-36b1-437e-8cfb-f67c34b7b347%22%2C%22routeType%22%3A%22custom-contact-supports%22%2C%22themeLayoutType%22%3A%22Inner%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22rsc_301%22%3A%22%22%2C%22viewid%22%3A%221d92fa59-064f-4fd0-bcea-a400d414b45f%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	447	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=1800 Expires: Mon, 17 Apr 2023 17:43:28 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:28 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: be4110c1566a4dbd56653ed0c25b0a20
2024-04-16 17:43:28 UTC	15937	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6c 61 79 6f 75 74 3a 2f 2f 73 69 74 65 66 6f 72 63 65 2d 67 65 6e 65 72 61 74 65 64 70 61 67 65 2d 31 64 39 32 66 61 35 39 2d 30 36 34 66 2d 34 66 64 30 2d 62 63 65 61 2d 61 34 30 30 64 34 31 34 62 34 35 66 2e 63 31 39 33 22 7d 2c 22 6f 72 69 67 69 6e 61 6c 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 70 61 67 65 4c 6f 61 64 65 72 22 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 70 61 67 65 4c Data Ascii: 8000{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-1d92fa59-064f-4fd0-bcea-a400d414b45f.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/*[0]","attributes":{"values":{"pageL
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 63 3a 43 53 50 5f 43 6f 6d 6d 75 6e 69 74 79 42 75 74 74 65 72 42 61 72 22 7d 7d 5d 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 63 6f 6e 74 65 6e 74 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 72 75 6e 74 69 6d 65 52 65 67 69 6f 6e 22 7d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 69 74 65 6d 49 64 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 69 74 65 6d 49 64 22 2c 22 76 61 6c 75 65 22 3a 22 66 30 34 30 31 30 34 36 2d 30 65 35 38 2d Data Ascii: f":{"descriptor":"markup://c:CSP_CommunityButterBar"}}]}}}}]}}}}]},"content":{"descriptor":"content","value":[{"componentDef":{"descriptor":"markup://siteforce:runtimeRegion"},"attributes":{"values":{"itemId":{"descriptor":"itemId","value":"f0401046-0e58-
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 62 2c 63 29 7b 21 24 41 2e 75 74 69 6c 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 28 61 2e 67 65 74 28 5c 22 76 2e 72 65 63 6f 72 64 49 64 5c 22 29 29 26 26 21 24 41 2e 75 74 69 6c 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 28 61 2e 67 65 74 28 5c 22 76 2e 6d 6f 64 65 5c 22 29 29 26 26 63 2e 6c 6f 61 64 52 65 63 6f 72 64 28 61 2c 24 41 2e 75 74 69 6c 2e 67 65 74 42 6f 6f 6c 65 61 6e 56 61 6c 75 65 28 61 2e 67 65 74 28 5c 22 76 2e 69 67 6e 6f 72 65 45 78 69 73 74 69 6e 67 41 63 74 69 6f 6e 5c 22 29 29 29 7d 2c 67 65 74 4e 65 77 52 65 63 6f 72 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 2e 72 65 63 6f 72 64 4c 69 62 2e 75 74 69 6c 2e 76 61 6c 69 64 61 74 65 4d 6f 64 65 43 61 6e 43 61 6c 6c 4d 65 74 68 6f 64 28 61 2c 5c 22 Data Ascii: b,c){!$A.util.isUndefinedOrNull(a.get(\"v.recordId\"))&&!$A.util.isUndefinedOrNull(a.get(\"v.mode\"))&&c.loadRecord(a,$A.util.getBooleanValue(a.get(\"v.ignoreExistingAction\")))},getNewRecord:function(a,b,c){c.recordLib.util.validateModeCanCallMethod(a,\"
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 22 6d 66 72 61 63 5c 22 2c 5c 22 6d 67 6c 79 70 68 5c 22 2c 5c 22 6d 69 5c 22 2c 5c 22 6d 6c 61 62 65 6c 65 64 74 72 5c 22 2c 5c 22 6d 6d 75 6c 74 69 73 63 72 69 70 74 73 5c 22 2c 5c 22 6d 6e 5c 22 2c 5c 22 6d 6f 5c 22 2c 5c 22 6d 6f 76 65 72 5c 22 2c 5c 22 6d 70 61 64 64 65 64 5c 22 2c 5c 22 6d 70 68 61 6e 74 6f 6d 5c 22 2c 5c 22 6d 72 6f 6f 74 5c 22 2c 5c 22 6d 72 6f 77 5c 22 2c 5c 22 6d 73 5c 22 2c 5c 22 6d 73 70 61 63 65 5c 22 2c 5c 22 6d 73 71 72 74 5c 22 2c 5c 22 6d 73 74 79 6c 65 5c 22 2c 5c 22 6d 73 75 62 5c 22 2c 5c 22 6d 73 75 70 5c 22 2c 5c 22 6d 73 75 62 73 75 70 5c 22 2c 5c 22 6d 74 61 62 6c 65 5c 22 2c 5c 22 6d 74 64 5c 22 2c 5c 22 6d 74 65 78 74 5c 22 2c 5c 22 6d 74 72 5c 22 2c 5c 22 6d 75 6e 64 65 72 5c 22 2c 5c 22 6d 75 6e 64 65 72 6f 76 Data Ascii: "mfrac\",\"mglyph\",\"mi\",\"mlabeledtr\",\"mmultiscripts\",\"mn\",\"mo\",\"mover\",\"mpadded\",\"mphantom\",\"mroot\",\"mrow\",\"ms\",\"mspace\",\"msqrt\",\"mstyle\",\"msub\",\"msup\",\"msubsup\",\"mtable\",\"mtd\",\"mtext\",\"mtr\",\"munder\",\"munderov
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 61 6c 75 65 3a 74 72 75 65 7d 29 7d 29 3b 5c 6e 7d 22 2c 22 63 65 22 3a 22 6c 69 67 68 74 6e 69 6e 67 2d 70 75 72 69 66 79 2d 6c 69 62 22 2c 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 6c 69 67 68 74 6e 69 6e 67 3a 70 75 72 69 66 79 4c 69 62 22 2c 22 6e 22 3a 22 6c 69 67 68 74 6e 69 6e 67 2f 70 75 72 69 66 79 4c 69 62 22 7d 2c 7b 22 78 73 22 3a 22 50 22 2c 22 63 6f 22 3a 22 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 6c 69 67 68 74 6e 69 6e 67 3a 70 72 69 6d 69 74 69 76 65 49 6e 70 75 74 43 68 65 63 6b 62 6f 78 42 75 74 74 6f 6e 27 2c 20 5c 22 6c 69 67 68 74 6e 69 6e 67 2f 70 72 69 6d 69 74 69 76 65 49 6e 70 75 74 43 Data Ascii: alue:true})});\n}","ce":"lightning-purify-lib","descriptor":"markup://lightning:purifyLib","n":"lightning/purifyLib"},{"xs":"P","co":"function() { $A.componentService.addModule('markup://lightning:primitiveInputCheckboxButton', \"lightning/primitiveInputC
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 2e 68 6f 75 72 3d 30 3b 74 68 69 73 2e 6d 69 6e 75 74 65 3d 30 3b 74 68 69 73 2e 73 65 63 6f 6e 64 3d 30 3b 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 3d 30 7d 67 65 74 44 61 74 65 28 65 3d 32 65 33 29 7b 69 66 28 74 68 69 73 2e 79 65 61 72 3c 31 30 30 26 26 74 68 69 73 2e 79 65 61 72 3e 3d 30 29 7b 74 68 69 73 2e 79 65 61 72 2b 3d 65 7d 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 79 65 61 72 2c 74 68 69 73 2e 6d 6f 6e 74 68 2d 31 2c 74 68 69 73 2e 64 61 79 2c 74 68 69 73 2e 68 6f 75 72 2c 74 68 69 73 2e 6d 69 6e 75 74 65 2c 74 68 69 73 2e 73 65 63 6f 6e 64 2c 74 68 69 73 2e 6d 69 6c 6c 69 73 65 63 6f 6e 64 29 3b 69 66 28 74 68 69 73 2e 74 69 6d 65 5a 6f 6e 65 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 Data Ascii: .hour=0;this.minute=0;this.second=0;this.millisecond=0}getDate(e=2e3){if(this.year<100&&this.year>=0){this.year+=e}const t=new Date(this.year,this.month-1,this.day,this.hour,this.minute,this.second,this.millisecond);if(this.timeZone){const e=t.getTimezone
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 65 2c 5c 22 73 6c 64 73 2d 69 6e 70 75 74 5f 5f 69 63 6f 6e 5f 72 69 67 68 74 5c 22 3a 74 72 75 65 7d 3b 63 6f 6e 73 74 20 55 3d 7b 70 72 6f 70 73 3a 7b 69 63 6f 6e 4e 61 6d 65 3a 5c 22 75 74 69 6c 69 74 79 3a 63 6c 6f 73 65 5c 22 2c 76 61 72 69 61 6e 74 3a 5c 22 62 61 72 65 5c 22 2c 73 76 67 43 6c 61 73 73 3a 5c 22 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 5c 22 7d 2c 6b 65 79 3a 31 31 7d 3b 63 6f 6e 73 74 20 7a 3d 7b 63 6c 61 73 73 4d 61 70 3a 7b 5c 22 73 6c 64 73 2d 61 73 73 69 73 74 69 76 65 2d 74 65 78 74 5c 22 3a 74 72 75 65 7d 2c 6b 65 79 3a 31 32 7d 3b 63 6f 6e 73 74 20 46 3d 7b 63 6c 61 73 73 4d 61 70 3a 7b 5c 22 73 6c 64 73 2d 69 6e 70 75 74 5f 5f 69 63 6f 6e 2d 67 72 6f 75 70 5c 22 3a 74 72 75 65 2c 5c 22 73 6c 64 73 2d 69 6e 70 75 74 Data Ascii: e,\"slds-input__icon_right\":true};const U={props:{iconName:\"utility:close\",variant:\"bare\",svgClass:\"slds-button__icon\"},key:11};const z={classMap:{\"slds-assistive-text\":true},key:12};const F={classMap:{\"slds-input__icon-group\":true,\"slds-input
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 4f 72 4c 61 62 65 6c 56 61 72 69 61 6e 74 28 29 7b 72 65 74 75 72 6e 5b 67 2e 56 41 52 49 41 4e 54 2e 53 54 41 4e 44 41 52 44 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 49 4e 4c 49 4e 45 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 53 54 41 43 4b 45 44 2c 67 2e 56 41 52 49 41 4e 54 2e 4c 41 42 45 4c 5f 48 49 44 44 45 4e 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 76 61 72 69 61 6e 74 29 7d 67 65 74 20 69 73 44 65 66 61 75 6c 74 52 65 61 64 4f 6e 6c 79 54 79 70 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 53 74 61 6e 64 61 72 64 4f 72 4c 61 62 65 6c 56 61 72 69 61 6e 74 7c 7c 74 68 69 73 2e 68 61 73 49 6e 70 75 74 50 69 6c 6c 7d 67 65 74 20 69 73 55 73 65 72 49 6e 70 75 74 44 69 73 61 62 6c 65 64 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: OrLabelVariant(){return[g.VARIANT.STANDARD,g.VARIANT.LABEL_INLINE,g.VARIANT.LABEL_STACKED,g.VARIANT.LABEL_HIDDEN].includes(this.variant)}get isDefaultReadOnlyTypes(){return this.isStandardOrLabelVariant\|\|this.hasInputPill}get isUserInputDisabled(){return
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 22 63 68 65 63 6b 62 6f 78 5c 22 29 2c 70 61 72 74 3a 5c 22 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 5c 22 7d 2c 6b 65 79 3a 30 7d 2c 5b 74 2e 72 65 71 75 69 72 65 64 3f 6e 28 5c 22 61 62 62 72 5c 22 2c 7b 63 6c 61 73 73 4d 61 70 3a 70 2c 61 74 74 72 73 3a 7b 74 69 74 6c 65 3a 74 2e 6c 61 62 65 6c 52 65 71 75 69 72 65 64 7d 2c 6b 65 79 3a 31 7d 2c 5b 73 28 5c 22 2a 5c 22 29 5d 29 3a 6e 75 6c 6c 2c 6e 28 5c 22 73 70 61 6e 5c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2e 63 6f 6d 70 75 74 65 64 4c 61 62 65 6c 43 6c 61 73 73 2c 6b 65 79 3a 32 7d 2c 5b 73 28 72 28 74 2e 6c 61 62 65 6c 29 29 5d 29 5d 29 3a 6e 75 6c 6c 2c 21 74 2e 69 73 53 74 61 6e 64 61 72 64 56 61 72 69 61 6e 74 3f 74 2e 66 69 65 6c 64 4c 65 76 65 6c 48 65 6c 70 3f 64 28 5c 22 6c 69 67 68 Data Ascii: "checkbox\"),part:\"label-container\"},key:0},[t.required?n(\"abbr\",{classMap:p,attrs:{title:t.labelRequired},key:1},[s(\"*\")]):null,n(\"span\",{className:t.computedLabelClass,key:2},[s(r(t.label))])]):null,!t.isStandardVariant?t.fieldLevelHelp?d(\"ligh
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 63 6f 6e 73 74 20 73 3d 6e 65 77 20 64 2e 53 68 6f 77 54 6f 61 73 74 45 76 65 6e 74 28 7b 2e 2e 2e 65 2c 74 6f 61 73 74 3a 74 68 69 73 2c 73 6f 75 72 63 65 3a 74 7d 29 3b 69 66 28 74 29 7b 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 7d 65 6c 73 65 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 29 7d 7d 7d 72 65 5b 72 2e 69 6e 73 74 61 6e 63 65 4e 61 6d 65 5d 3d 5c 22 6c 69 67 68 74 6e 69 6e 67 2d 74 6f 61 73 74 5c 22 3b 72 65 5b 72 2e 70 72 6f 70 65 72 74 69 65 73 5d 3d 5b 5c 22 76 61 72 69 61 6e 74 5c 22 2c 5c 22 6d 6f 64 65 5c 22 2c 5c 22 6c 61 62 65 6c 5c 22 2c 5c 22 6c 61 62 65 6c 4c 69 6e 6b 73 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 4c 69 6e 6b 73 5c 22 5d 3b 72 65 Data Ascii: const s=new d.ShowToastEvent({...e,toast:this,source:t});if(t){t.dispatchEvent(s)}else{document.body.dispatchEvent(s)}}}re[r.instanceName]=\"lightning-toast\";re[r.properties]=[\"variant\",\"mode\",\"label\",\"labelLinks\",\"message\",\"messageLinks\"];re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50007	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	1376	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:43:28 UTC	246	IN	HTTP/1.1 204 No Content Date: Tue, 16 Apr 2024 17:43:28 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50008	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289406970&PageStart=1713289396931&PrevBundleTime=1713289405397&LastActivity=2752&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 315 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	315	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 90 d1 4a c3 30 14 86 5f 25 9e ab 0d 62 9a 34 5d da 74 22 8c 39 14 e6 54 58 a5 88 ec a2 6b b3 35 2c 6b 6b db ad ea d8 bb 9b 81 17 13 14 24 e7 22 9c f3 fd 9c 2f 39 c0 5c bd 41 e8 61 88 73 55 40 28 98 1b 60 98 ec db 06 c2 d7 03 4c 75 91 41 c8 28 c5 30 aa d7 a7 1e ec 75 a3 97 46 c1 e2 3c 72 c4 bf b2 b9 ce 32 8b fc 81 4a 79 46 b6 6d d5 84 8e d3 75 1d c9 ca 74 d7 e8 75 41 d2 72 eb 54 b5 de 27 e9 07 e0 7f 20 cc 15 1c 4b ea db 4b 40 31 a3 ae 7d 16 23 9c 50 9b b6 75 75 71 f3 38 8e 5e 9e 26 28 6f b7 e6 1a 70 40 b9 77 9a 30 9f 71 37 90 5c 0a c9 19 06 55 5c 3e cf b1 f5 c5 30 2b 3f b5 31 89 33 20 14 f5 62 6b 5d 76 0d 7a 88 10 a3 84 0e 91 6d 08 6f 88 de 85 d7 47 a3 aa 32 2a 56 cb a9 6e 9d 01 f7 09 17 a8 37 bd 8b 66 f7 18 19 bd 51 e8 56 Data Ascii: J0_%b4]t"9TXk5,kk$"/9\AasU@(`LuA(0uF<r2JyFmutuArT' KK@1}#Puuq8^&(op@w0q7\U\>0+?13 bk]vzmoG2*Vn7fQV
2024-04-16 17:43:28 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:28 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 38 31 34 37 7d 0a Data Ascii: {"BundleTime":1713289408147}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50009	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	883	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=1&ClientTime=1713289407037&PageStart=1713289404678&PrevBundleTime=0&LastActivity=2121&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 157082 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 0b 9b db 44 b6 28 fa 57 7c 92 8f 3b 04 da 8e 25 bf bb 37 9c 1d 02 0c 99 1d 18 26 1d 06 86 c7 c7 27 db 72 5b 13 d9 32 92 dc 9d a6 3f f6 5f 3b 3f e9 fc 85 5b 6f ad aa 5a 55 2a b9 3b b3 99 7b 21 10 ba a5 aa 52 3d 56 ad f7 e3 ee d1 65 fa cb a3 f3 e8 ec d1 b7 db 74 cf 7e f8 ec ba ae 1e 9d ff 70 f7 e8 bf b2 fd fa d1 79 3c 39 7b f4 ac bc a2 8f 1e 6d eb fa 50 9d 3f 7d 5a 1d 0f 87 a2 ac 07 eb 62 75 ac b2 ab fd 60 55 ec 9e 56 4f 57 c5 be 4e 56 f5 25 7f fb bf f3 64 7f 75 4c ae d2 8f fa fd 65 5e ac de a4 eb 7e ff ff 29 ab d5 cf a3 61 f4 e8 ec d1 7f fc af 4f ff fa fc f5 3f be fe ac b7 ad 77 f9 c7 e4 c9 89 c3 a7 fb 9f bf b9 04 03 3f fa 49 ad e6 b7 33 b9 8c 79 b4 98 ab 85 6c 92 bc 4a cf 22 bc dd bd 97 6b ce 67 9f 5c 67 57 49 9d a2 f3 Data Ascii: D(W\|;%7&'r[2?_;?[oZU*;{!R=Vet~py<9{mP?}Zbu`UVOWNV%duLe^~)aO?w?I3ylJ"kg\gWI
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 9d 95 a6 ca 47 9b 84 4e 44 13 15 86 06 89 76 e4 d7 c7 d0 3c 46 0f 60 9d 3c a5 7b a9 28 20 af 9c 33 a3 47 a2 65 7a 69 a3 57 6f 1b 99 62 0f d2 3b 8b ed f6 f6 1e ec 0b 82 67 ab 63 5e 57 10 b0 ed 3e 7c ab 34 aa eb 4d 3f ad f1 08 53 17 89 66 78 73 57 ac 93 1c 26 70 70 f8 44 88 62 bf 5d 6b e9 74 af bd e3 eb c1 12 4c c2 e6 6d eb 64 78 77 7b c3 96 0a 6f 04 cc 27 e4 db 49 ab bf 80 10 80 c1 60 f6 31 33 b5 91 c8 dd d3 3e 2c e0 2c 04 23 a0 a7 75 d2 81 0c 96 bc 12 18 d6 95 28 c0 56 39 ca 9b a6 6a 1b 41 f6 d5 3f 53 45 8b 09 25 c9 0d e8 87 9f 9e 32 66 f2 b7 1f f7 3d f0 4f 33 b2 cc e0 ca e1 50 ff de 99 de c9 d7 51 93 66 3a f4 c3 14 99 0c a1 34 9a 92 d3 47 2b 58 d9 1f 8a df 22 02 b7 42 3b 7c fa 70 02 e4 18 82 e5 42 a7 3d d4 59 87 b1 04 36 44 26 74 c2 c4 24 d0 3e cc 68 fc Data Ascii: GNDv<F`<{( 3GeziWob;gc^W>\|4M?SfxsW&ppDb]ktLmdxw{o'I`13>,,#u(V9jA?SE%2f=O3PQf:4G+X"B;\|pB=Y6D&t$>h
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: a6 2a 0a 91 bc d6 69 4a 29 5b a1 b7 65 c0 96 87 a8 2d ce e2 fc 4d de e0 a5 d8 6c b6 22 dd a4 07 ae 8d d8 87 0f 16 78 35 67 be 62 d0 d4 24 fe 4f 8b 60 2b 12 b3 0a 58 96 6a a8 c1 03 d0 fa 0a d7 50 50 8f e4 96 7b 0d 05 18 38 c9 31 30 2f 03 9a e7 a6 e7 e3 28 79 7e d6 4e c7 e9 31 12 d9 87 12 11 cd 7e 36 1a 32 a1 a2 30 e9 83 db 13 f4 54 ec 82 0b c2 6b d8 46 1c d0 37 b1 22 80 1c 18 95 3a ed 68 e4 9d 1e c8 1b 52 a2 93 f8 e9 dc d9 54 37 65 66 46 f6 27 fd fc fd 90 72 b9 e9 fe 15 b0 a6 ba fb 59 95 ef d7 8e a9 2c f4 f3 3b 9e d7 0d b2 6c 77 99 fb c5 ed f6 87 33 ac a1 d3 fa a0 6b 7e d1 d0 d5 ca 3e 09 0a 81 02 2a 11 e5 25 ab be 26 2c a0 d8 9d 78 ec 1a 2e 0b c7 75 0e 1b 97 16 b9 5b bd 08 09 d8 25 61 6b 55 45 5f 9d fb 32 95 0d 1c 76 d1 82 ec 22 4b 39 23 75 b0 ee 5c 77 00 Data Ascii: iJ)[e-Ml"x5gb$O`+XjPP{810/(y~N1~620TkF7":hRT7efF'rY,;lw3k~>%&,x.u[%akUE_2v"K9#u\w
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 38 d6 f1 73 35 bd 14 b2 5d 96 48 2c e9 f0 a4 ec 34 d6 85 37 12 d8 12 53 69 55 13 26 b1 e6 61 7b 6e a7 d9 cf 43 50 fd 26 fd c2 18 28 db 3e 07 a1 9d 8a 46 60 c1 67 2e a8 6b e0 25 aa 3e 88 84 17 7c fd 16 90 c5 39 f0 b7 ba b6 08 5e a1 ea d7 e0 05 ba 44 88 4f 4d fe 62 0e 4f d5 f7 4d 49 49 e0 6e 03 97 37 9f 08 9b 8d bf 31 33 01 11 67 53 3e de ed 54 ac 32 b7 ea be 50 51 26 15 c2 d1 55 8c 0a d7 76 15 2f 0b fe 9e 2b 8c 1a 48 76 7b fc f2 60 46 c4 82 70 27 1e 6d 01 21 77 00 f8 eb 5e af f7 38 8c 8d d3 6d 8a 5b aa 36 ce 16 71 73 eb c2 98 e1 6d 25 06 e5 a7 92 16 a7 24 87 52 12 a5 6c 47 b3 7e b9 1d 57 b5 6c 5d 71 29 cd 81 54 c5 2c 05 f9 eb 01 18 54 50 df 7d 67 bc 8f cd 07 62 6f 00 e9 9f a9 1e 42 42 2d 1d 5b f4 0a 38 94 f5 bc c9 00 71 13 67 5b 31 3d 4a 94 e3 f8 41 2d 94 Data Ascii: 8s5]H,47SiU&a{nCP&(>F`g.k%>\|9^DOMbOMIIn713gS>T2PQ&Uv/+Hv{`Fp'm!w^8m[6qsm%$RlG~Wl]q)T,TP}gboBB-[8qg[1=JA-
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 8b fa d7 a1 04 b9 e6 2d 63 5c 40 20 7e 59 ef f7 b7 ad 76 45 ca 4c 5e 04 f3 a4 a4 c3 80 22 9e 2d 0a c9 d4 6f b2 ee 6e 99 0e 64 26 32 c1 e8 61 32 e0 b2 4e 0b a5 86 6e 5e 18 3b 1f d8 e1 c3 17 90 1a 74 8d db 15 ba 83 09 77 da 3f 89 8c c3 15 a1 10 9a ed bd f8 3d 78 a0 81 d0 f6 06 a4 f8 72 b4 bb a3 4e c0 c6 7f 50 d4 3b 9a e0 77 22 15 ae 07 5f 2b dc f2 ac 3b 80 3e bf b5 9c a8 0d 4b 53 f3 ed a3 8d f3 db 93 ab d9 51 b1 02 0a 7d 3d ab 1d 34 f0 63 95 2d e9 36 1c 91 ac c3 10 7b 05 b9 1a f5 ab fd 24 b7 f0 74 62 e2 ba 39 b7 5d ff e4 42 9d 21 13 db 50 3e 37 a0 0f bc 54 c4 91 e0 24 b3 94 76 3e fd 3e 9f 13 9a a3 f0 53 32 c7 e8 04 8a 44 c3 2d e1 5b 2e ca 65 ec 9b 56 9f 39 2e e4 e1 61 67 9e 24 79 f9 73 7e 0a b2 89 a2 fc 34 f8 6b 13 88 20 2b 6b 43 9e 06 ea ab a4 12 45 dd 94 Data Ascii: -c\@ ~YvEL^"-ond&2a2Nn^;tw?=xrNP;w"_+;>KSQ}=4c-6{$tb9]B!P>7T$v>>S2D-[.eV9.ag$ys~4k +kCE
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 45 45 e0 56 f0 55 d5 93 b2 02 a1 03 0a 52 dd 88 12 1c a6 72 c4 71 83 be 81 e2 03 3c d4 95 97 7a 5f d8 b5 e2 9d 5a c3 4f 99 ac 20 a3 36 98 81 4a 71 cc 55 0c 37 b6 47 e8 a3 80 b5 0c a3 cf 75 71 0f d0 60 ac 5b 05 a1 6f f0 e8 d8 d6 02 4c 9c fb 93 05 64 1e ef 3c db 89 47 fd ab f1 13 4d 91 34 98 34 d2 20 f2 c4 97 c4 16 5b 34 94 c9 ff 7e 77 7b fc 88 98 da 69 d9 f5 2e 13 96 15 03 f5 e3 3a ff 8c 61 74 2d 47 61 2f 29 83 55 c9 e2 94 cc e0 d7 5a 98 c6 34 8f 6d 17 45 e9 76 66 c8 6c c0 f3 a3 bc 6b 02 8a a0 a7 49 98 15 2d 89 d0 09 62 4a 28 90 a9 54 f1 80 70 3c fd 0b f7 90 9b 65 19 8a 23 01 79 4b 1f 65 cf 5b b4 4a 0a 01 72 17 bb 74 fb 35 e9 13 a3 ef 29 da 20 75 c7 89 72 0b 16 78 a1 60 de 15 86 cb 52 10 e5 9c aa d4 83 10 af a7 3c b7 63 fb 6a f2 48 d2 6e 3f 4d 72 af 51 c0 Data Ascii: EEVURrq<z_ZO 6JqU7Guq`[oLd<GM44 [4~w{i.:at-Ga/)UZ4mEvflkI-bJ(Tp<e#yKe[Jrt5) urx`R<cjHn?MrQ
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: b4 17 57 66 0c 23 23 92 11 91 75 68 4c ff 65 7e cb fe b2 85 3b 2e 07 e0 0e e0 25 7b 6c db 6c d5 ec aa 22 2b df 81 07 38 1c 7e 7c fe 39 02 38 33 9f e8 10 fc a0 30 01 24 99 41 b4 70 70 36 fc ef 3b cf bf 5d 70 b4 33 ec b1 65 29 a6 78 88 1c d4 4d 2c 0e 29 69 21 c7 7a b2 57 2e ce 1e 23 c0 d9 3c 8d 0e 92 e5 4a f8 88 5b 7c 62 d8 29 24 05 7a 90 8b df d2 c0 ad 6f 8a de c6 cf 77 bd b4 7c 84 54 d6 83 01 bd 27 0f 3f 00 cb c7 59 ab b2 bc 59 c8 c3 00 73 fe 83 44 de fc 09 aa 89 cd 86 dc 4c c1 d8 e5 5e 3e 9c 72 a8 b2 b5 48 34 47 96 91 c8 40 29 39 4e 49 a1 7e a5 1d 84 7c 03 51 1b 53 1a 4c 7b b1 6b ee ee 2f 86 82 f2 44 5d 41 b9 67 39 dc b4 c0 07 93 ad cf b6 f7 52 c6 5a 48 ff 95 37 2f 1f 77 78 ae 66 11 f7 5a ab d0 43 63 ef 22 d1 87 fe 60 da 4c 67 f3 b5 24 03 c4 f2 4e 1a b1 Data Ascii: Wf##uhLe~;.%{ll"+8~\|9830$App6;]p3e)xM,)i!zW.#<J[\|b)$zow\|T'?YYsDL^>rH4G@)9NI~\|QSL{k/D]Ag9RZH7/wxfZCc"`Lg$N
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: af 6e a9 41 4e bd b4 41 a4 be 41 ac 53 71 a0 89 9a 00 6f 80 3b a9 33 2f cb 7d 45 59 8b aa 6d 6d 7a e8 ba be 75 09 06 26 a6 1e 76 79 20 c7 7d 6a 84 d8 4b d5 11 0e d7 26 7f d1 5d b8 bb 89 41 b2 d9 4c 37 cd 20 a9 4b ce 75 2b 30 5a 44 2c 47 28 ee 7e bb e2 d9 ae d0 fa fa 94 5e be c4 2c 1f c2 0c 9b 5e 6f 34 5a 51 98 a1 f2 1b ee 77 ca 34 fb a8 d1 89 6f d4 0a aa c9 22 f1 0f 6d ee 6a cb 67 92 51 74 1f 9b af bb 43 93 fd da b8 a0 c6 e6 23 79 b6 06 46 36 6a 74 4b d4 31 4f 14 25 21 d6 cd 59 f4 3a f8 56 ac ce 4d 3a 38 ea 4d 13 28 d7 64 0a c6 7e 80 83 d1 38 9a 82 53 ce 26 8f e6 27 34 67 59 a5 c1 73 30 44 c4 51 13 ec e2 65 7f 0b 51 d5 02 54 01 ce ac 5e 8c fb ce 61 21 65 e0 0c 19 63 4e 9b 91 b0 00 24 fc fb c4 2c 0b eb f0 1d 5e 98 f1 01 a3 b9 f3 2b eb a9 d9 58 fd 16 d3 1a Data Ascii: nANAASqo;3/}EYmmzu&vy }jK&]AL7 Ku+0ZD,G(~^,^o4ZQw4o"mjgQtC#yF6jtK1O%!Y:VM:8M(d~8S&'4gYs0DQeQT^a!ecN$,^+X
2024-04-16 17:43:27 UTC	16384	OUT	Data Raw: 5c 7f 7a b6 57 b7 7f 6f 76 39 e0 13 10 d8 bc 3f 6d 4f 38 9d 98 f1 d7 50 a7 83 52 b4 47 77 73 db ef d8 e3 92 1e ee b7 cb c8 80 2c de 09 a3 84 02 04 7d 77 16 0e 4e 0d 47 38 e1 f5 59 ff cd 6a b3 ee ad fb 31 10 1e e9 6f fd 7d 3e 52 f4 dd e0 89 fa e7 fb 36 b2 98 1c bb ba 5c 25 0f a2 2f 38 8e 06 26 a0 f3 01 56 a5 b8 60 d4 e3 e7 df 46 a4 7e cf 2a b0 e6 15 2f 9e 9a bd 91 39 bd 5f 6a f8 cc 32 c8 b6 68 cd 0a 09 e9 95 61 4c 78 b4 c4 85 23 ee 76 ed 03 db 7e b9 9f 39 ff 0c fe cb 8d a0 89 96 cd 37 b3 d7 f3 de 7c 10 a3 f4 c0 8c be 02 c4 00 70 c7 77 c6 24 31 f4 7a b7 bd ef 5c 7f 78 a1 13 30 46 22 3e df ae f7 3a 93 99 d8 9b d9 c3 d1 1d 88 80 0c b6 a0 8d a7 b7 ea c9 5d ff df ff ad 39 6e 9b ee 0e 88 55 fe f1 2f 7f b8 ba 3d 7c b6 9a f5 f4 97 3f fc 77 fb d9 64 3b 9c 96 ca 3b Data Ascii: \zWov9?mO8PRGws,}wNG8Yj1o}>R6\%/8&V`F~*/9_j2haLx#v~97\|pw$1z\x0F">:]9nU/=\|?wd;;
2024-04-16 17:43:27 UTC	9626	OUT	Data Raw: c5 62 8b 0d 90 33 e0 c7 be 67 c1 3c 59 6e 52 5a 02 7f eb 6a 70 f0 9f 3c 18 2e f9 15 fd 18 45 2e 83 ab ee 4a 7b 7b da 6c f1 2b f0 8b 18 d3 2f f2 c9 e2 89 15 d9 53 45 c5 ee 06 75 07 50 c6 73 98 73 74 9b 5e c5 75 d2 dd f6 f8 9c b8 e2 8b e4 ee 2c 51 18 8c ed fc 96 9b 2d 30 56 8b fa b0 75 a3 9b 64 af a0 d6 47 bc d7 90 33 26 69 16 7f 1a 07 8c 5d 6b 93 00 17 fd 3f e5 c8 f5 3c ee 24 1d c9 da d6 32 82 7d 8f 89 2d a2 3e cd 36 1c e0 d8 ad cd 3f 91 70 81 96 df 07 67 f1 8f c8 b0 2f 10 24 b5 fd 45 4d 31 53 0d 99 de 0a b5 21 37 f1 57 9a c5 a7 30 05 32 2d 0d e6 67 df 5f 3d fa 84 07 ea 0c 7b ea a7 67 e7 b6 1d ae 7f 1e a1 db a4 f6 74 f0 45 1c ec d7 e2 0b d0 2c b3 bd 01 1d 48 bd 67 8c 0d ba f6 76 b8 4d 28 9e 1a ba b1 a7 0f 47 78 17 ab 8e 77 b1 b6 dd 0b 5a 11 a5 6d 27 33 07 Data Ascii: b3g<YnRZjp<.E.J{{l+/SEuPsst^u,Q-0VudG3&i]k?<$2}->6?pg/$EM1S!7W02-g_={gtE,HgvM(GxwZm'3
2024-04-16 17:43:28 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50010	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289406966&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 452 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	452	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 31 32 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 31 32 38 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 31 30 32 34 2c 22 31 2e 33 2e 30 22 2c 22 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 2c 38 30 Data Ascii: {"Seq":4,"When":6128,"Evts":[{"Kind":100,"Args":["visible"],"When":6128},{"Kind":100,"Args":["hidden"],"When":6128},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign.com/privacy",1263,907,1280,1024,"1.3.0","","<!DOCTYPE html>",80
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50011	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289406967&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 14838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	14838	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 31 34 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 32 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 33 31 33 33 38 2e 32 38 31 32 35 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 36 34 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 39 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 34 30 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e Data Ascii: {"Seq":5,"When":6140,"Evts":[{"Kind":42,"Args":[1263,31338.28125],"When":6140},{"Kind":10,"Args":[3,0,0],"When":6140},{"Kind":64,"Args":[3,0,0],"When":6140},{"Kind":19,"Args":[1263,907,1280,907],"When":6140},{"Kind":40,"Args":[1263,907],"When":6140},{"Kin
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50012	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289406967&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50013	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:27 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289406968&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:27 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50015	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	660	OUT	POST /track/?verbose=1&ip=1&_=1713289406941 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	1170	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 50 61 67 65 25 32 30 56 69 65 77 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 25 33 46 6c 61 6e 67 75 61 67 65 25 33 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Page%20View%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3
2024-04-16 17:43:28 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 25 x-envoy-upstream-service-time: 44 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:28 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50014	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2380	OUT	POST /s/sfsites/aura?r=6&aura.ApexAction.execute=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1192 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-LDS-Endpoints: ApexActionController.execute:RSC_GetSupportController.getRecaptchaSecretKey, ApexActionController.execute:RSC_GetSupportController.getRecaptchaSiteKey X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 110202900003485f5f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	1192	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 35 32 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 41 70 65 78 41 63 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 65 78 65 63 75 74 65 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 63 6c 61 73 73 6e 61 6d 65 25 32 32 25 33 41 25 32 32 52 53 43 5f 47 65 74 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22152%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FApexActionController%2FACTION%24execute%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22namespace%22%3A%22%22%2C%22classname%22%3A%22RSC_Get
2024-04-16 17:43:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server-Timing: Total;dur=32 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 110202900003485f5f
2024-04-16 17:43:28 UTC	1563	IN	Data Raw: 36 30 66 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 35 32 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 36 4c 64 35 74 78 38 55 41 41 41 41 41 50 68 6f 53 4c 64 48 6e 6a 55 58 74 55 72 56 59 58 63 62 44 5f 6a 6a 32 72 43 69 22 2c 22 63 61 63 68 65 61 62 6c 65 22 3a 74 72 75 65 7d 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 31 35 33 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 36 4c 64 35 74 78 38 55 41 41 41 41 41 48 75 47 45 4b 47 4e 77 6f 53 68 78 75 44 6b 45 51 5f 59 4c 76 45 4b 33 4f 42 4a 22 2c Data Ascii: 60f{"actions":[{"id":"152;a","state":"SUCCESS","returnValue":{"returnValue":"6Ld5tx8UAAAAAPhoSLdHnjUXtUrVYXcbD_jj2rCi","cacheable":true},"error":[]},{"id":"153;a","state":"SUCCESS","returnValue":{"returnValue":"6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50016	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1736	OUT	GET /s/sfsites/aura?r=1&aura.Component.getComponentDef=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: ce26754ed9fa58ffaaee7421fcb6723d
2024-04-16 17:43:28 UTC	1536	IN	Data Raw: 35 66 34 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 5f4<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50017	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1883	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:28 GMT Last-Modified: Tue, 16 Apr 2024 17:43:28 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 4e08892ee5868ed4d0a0e3b15f73ad5c
2024-04-16 17:43:28 UTC	15821	IN	Data Raw: 33 65 30 34 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 73 74 6f 6d 65 72 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 Data Ascii: 3e04<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html class=""><head><title>Customer Community</title><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="
2024-04-16 17:43:28 UTC	68	IN	Data Raw: 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 70 61 67 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 74 69 6d 65 3a 20 32 34 6d 73 20 2d 2d 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: div></div></body></html>... page generation time: 24ms -->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50018	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2011	OUT	GET /s/sfsites/c/resource/RSC_Resources/RSC_Resources/fonts/DSIndigo-Bold.woff HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.docusign.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	686	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/octet-stream Content-Length: 44632 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Mon, 27 May 2024 02:10:38 GMT P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: SAMEORIGIN Last-Modified: Wed, 21 Jun 2023 23:55:32 GMT Server: sfdcedge X-SFDC-Request-Id: 62b8fde0606b6621ad42fcc6c8deca6f
2024-04-16 17:43:28 UTC	15698	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 ae 58 00 12 00 00 00 01 68 b8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 94 00 00 00 1c 00 00 00 1c 8c 1f 6a 62 47 44 45 46 00 00 01 b0 00 00 00 35 00 00 00 36 05 29 06 5f 47 50 4f 53 00 00 01 e8 00 00 27 2b 00 00 54 42 2a fa fd cd 47 53 55 42 00 00 29 14 00 00 02 33 00 00 03 f4 fb a5 25 97 4f 53 2f 32 00 00 2b 48 00 00 00 4f 00 00 00 60 6c 28 7f bb 63 6d 61 70 00 00 2b 98 00 00 02 92 00 00 03 d6 c9 b8 c2 88 63 76 74 20 00 00 2e 2c 00 00 00 2a 00 00 00 2a 06 ed 06 5d 66 70 67 6d 00 00 2e 58 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 30 0c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 30 14 00 00 6e 6b 00 00 ec d8 e5 dc cc 87 68 65 61 64 00 00 9e 80 00 00 00 Data Ascii: wOFFXhFFTMjbGDEF56)_GPOS'+TBGSUB)3%OS/2+HO`l(cmap+cvt .,*]fpgm.XeS/gasp0glyf0nkhead
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 0d a1 95 c0 74 d0 1c 19 3d 0a af 6c 19 2d ca 6d 0a 64 a0 18 ea 23 89 0e 8d 7a 14 f4 92 ae a8 a4 65 1d f0 96 0d e5 4f ce 22 05 49 f9 18 4a d6 cb 92 6d 45 ed 8a 4e 94 a4 ed c1 23 23 c7 bf c6 8e 28 9b b7 2c ec 5f 74 ae 65 c1 71 f6 b7 fb 6e 3f b8 f9 e1 25 4b ef f0 2d ef ed ec 5b 39 54 e8 30 fc 2a 9d 93 1b 94 2d f2 bd c0 17 f3 a4 27 24 ad 2b 9d 6f 27 f2 81 36 d1 b3 e6 89 71 7b d6 63 4b e5 eb f8 7b 73 d3 f9 a0 49 ca c2 b3 44 3a af 08 32 cf a7 13 62 0b a7 69 8b 4f 57 e1 14 d8 e3 94 6a e1 55 8f 4f 6f 80 57 16 fa 4c 1f 06 d8 1a 7a 54 ff 42 bb 62 f7 04 13 ed a9 ae 01 da 19 1e 38 36 eb b3 52 20 45 b3 75 2a ca 04 6d ae 9a b7 a8 0d 2d 12 a9 08 7f 2e 12 ad 19 14 e2 a0 b4 53 f0 81 9f 7d 22 03 59 ab a5 28 5c 43 74 e6 89 e0 c7 2d b4 85 16 c0 89 01 de ef fc e7 2f 7d ee cd Data Ascii: t=l-md#zeO"IJmEN##(,_teqn?%K-[9T0-'$+o'6q{cK{sID:2biOWjUOoWLzTBb86R Eum-.S}"Y(\Ct-/}
2024-04-16 17:43:28 UTC	12550	IN	Data Raw: 91 4d a5 46 91 fb d9 8e a9 7d 22 8f 6f dd 5a ac cf 7d 86 e2 9f bb 66 a8 cf c5 79 14 61 d3 c4 19 97 3f f3 99 87 0e cc 16 e7 15 ba 91 e8 19 54 e8 c2 72 a7 54 b0 66 d8 8e e9 05 ac ef 60 d0 40 f4 e1 34 99 a9 9e a1 11 eb d2 a7 61 32 52 f4 9b 35 96 da 82 35 95 a3 15 44 43 d1 6d 44 7d c1 8c 06 60 a1 12 ca 31 03 3e 1e 43 f1 1f f1 93 29 83 7d e3 ca 1a 7c 55 e2 bc d4 e0 ab 55 f8 be 8b 14 f8 84 e8 e9 65 a1 66 5e 53 89 f1 0c 35 f4 7a c0 98 e9 20 ea 8e 95 45 34 b7 a2 59 ba 7b 26 ca d4 19 43 13 b4 66 63 82 85 31 99 1e 93 45 c2 98 2c 92 8f 73 a8 ca 68 96 40 ad 27 40 2f d1 0f e7 d5 27 e2 aa ff 19 7f 24 5a 5b 67 2e 2f 5d d7 9b 1b 01 ec 70 4d 2c c4 2b 69 aa 51 d0 18 b3 64 80 3e 85 9a 3b 57 ec 5d b1 62 af 15 c0 4f 66 a6 d7 b6 67 10 01 2b 1e 2c f6 31 2b ef 41 1b c6 0c 81 e9 Data Ascii: MF}"oZ}fya?TrTf`@4a2R55DCmD}`1>C)}\|UUef^S5z E4Y{&Cfc1E,sh@'@/'$Z[g./]pM,+iQd>;W]bOfg+,1+A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50020	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2298	OUT	POST /s/sfsites/aura?r=7&aura.ApexAction.execute=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 887 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-LDS-Endpoints: ApexActionController.execute:RSC_GetSupportController.getSectionLinks X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 1102319000000cc8a0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	887	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 36 35 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 41 70 65 78 41 63 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 65 78 65 63 75 74 65 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 63 6c 61 73 73 6e 61 6d 65 25 32 32 25 33 41 25 32 32 52 53 43 5f 47 65 74 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22165%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FApexActionController%2FACTION%24execute%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22namespace%22%3A%22%22%2C%22classname%22%3A%22RSC_Get
2024-04-16 17:43:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server-Timing: Total;dur=49 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 1102319000000cc8a0
2024-04-16 17:43:28 UTC	2079	IN	Data Raw: 38 31 33 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 36 35 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 5b 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 54 65 78 74 22 3a 22 43 6f 6d 6d 75 6e 69 63 61 74 65 20 64 69 72 65 63 74 6c 79 20 77 69 74 68 20 44 6f 63 75 73 69 67 6e 20 65 78 70 65 72 74 73 20 61 6e 64 20 70 65 65 72 73 22 2c 22 67 74 6d 54 61 67 22 3a 22 63 61 73 65 2d 69 6e 74 65 6e 74 2d 63 6f 6e 74 61 63 74 73 75 70 70 6f 72 74 2d 70 61 67 65 2d 63 6f 6d 6d 75 6e 69 74 79 2d 63 6c 69 63 6b 22 2c 22 69 73 4f 70 65 6e 43 61 73 65 53 65 63 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 69 74 6c 65 22 3a 22 41 73 6b 20 74 68 65 20 Data Ascii: 813{"actions":[{"id":"165;a","state":"SUCCESS","returnValue":{"returnValue":[{"descriptionText":"Communicate directly with Docusign experts and peers","gtmTag":"case-intent-contactsupport-page-community-click","isOpenCaseSection":false,"title":"Ask the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50021	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2149	OUT	GET /s/sfsites/aura?r=2&aura.ApexAction.execute=5&aura.Component.getComponent=1&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1&ui-force-components-controllers-hostConfig.HostConfig.getConfigData=1&zoomin_app.ZoominBaseComponent.obtainEventParams=1&zoomin_app.ZoominBaseComponent.obtainLanguageCodes=1&zoomin_app.ZoominBaseComponent.obtainPermission=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 4ec49e7f5cdc7abd7cd327959c52a922
2024-04-16 17:43:28 UTC	2859	IN	Data Raw: 62 31 66 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: b1f<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50022	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	118	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fprivacy%22%7D
2024-04-16 17:43:28 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Tue, 16 Apr 2024 17:43:28 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 4470ccbf0e110f36 vary: Accept-Encoding x-envoy-upstream-service-time: 9 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 17c056a089c69d54a02a9a3ca804fdd6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: J3O3tZqCB1wvyKtf2a23DO0fU9BGI-XWr-fsfDxQg6ClHx4L0_izYg==
2024-04-16 17:43:28 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50023	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2376	OUT	POST /s/sfsites/aura?r=8&aura.ApexAction.execute=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-LDS-Endpoints: ApexActionController.execute:RSC_GetSupportController.getSelfServiceContent, ApexActionController.execute:RSC_GetSupportController.getDynamicForms X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 11241000000e8d4dd8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	1344	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 36 36 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 41 70 65 78 41 63 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 65 78 65 63 75 74 65 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 73 70 61 63 65 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 63 6c 61 73 73 6e 61 6d 65 25 32 32 25 33 41 25 32 32 52 53 43 5f 47 65 74 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22166%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FApexActionController%2FACTION%24execute%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22namespace%22%3A%22%22%2C%22classname%22%3A%22RSC_Get
2024-04-16 17:43:28 UTC	441	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server: sfdcedge X-SFDC-Request-Id: 11241000000e8d4dd8
2024-04-16 17:43:28 UTC	15943	IN	Data Raw: 38 62 32 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 36 36 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 5b 7b 22 67 74 6d 54 61 67 22 3a 22 43 53 50 5f 43 6f 6e 74 61 63 74 5f 53 75 70 70 6f 72 74 5f 53 65 6c 66 5f 53 65 72 76 69 63 65 5f 43 6f 6e 74 65 6e 74 5f 5f 63 22 2c 22 73 65 63 74 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 3c 70 3e 4f 70 74 69 6f 6e 73 20 74 6f 20 72 65 73 65 74 20 6f 72 20 63 68 61 6e 67 65 20 79 6f 75 72 20 44 6f 63 75 73 69 67 6e 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 74 72 6f 75 62 6c 65 73 68 6f 6f 74 20 63 6f 6d 6d 6f 6e 20 69 73 73 75 65 73 3c 5c 2f 70 3e 3c 70 3e 3c 62 72 3e 3c 5c Data Ascii: 8b27{"actions":[{"id":"166;a","state":"SUCCESS","returnValue":{"returnValue":[{"gtmTag":"CSP_Contact_Support_Self_Service_Content__c","sectionDescription":"<p>Options to reset or change your Docusign password and troubleshoot common issues<\/p><p><br><\
2024-04-16 17:43:28 UTC	16384	IN	Data Raw: 67 63 6d 2e 63 6f 6d 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 4c 4d 2e 43 4d 20 61 63 63 6f 75 6e 74 3c 5c 2f 61 3e 20 6f 72 20 6e 65 65 64 20 74 6f 20 72 65 71 75 65 73 74 20 53 75 70 70 6f 72 74 20 43 65 6e 74 65 72 20 63 72 65 64 65 6e 74 69 61 6c 73 20 66 6f 72 20 3c 61 20 63 6c 61 73 73 3d 5c 22 73 6c 64 73 2d 74 65 78 74 2d 6c 69 6e 6b 5f 72 65 73 65 74 5c 22 20 68 72 65 66 3d 5c 22 23 5c 22 20 73 74 79 6c 65 3d 5c 22 5c 22 3e 43 4c 4d 2e 43 4d 20 3c 5c 2f 61 3e 2e 22 2c 22 64 69 73 70 6c 61 79 46 6f 72 6d 73 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 44 65 74 61 69 6c 73 22 3a 5b 7b 22 63 61 73 65 46 69 65 6c 64 4e 61 6d 65 22 3a 22 43 6f 6e 74 61 63 74 5f 4e 61 6d 65 5f 31 5f 5f 63 22 2c 22 66 69 65 6c 64 43 6c 61 73 73 22 Data Ascii: gcm.com/\" target=\"_blank\">CLM.CM account<\/a> or need to request Support Center credentials for <a class=\"slds-text-link_reset\" href=\"#\" style=\"\">CLM.CM <\/a>.","displayForms":false,"formDetails":[{"caseFieldName":"Contact_Name_1__c","fieldClass"
2024-04-16 17:43:28 UTC	3309	IN	Data Raw: 41 75 73 74 72 61 6c 69 61 2c 20 47 75 61 6d 2c 20 56 6c 61 64 69 76 6f 73 74 6f 6b 3b 28 2b 31 31 3a 30 30 29 20 4d 61 67 61 64 61 6e 2c 20 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 2c 20 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 3b 28 2b 31 32 3a 30 30 29 20 41 75 63 6b 6c 61 6e 64 2c 20 57 65 6c 6c 69 6e 67 74 6f 6e 2c 20 46 69 6a 69 2c 20 4b 61 6d 63 68 61 74 6b 61 3b 28 2b 32 3a 30 30 29 20 4b 61 6c 69 6e 69 6e 67 72 61 64 2c 20 53 6f 75 74 68 20 41 66 72 69 63 61 2c 20 43 61 69 72 6f 3b 28 2b 33 3a 30 30 29 20 42 61 67 68 64 61 64 2c 20 52 69 79 61 64 68 2c 20 4d 6f 73 63 6f 77 2c 20 53 74 2e 20 50 65 74 65 72 73 62 75 72 67 3b 28 2b 33 3a 33 30 29 20 54 65 68 72 61 6e 3b 28 2b 34 3a 30 30 29 20 41 62 75 20 44 68 61 62 69 2c 20 4d 75 73 63 61 74 2c Data Ascii: Australia, Guam, Vladivostok;(+11:00) Magadan, Solomon Islands, New Caledonia;(+12:00) Auckland, Wellington, Fiji, Kamchatka;(+2:00) Kaliningrad, South Africa, Cairo;(+3:00) Baghdad, Riyadh, Moscow, St. Petersburg;(+3:30) Tehran;(+4:00) Abu Dhabi, Muscat,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50026	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1745	OUT	GET /s/sfsites/aura?r=5&other.CSP_AuraMethods.getAlertLocalized=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: f2ad7df1aedfe617480da930f4e0c899
2024-04-16 17:43:28 UTC	1563	IN	Data Raw: 36 30 66 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 60f<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50028	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289406969&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	4420	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 39 38 35 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 39 38 35 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 38 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 65 6e 74 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 39 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a Data Ascii: {"Seq":8,"When":9856,"Evts":[{"Kind":100,"Args":["visible"],"When":9856},{"Kind":57,"Args":[12,"pointerover",16691.5,48,16738.800000000017,16739,0],"When":9875},{"Kind":57,"Args":[12,"pointerenter",16691.5,48,16739,16739,0],"When":9875},{"Kind":57,"Args":
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50027	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289406969&PageStart=1713289396931&PrevBundleTime=1713289405397&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 5856 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	5856	OUT	Data Raw: 7b 22 53 65 71 22 3a 39 2c 22 57 68 65 6e 22 3a 31 30 33 38 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 33 26 43 6c 69 65 6e 74 54 69 6d 65 Data Ascii: {"Seq":9,"When":10380,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime
2024-04-16 17:43:28 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50029	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=4&ClientTime=1713289406970&PageStart=1713289396931&PrevBundleTime=1713289405397&LastActivity=2752&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:28 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50030	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2238	OUT	POST /s/sfsites/aura?r=9&zoomin_app.ZoominCommunitySearch.obtainSearchSourcesList=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 827 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 114640000006e8023b User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	827	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 33 30 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 70 65 78 25 33 41 25 32 46 25 32 46 7a 6f 6f 6d 69 6e 5f 61 70 70 2e 5a 6f 6f 6d 69 6e 43 6f 6d 6d 75 6e 69 74 79 53 65 61 72 63 68 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 6f 62 74 61 69 6e 53 65 61 72 63 68 53 6f 75 72 63 65 73 4c 69 73 74 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 37 44 25 32 43 25 32 32 73 74 6f 72 61 62 6c 65 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22230%3Ba%22%2C%22descriptor%22%3A%22apex%3A%2F%2Fzoomin_app.ZoominCommunitySearchController%2FACTION%24obtainSearchSourcesList%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%7D%2C%22storable
2024-04-16 17:43:28 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server-Timing: Total;dur=107 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 114640000006e8023b
2024-04-16 17:43:28 UTC	2035	IN	Data Raw: 37 65 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 33 30 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 7b 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 61 64 6d 69 6e 53 65 74 74 69 6e 67 42 61 73 65 55 72 6c 5c 22 3a 7b 5c 22 6f 70 65 6e 49 6e 50 6f 72 74 61 6c 5c 22 3a 66 61 6c 73 65 2c 5c 22 75 72 6c 5c 22 3a 6e 75 6c 6c 7d 2c 5c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 45 6e 61 62 6c 65 64 5c 22 3a 74 72 75 65 2c 5c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 54 6f 54 6f 70 69 63 5c 22 3a 74 72 75 65 2c 5c 22 63 61 73 65 44 65 66 6c 65 63 74 69 6f 6e 53 6f 75 72 63 65 73 5c 22 3a 5b 5d 2c 5c 22 70 72 65 73 65 74 73 5c 22 3a 5b 5d 2c 5c 22 73 6f 75 72 63 65 73 5c 22 3a 5b 7b 5c 22 Data Ascii: 7e7{"actions":[{"id":"230;a","state":"SUCCESS","returnValue":"{\"data\":{\"adminSettingBaseUrl\":{\"openInPortal\":false,\"url\":null},\"autocompleteEnabled\":true,\"autocompleteToTopic\":true,\"caseDeflectionSources\":[],\"presets\":[],\"sources\":[{\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50031	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1822	OUT	GET /s/sfsites/aura?r=4&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 5cd0c45a4f0131c5612f4009e9e3602e
2024-04-16 17:43:28 UTC	1794	IN	Data Raw: 36 66 36 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 6f6<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50032	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	2300	OUT	POST /s/sfsites/aura?r=10&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=1&zoomin_app.ZoominCommunitySearch.obtainSearchPreference=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1021 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 11530190000c8cf62f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	1021	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 33 31 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 70 65 78 25 33 41 25 32 46 25 32 46 7a 6f 6f 6d 69 6e 5f 61 70 70 2e 5a 6f 6f 6d 69 6e 43 6f 6d 6d 75 6e 69 74 79 53 65 61 72 63 68 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 6f 62 74 61 69 6e 41 64 6d 69 6e 53 65 74 74 69 6e 67 42 61 73 65 55 72 6c 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 37 44 25 37 44 25 32 43 25 37 42 25 32 32 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22231%3Ba%22%2C%22descriptor%22%3A%22apex%3A%2F%2Fzoomin_app.ZoominCommunitySearchController%2FACTION%24obtainAdminSettingBaseUrl%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%7D%7D%2C%7B%22
2024-04-16 17:43:29 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:28 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:28 GMT Server-Timing: Total;dur=226 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 11530190000c8cf62f
2024-04-16 17:43:29 UTC	2746	IN	Data Raw: 61 61 65 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 33 31 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 7b 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 6f 70 65 6e 49 6e 50 6f 72 74 61 6c 5c 22 3a 66 61 6c 73 65 2c 5c 22 75 72 6c 5c 22 3a 6e 75 6c 6c 7d 2c 5c 22 73 75 63 63 65 73 73 5c 22 3a 74 72 75 65 7d 22 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 32 33 32 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 7b 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 73 65 6c 65 63 74 65 64 5c 22 3a 5b 7b 5c 22 76 69 73 69 62 69 6c 69 74 79 5c 22 3a 5c 22 73 68 6f 77 2d 66 61 63 65 74 5c 22 2c 5c 22 73 75 62 6a 65 63 74 Data Ascii: aae{"actions":[{"id":"231;a","state":"SUCCESS","returnValue":"{\"data\":{\"openInPortal\":false,\"url\":null},\"success\":true}","error":[]},{"id":"232;a","state":"SUCCESS","returnValue":"{\"data\":{\"selected\":[{\"visibility\":\"show-facet\",\"subject

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50033	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1729	OUT	GET /s/sfsites/aura?r=6&aura.ApexAction.execute=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:28 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 28f4081139f051b39723bdc905b95e85
2024-04-16 17:43:28 UTC	1515	IN	Data Raw: 35 64 66 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 5df<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50034	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	618	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=1&ClientTime=1713289407037&PageStart=1713289404678&PrevBundleTime=0&LastActivity=2121&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:28 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:28 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50035	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1933	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398 If-Modified-Since: Tue, 16 Apr 2024 17:43:28 GMT
2024-04-16 17:43:29 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:29 GMT Last-Modified: Tue, 16 Apr 2024 17:43:29 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: aea923228c65ee5df8796d3f71b314b6
2024-04-16 17:43:29 UTC	15821	IN	Data Raw: 33 65 30 34 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 73 74 6f 6d 65 72 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 Data Ascii: 3e04<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html class=""><head><title>Customer Community</title><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="
2024-04-16 17:43:29 UTC	68	IN	Data Raw: 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 70 61 67 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 74 69 6d 65 3a 20 32 37 6d 73 20 2d 2d 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: div></div></body></html>... page generation time: 27ms -->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50036	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1729	OUT	GET /s/sfsites/aura?r=7&aura.ApexAction.execute=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:29 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 99c4fa0cc64b8295fe26b858998d567c
2024-04-16 17:43:29 UTC	1515	IN	Data Raw: 35 64 66 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 5df<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50038	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift769374e4f848388d49c2dc87f69 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:28 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 3ccec777a6ecee005c445b8d1dc8aff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: tR67U4-vh_MijWe3Ty1nSUaaGtdWqcZBexK-Eh9xKgag0FjCFFnCZw==
2024-04-16 17:43:29 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50024	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	556	OUT	GET /genesys-bootstrap/genesys.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/javascript Content-Length: 74477 Connection: close Server: nginx x-amz-id-2: kITS9W8uM+3gyLbGAmoYsxZh19APYGdez4TIpU4y9stkbCwJBghPCd9qPRJBnq3XJUv2RUSkgAw= x-amz-request-id: CAT8581NAS9PKAGK Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 03:04:03 GMT x-amz-version-id: QZm_h5zv_4b0p.BWe_vzGlRCw_A6jZYE ETag: "c6c4edc52df95ad8891299284ff3efdb" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:29 UTC	15845	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec bd 7b 7f db 36 d2 28 fc ff f9 14 32 b7 eb 90 31 2d 4b f2 9d 0a ab 95 44 a9 f5 6e 6e 4f 9c 74 2f b6 eb d2 12 6c b3 91 48 95 97 38 8e a5 fd ec 67 2e 00 09 4a b4 e3 5e f6 79 f7 fc 5e a7 35 44 10 b7 c1 60 30 33 18 0c c0 ad e7 6b ff a7 f6 bc 76 25 42 91 dc 26 f5 9f 13 8c fd e5 93 88 93 20 0a 9d 5a ab be 5b 6f d0 ab 49 30 12 61 22 9c da 77 9c b5 f6 5e 4c c4 28 9a d6 5e fa 17 58 68 6b ed 32 0b 47 29 94 32 85 75 f7 c9 8f 6b a9 7b 13 84 e3 e8 a6 7e 23 2e 66 fe e8 e3 f7 51 fa 61 36 f6 53 d1 be e7 bd 5b d4 60 87 d6 9d 56 a1 9d 5a 77 c1 a5 b9 36 38 11 67 f3 f9 5a 1f 7e ac 58 a4 59 1c b6 2f a3 d8 c4 d6 c2 5a 10 d6 30 c1 5d 6b 42 f6 37 17 3f 8b 51 5a 9f c5 51 1a a5 b7 33 51 bf f6 93 37 37 e1 db 38 9a 89 38 bd ad 8f fc c9 c4 4c a1 99 f5 Data Ascii: {6(21-KDnnOt/lH8g.J^y^5D`03kv%B& Z[oI0a"w^L(^Xhk2G)2uk{~#.fQa6S[`VZw68gZ~XY/Z0]kB7?QZQ3Q7788L
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: e9 ef 51 11 ea 70 9f 3b dc a7 0e f7 f7 39 d7 3e c2 da a7 29 d0 e7 0e f7 69 0a f4 b9 c3 7d ea 70 9f 3b dc a7 31 ef f3 98 f7 69 9c fb 3c ce 7d ea 46 9f c6 b9 ef 51 95 34 ce 7d 1a e7 3e 77 ac 4f e3 dc 27 b2 ef 53 27 3d 9e b4 1e 75 d2 e3 4e 7a d4 49 8f 3b e9 6d 77 29 c4 7a bd 1d ac d7 db e5 22 c4 11 3d ee aa 47 dd f3 b8 7b de fe 01 85 5d 8e 60 93 1e 77 cc 3b a4 32 87 9c 42 7c ca eb 6d 73 a4 47 21 35 c3 ac cb eb 53 66 86 dc 23 c8 07 24 0b 1b 03 a2 ba 01 51 dd 80 a8 6e c0 fc 6a b0 83 45 06 bb 1c 21 66 3d 20 96 3e 38 a0 bc 07 3b 14 52 8d 03 a2 aa c1 41 9f 22 44 24 03 e2 9f 83 2e c9 82 01 cd a8 01 cd a8 01 61 7a 40 d0 0d 18 ba 41 9f ea 22 18 07 2c 03 06 1e 35 e8 71 8d 1e 02 0c 22 1a 43 96 04 43 02 75 c8 a0 0e 77 f6 29 24 8e 30 dc 43 f4 0f 59 62 0d 71 f4 9b 2c e9 Data Ascii: Qp;9>)i}p;1i<}FQ4}>wO'S'=uNzI;mw)z"=G{]`w;2B\|msG!5Sf#$QnjE!f= >8;RA"D$.az@A",5q"CCuw)$0CYbq,
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: 21 7b 48 94 4c 22 37 d5 5f 11 70 8c 95 13 42 a1 a3 a9 09 e5 19 dd a2 0a 84 f2 f3 20 54 54 56 a3 33 a0 70 c2 bf a2 8a b1 1d 1d ad 1a 2f 36 91 f1 16 42 a7 ed 16 7b 80 0f 24 2d 07 2f 7d af 1d 19 fc ee cf d8 a7 bf 56 a8 e4 a0 ce d9 aa c2 3a ad 0b 32 26 65 90 d6 e7 7e 77 b7 bb 33 69 1d 5b 55 b4 d2 2b 2a f0 80 c4 89 f0 b7 68 bb c9 c8 e9 22 26 80 0e 41 b5 69 00 1d 51 46 6f 19 77 ac e1 65 a5 9b 09 a7 05 14 73 eb 14 43 cd 33 2b 77 86 03 1a 39 e4 e9 a2 5d 60 7d 9e 46 bd 0f 8f de be 3b 7a 76 00 74 b7 8d ec 6f fc 19 70 45 b8 7d f0 07 59 e3 95 08 82 b5 36 66 11 6c fd 29 32 e0 5b 8c 40 7d c6 ee 3b 14 79 fd 4b 3c 9f a3 8a 9d ec 87 c2 c2 92 08 10 de b3 b2 20 e1 2c da a7 c0 b4 47 72 70 4b 96 e0 fc 6f 70 83 8a ee 59 f1 86 66 26 f7 1b 6c 32 4c 00 04 45 11 d6 66 c3 e1 69 6d Data Ascii: !{HL"7_pB TTV3p/6B{$-/}V:2&e~w3i[U+*h"&AiQFowesC3+w9]`}F;zvtopE}Y6fl)2[@};yK< ,GrpKopYf&l2LEfim
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: cf 52 76 af 09 ca aa 73 53 59 9b 8b ac 76 4a a9 0c 92 94 f7 3a ab 26 f7 bd 4e ec c3 fd d6 a8 f1 c0 9a 7a ac 29 93 33 63 4d 07 65 93 70 36 41 38 2b 27 91 37 0d 6a 0c df a7 d3 98 af a9 bb 46 ab 58 4c c5 5c 1c 8a 33 31 13 57 28 47 18 6b 1c 49 5c 06 17 5a 49 11 68 1f 7d 59 e4 05 f7 1c c3 11 20 e7 29 9a f9 97 28 b6 ce 0a ff 72 d4 be 90 c7 a7 87 4c 41 cc 33 4f d3 9c 78 12 71 11 5d f2 ea 5f 04 97 23 40 f4 66 00 d6 7e 5e 02 c2 a7 0b 51 11 4a 10 8d 9b 14 ae 57 2c 7b e1 3b e3 87 ed ce c4 8a 36 f2 3c b0 08 39 e7 37 b7 75 d3 13 db 4b a8 a8 ed 78 2e 00 98 16 50 71 1f 13 c0 ae 47 48 86 7f 4c 16 3f 7a 9e 43 36 83 ee 15 19 e2 05 cf d5 44 a1 dd 59 d3 d6 92 14 ce 90 5d 6a 30 7c 8b 82 c8 22 4c 12 ed 75 66 ce 07 d2 80 29 d1 f7 30 ff 21 e6 af 27 36 9f 47 17 e3 99 cf 82 39 2d Data Ascii: RvsSYvJ:&Nz)3cMep6A8+'7jFXL\31W(GkI\ZIh}Y )(rLA3Oxq]_#@f~^QJW,{;6<97uKx.PqGHL?zC6DY]j0\|"Luf)0!'6G9-
2024-04-16 17:43:29 UTC	9480	IN	Data Raw: cb e0 0e 57 e5 31 89 99 20 37 05 8d c8 f7 6e 6e 5c f9 65 0e 02 13 f3 1b e7 c6 9b f8 8b 9b c0 f3 63 73 61 e9 e2 60 2d ab e2 c5 a2 3f 27 71 61 6e 98 0b 72 5b b7 c8 a1 1f 57 1d b1 49 1f 22 fa 31 3e a6 3b f6 0c 55 09 df e9 76 69 40 00 3b 96 87 0e 0e a9 0c 80 e5 41 df 17 a0 24 cf e3 37 a1 07 00 79 0d 58 99 e7 ae 79 03 bf ae 9d 8f c3 4b d7 bc 82 9f a8 fa fe c5 0d 89 aa cd 6b f8 00 ea 23 52 a4 b3 bd 3d e7 fa 2f ad 7b 7a 83 d2 31 95 0a 41 4f ee 5f d1 bd 5a b5 02 eb 8a bb 76 c9 6d 61 07 6f 28 ca 0d 5a 37 86 79 4d 71 68 c4 ba 4e 47 1e 27 b2 93 63 07 0a 3d 90 b3 81 7b d9 b1 12 14 c0 ed b6 b7 23 a1 37 e8 61 c3 31 f4 7b 7c 59 28 b7 67 d5 84 b1 69 7e 68 a3 35 40 36 1e 51 93 ac fe 9a 01 d6 8d bd b8 0c 1d 3f 06 da 74 3f ce 49 5d 05 fa 67 d1 a4 a7 dd 04 e8 cf 00 e8 ec 06 Data Ascii: W1 7nn\ecsa`-?'qanr[WI"1>;Uvi@;A$7yXyKk#R=/{z1AO_Zvmao(Z7yMqhNG'c={#7a1{\|Y(gi~h5@6Q?t?I]g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50037	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1753	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-componentsCompatible.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:29 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:29 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: b924ab9bee1e9896ddf98783b24fdca1
2024-04-16 17:43:29 UTC	15950	IN	Data Raw: 62 62 63 38 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 7a 65 6e 20 75 6c 2c 2e 7a 65 6e 20 6f 6c 2c 2e 7a 65 6e 20 6c 69 2c 2e 7a 65 6e 20 68 31 2c 2e 7a 65 6e 20 68 32 2c 2e 7a 65 6e 20 68 33 2c 2e 7a 65 6e 20 68 34 2c 2e 7a 65 6e 20 68 36 2c 2e 7a 65 6e 20 66 6f 72 6d 2c 2e 7a 65 6e 20 66 69 65 6c 64 73 65 74 2c 2e 7a 65 6e 20 Data Ascii: bbc8/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.zen ul,.zen ol,.zen li,.zen h1,.zen h2,.zen h3,.zen h4,.zen h6,.zen form,.zen fieldset,.zen
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: 65 72 20 68 32 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 65 61 64 65 72 20 68 33 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 65 61 64 65 72 20 68 34 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 65 61 64 65 72 20 68 35 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 65 61 64 65 72 20 68 36 7b 6d 61 72 67 69 6e 3a 35 70 78 20 30 7d 2e 7a 65 6e 20 68 31 2c 2e 7a 65 6e 20 68 32 2c 2e 7a 65 6e 20 68 33 2c 2e 7a 65 6e 20 68 34 2c 2e 7a 65 6e 20 68 35 2c 2e 7a 65 6e 20 68 36 2c 2e 7a 65 6e 20 69 6d 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 7a 65 6e 20 74 61 62 6c 65 20 68 31 2c 2e 7a 65 6e 20 74 61 62 6c 65 20 68 32 2c 2e 7a 65 6e 20 74 61 62 6c 65 20 68 33 2c 2e 7a 65 6e 20 74 61 62 6c 65 20 68 34 2c 2e 7a 65 6e 20 74 61 62 6c 65 20 68 35 2c 2e 7a 65 6e 20 74 61 62 6c 65 20 68 Data Ascii: er h2,.zen .zen-header h3,.zen .zen-header h4,.zen .zen-header h5,.zen .zen-header h6{margin:5px 0}.zen h1,.zen h2,.zen h3,.zen h4,.zen h5,.zen h6,.zen img{padding-bottom:0}.zen table h1,.zen table h2,.zen table h3,.zen table h4,.zen table h5,.zen table h
2024-04-16 17:43:29 UTC	15751	IN	Data Raw: 62 63 37 65 34 2c 23 30 35 39 39 63 63 20 36 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 36 62 63 37 65 34 2c 23 30 35 39 39 63 63 20 36 35 25 29 7d 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 72 6f 6d 6f 42 74 6e 20 2e 7a 65 6e 2d 73 65 6c 65 63 74 41 72 72 6f 77 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 72 6f 6d 6f 42 74 6e 3a 68 6f 76 65 72 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 72 6f 6d 6f 42 74 6e 3a 66 6f 63 75 73 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 72 6f 6d 6f 42 74 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 62 39 39 63 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: bc7e4,#0599cc 65%);background:-ms-linear-gradient(#6bc7e4,#0599cc 65%)}.zen .zen-promoBtn .zen-selectArrow{border-color:#fff transparent transparent}.zen .zen-promoBtn:hover,.zen .zen-promoBtn:focus,.zen .zen-promoBtn:active{background:#1b99c3;border-colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50039	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	1737	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/elements.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:29 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:29 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 9ecbe6afd0ba4620677887846dfbbb98
2024-04-16 17:43:29 UTC	15950	IN	Data Raw: 33 65 61 32 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 75 73 65 72 44 65 66 69 6e 65 64 4d 52 55 20 69 6d 67 2e 75 73 65 72 44 65 66 69 6e 65 64 49 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 75 73 65 72 44 65 66 69 6e 65 64 4d 6f 74 69 66 20 69 6d 67 2e 75 73 65 72 44 65 66 69 6e 65 64 49 Data Ascii: 3ea2/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.userDefinedMRU img.userDefinedImage{background-image:none}.userDefinedMotif img.userDefinedI
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 52 69 67 68 74 2c 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 52 69 67 68 74 4f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 32 70 78 20 30 20 32 70 78 7d 2e 64 61 74 65 50 0d 0a 34 35 65 63 0d 0a 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 66 75 6e 63 5f 69 63 6f 6e 73 2f 63 61 6c 2f 64 70 5f 6c 65 66 74 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 6c 65 66 74 7d 2e 64 61 Data Ascii: datePicker .dateBar .calRight,.datePicker .dateBar .calRightOn{margin:2px 2px 0 2px}.dateP45ecicker .dateBar .calLeft{background-image:url(/img/func_icons/cal/dp_left.gif);background-position:0 0;width:13px;height:21px;background-position:top left}.da
2024-04-16 17:43:29 UTC	1621	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 2f 69 6d 67 2f 61 6c 6f 68 61 53 6b 69 6e 2f 63 61 6c 5f 73 70 72 69 74 65 2e 70 6e 67 27 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 38 34 70 78 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 52 69 67 68 74 4f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 70 78 20 2d 38 34 70 78 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 2c 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 4f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 34 70 78 20 30 20 30 7d 2e 64 61 Data Ascii: {background-image:url('/img/alohaSkin/cal_sprite.png');background-position:0 -84px;width:18px;height:16px}.datePicker .dateBar .calRightOn{background-position:-18px -84px}.datePicker .dateBar .calLeft,.datePicker .dateBar .calLeftOn{margin:2px 4px 0 0}.da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50040	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:28 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289407933&PageStart=1713289396931&PrevBundleTime=1713289408147&LastActivity=3725&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2589 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:28 UTC	2589	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5b 0b 73 db 36 12 fe 2b 3c ce 98 d3 4e 29 19 e0 9b e9 f1 3a b6 ac ba ba c4 8e 2f 92 9b 3e 9c e1 40 24 44 a3 a5 48 96 00 65 3b b9 fc f7 5b 90 7a 50 b2 64 fb d2 5c 26 e9 c9 b2 21 0a d8 05 be 5d ec b7 80 68 f0 9d 3a a4 7f a8 cf 6c 5d 7d 7d 4d 33 f5 99 83 2d a4 ab fd 99 e0 ea b3 5f df a9 cf 59 16 ab cf 2c 43 57 8f ca 44 56 61 c3 31 75 13 9b a6 d7 35 3c 6c d8 6f da 8a ef f5 85 06 46 4b 0d 53 47 3a da 21 e6 58 4f 12 c3 fe fa f8 3e 72 75 6c 78 48 5e ec 50 b1 d0 3d 95 1d 92 9e b7 94 34 7c e4 e8 aa 2c 7f e5 65 14 5c 0b 51 f0 67 87 87 37 37 37 dd 38 8f 2a ce 92 ac 1b e5 d3 c3 a2 64 33 12 dd bd 51 75 a7 dd a9 d1 ea b4 6d bf da 1b 0e 71 2f 9f 16 44 a8 6d 79 6f 25 6f bb 2b b8 58 57 39 4d 27 aa 8e 2d ec 5a ba e9 b5 90 db c6 0e 25 98 a1 Data Ascii: [s6+<N):/>@$DHe;[zPd\&!]h:l]}}M3-_Y,CWDVa1u5<loFKSG:!XO>rulxH^P=4\|,e\Qg7778*d3Qumq/Dmyo%o+XW9M'-Z%
2024-04-16 17:43:29 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:29 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 39 30 35 34 7d 0a Data Ascii: {"BundleTime":1713289409054}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50042	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=2&ClientTime=1713289408022&PageStart=1713289404678&PrevBundleTime=1713289408042&LastActivity=3153&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 6155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	6155	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a c5 3c 8b 72 db 38 92 bf c2 e5 de a6 92 3a 51 c1 8b 20 29 6f 2e 37 c9 cc ee 4c ad 33 9b 1a 67 6e ea ce 95 52 51 24 64 71 42 91 5a 92 72 1c bb e6 db e6 93 f6 17 ae 1b e0 53 0f 4b b2 9d dd 38 a6 49 3c 1a 8d 46 a3 1f 40 03 77 f6 85 fa 87 3d 61 23 fb 97 85 ca ec 09 e7 dc 1f d9 df 5d 57 a5 3d b9 bc b3 ff 96 64 b1 3d 71 bd 91 fd 4d 71 85 49 72 c4 a8 c7 a4 08 84 c7 46 32 60 81 27 b8 18 b9 c2 77 25 f1 c8 c7 3e 98 df 46 4d 7d 8f b7 f5 ed 28 5f 2e d7 59 52 7d 99 ae 4b 55 38 fa b1 2a f2 79 92 2a 67 a9 b2 b5 dd 83 e1 ed 83 e1 14 65 e4 5c a9 ca 29 d7 ab 55 5e c0 5f 15 55 49 9e 39 69 92 7d 3a 0e 42 0c 10 96 79 1c a6 c7 14 4f 93 ab 45 95 25 d9 95 53 ae 92 2c 53 c5 43 b1 4c e7 f0 28 ae 93 48 9d d6 6c 18 45 79 11 43 0f 1f d6 70 fc 25 0b 97 49 Data Ascii: <r8:Q )o.7L3gnRQ$dqBZrSK8I<F@w=a#]W=d=qMqIrF2`'w%>FM}(_.YR}KU8yge\)U^_UI9i}:ByOE%S,SCL(HlEyCp%I
2024-04-16 17:43:29 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:29 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 30 39 30 39 32 7d 0a Data Ascii: {"BundleTime":1713289409092}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50041	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	660	OUT	POST /track/?verbose=1&ip=1&_=1713289407943 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	1170	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 50 61 67 65 25 32 30 56 69 65 77 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 25 33 46 6c 61 6e 67 75 61 67 65 25 33 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Page%20View%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3
2024-04-16 17:43:29 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:29 GMT Content-Length: 25 x-envoy-upstream-service-time: 23 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:29 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50043	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=2&ClientTime=1713289407998&PageStart=1713289404678&PrevBundleTime=1713289408042&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 23442 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 32 2c 22 57 68 65 6e 22 3a 33 33 33 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 36 39 32 39 37 34 33 34 2c 35 34 38 35 36 30 37 30 5d 2c 22 57 68 65 6e 22 3a 33 33 33 38 7d 2c 7b 22 4b 69 6e 64 22 3a 37 33 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6d 6d 75 6e 69 74 79 5f 75 73 65 72 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 22 5d 2c 22 57 68 65 6e 22 3a 33 33 37 38 7d 2c 7b 22 4b 69 6e 64 22 3a 37 33 2c 22 41 72 67 73 22 3a 5b 22 63 2d 72 73 63 2d 67 65 74 2d 73 75 70 70 6f 72 74 2d 73 65 63 74 69 6f 6e 2d 6c 69 6e 6b 22 5d 2c 22 57 68 65 6e 22 3a 33 33 37 38 7d 2c 7b 22 4b 69 6e 64 22 3a 37 33 2c 22 41 72 67 73 22 3a 5b 22 63 2d 64 73 63 2d 6d 6f Data Ascii: {"Seq":2,"When":3338,"Evts":[{"Kind":57,"Args":[6,2172649472,69297434,54856070],"When":3338},{"Kind":73,"Args":["community_user-user-profile-menu"],"When":3378},{"Kind":73,"Args":["c-rsc-get-support-section-link"],"When":3378},{"Kind":73,"Args":["c-dsc-mo
2024-04-16 17:43:29 UTC	7058	OUT	Data Raw: 5d 5d 2c 22 57 68 65 6e 22 3a 33 38 35 30 7d 2c 7b 22 4b 69 6e 64 22 3a 37 38 2c 22 41 72 67 73 22 3a 5b 5b 30 2c 31 2c 32 2c 33 38 35 30 2c 31 5d 5d 2c 22 57 68 65 6e 22 3a 33 38 35 30 7d 2c 7b 22 4b 69 6e 64 22 3a 32 2c 22 41 72 67 73 22 3a 5b 33 35 33 2c 34 38 32 2c 5b 5b 34 37 30 32 2c 34 5d 2c 5b 34 37 30 36 2c 32 5d 2c 5b 33 31 31 35 2c 32 5d 2c 5b 34 37 31 30 2c 32 5d 2c 22 34 33 36 3a 30 22 5d 5d 2c 22 57 68 65 6e 22 3a 33 38 35 30 7d 2c 7b 22 4b 69 6e 64 22 3a 37 38 2c 22 41 72 67 73 22 3a 5b 5b 30 2c 31 2c 32 2c 33 38 35 30 2c 32 5d 5d 2c 22 57 68 65 6e 22 3a 33 38 35 30 7d 2c 7b 22 4b 69 6e 64 22 3a 32 2c 22 41 72 67 73 22 3a 5b 34 34 38 2c 2d 31 2c 5b 33 32 2c 33 34 39 5d 5d 2c 22 57 68 65 6e 22 3a 33 38 35 30 7d 2c 7b 22 4b 69 6e 64 22 3a 37 Data Ascii: ]],"When":3850},{"Kind":78,"Args":[[0,1,2,3850,1]],"When":3850},{"Kind":2,"Args":[353,482,[[4702,4],[4706,2],[3115,2],[4710,2],"436:0"]],"When":3850},{"Kind":78,"Args":[[0,1,2,3850,2]],"When":3850},{"Kind":2,"Args":[448,-1,[32,349]],"When":3850},{"Kind":7
2024-04-16 17:43:29 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50045	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	1735	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/common.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:29 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: f6b4a15ad179f90411e5aa9004f416b0
2024-04-16 17:43:30 UTC	15950	IN	Data Raw: 39 63 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 0d 0a 37 66 66 38 0d 0a 70 72 65 2e 65 78 63 65 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 35 25 7d 62 6f 64 79 2c 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d Data Ascii: 9c/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */7ff8pre.exception{font-size:145%}body,td{margin:0;color:#333}body{background-repeat:repeat-
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6e 3a 6c 65 66 74 7d 2e 6d 65 6e 75 42 75 74 74 6f 6e 20 2e 6d 65 6e 75 42 75 74 74 6f 6e 42 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 2f 69 6d 67 2f 63 6f 6d 62 6f 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 6c 69 6e 65 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 62 6f 74 74 6f 6d 20 72 69 67 68 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 56 65 72 64 61 6e 61 27 2c 27 47 65 6e 65 76 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d Data Ascii: n:left}.menuButton .menuButtonButton{background:#fff url(/img/combo_button_no_line.gif) no-repeat bottom right;padding-top:2px;padding-right:22px;padding-bottom:3px;padding-left:3px;display:inline;font-family:'Verdana','Geneva',sans-serif;color:#fff;font-
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 74 65 6e 74 20 2e 6d 79 5f 74 61 67 73 20 2e 74 61 67 4c 69 73 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 31 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 43 6f 6e 74 65 6e 74 20 2e 6d 79 5f 74 61 67 73 20 2e 74 61 67 4c 69 73 74 20 2e 74 61 67 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 43 6f 6e 74 65 6e 74 20 2e 6d 79 5f 74 61 67 73 20 2e 74 61 67 4c 69 73 74 20 2e 74 61 67 52 65 6d 6f 76 65 7b 63 6f 6c 6f 72 3a 72 67 62 28 32 30 34 2c 30 2c 30 29 3b 66 6f 6e Data Ascii: tent .my_tags .tagList{font-weight:normal;font-size:91%;margin-left:5px}.bPageTitle .tagDropDown .tagDropDownContent .my_tags .tagList .tag{white-space:nowrap}.bPageTitle .tagDropDown .tagDropDownContent .my_tags .tagList .tagRemove{color:rgb(204,0,0);fon
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 74 6f 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 35 70 78 7d 2e 69 6e 6c 69 6e 65 53 63 68 65 64 75 6c 65 72 46 6f 6f 74 65 72 20 2e 74 6f 67 67 6c 65 43 61 6c 46 6f 6f 74 65 72 4d 69 64 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 63 61 6c 2f 66 6f 6f 74 65 72 2f 62 67 2e 67 69 66 29 3b 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 3a 30 20 36 70 78 20 30 20 36 70 78 3b 74 65 78 74 2d 61 6c 69 Data Ascii: background-position:right top;border-bottom:0;background-repeat:repeat;height:25px}.inlineSchedulerFooter .toggleCalFooterMiddle{background-image:url(/img/cal/footer/bg.gif);;border-bottom:0;background-repeat:repeat;height:25px;margin:0 6px 0 6px;text-ali
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 72 4d 6f 6e 74 68 56 69 65 77 20 2e 77 65 65 6b 4c 69 6e 6b 7b 77 69 64 74 68 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 32 64 31 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 62 43 61 6c 65 6e 64 61 72 20 23 64 72 6f 70 5a 6f 6e 65 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 62 43 61 6c 65 6e 64 61 72 20 23 64 72 6f 70 5a 6f 6e 65 73 20 64 69 76 7b 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 70 72 69 6e 74 20 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 57 65 65 6b 56 69 65 77 20 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: rMonthView .weekLink{width:18px;background-color:#e2e2d1;padding:30px 5px;vertical-align:middle;text-align:center}.bCalendar #dropZones{position:absolute;opacity:.5}.bCalendar #dropZones div{height:26px}.print .bCalendar .calendarWeekView th{background-co
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6e 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 6d 61 69 6c 43 6c 6f 73 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 66 75 6e 63 5f 69 63 6f 6e 73 2f 75 74 69 6c 2f 6d 61 69 6c 43 6c 6f 73 65 45 6e 76 31 36 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 6d 61 69 6c 4f 70 65 6e 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 66 75 6e 63 5f 69 63 6f 6e 73 2f 75 74 69 6c 2f 6d 61 69 6c 4f 70 65 6e 45 6e 76 31 36 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 Data Ascii: n-left:.5em}.mailCloseIcon{background-image:url(/img/func_icons/util/mailCloseEnv16.gif);background-position:0 0;width:16px;height:16px}.mailOpenIcon{background-image:url(/img/func_icons/util/mailOpenEnv16.gif);background-position:0 0;width:16px;height:16
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 69 67 68 74 42 75 62 62 6c 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 4f 76 65 72 72 69 64 61 62 6c 65 20 2e 62 6f 74 74 6f 6d 52 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 69 6d 67 2f 62 6f 74 74 6f 6d 52 69 67 68 74 42 75 62 62 6c 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 37 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 70 62 53 65 61 72 63 68 20 69 6e 70 75 74 2e 73 65 61 72 63 68 54 65 78 74 42 6f 78 7b 6d Data Ascii: ightBubble.png) no-repeat center;padding-top:19px;padding-bottom:12px}.lookupHoverDetailOverridable .bottomRight{background:url(/img/bottomRightBubble.png) no-repeat center;padding-top:4px;padding-bottom:27px;margin-top:8px}.pbSearch input.searchTextBox{m
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 33 66 33 65 63 7d 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 67 72 6f 75 70 69 6e 67 53 74 65 70 20 68 33 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 67 72 6f 75 70 69 6e 67 53 74 65 70 20 2e 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 31 25 7d 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 67 72 6f 75 70 69 6e 67 53 74 65 70 20 2e 73 75 62 74 6f 74 61 6c 52 6f 77 20 68 33 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 31 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d Data Ascii: ckground-color:#f3f3ec}.reportTab .bWizardBlock .groupingStep h3{text-align:left;display:block}.reportTab .bWizardBlock .groupingStep .text{font-size:91%}.reportTab .bWizardBlock .groupingStep .subtotalRow h3{text-align:left;font-size:91%;font-weight:norm
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6d 73 52 61 6e 67 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 65 6d 7d 2e 70 53 65 61 72 63 68 53 68 6f 77 4d 6f 72 65 20 2e 70 53 68 6f 77 4d 6f 72 65 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 70 53 65 61 72 63 68 53 68 6f 77 4d 6f 72 65 20 2e 70 53 68 6f 77 4d 6f 72 65 4e 6f 4c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 35 33 2c 31 35 33 2c 31 35 33 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 6f 70 4e 61 76 69 67 61 74 69 6f 6e 20 2e 70 53 65 61 72 63 68 53 68 6f 77 4d 6f 72 65 20 2e 6e 6f 4c 69 6e 6b 2c 2e 72 65 6c 61 74 65 64 4c 69 73 74 73 65 61 72 63 68 46 6f 6f 74 65 72 20 2e 70 53 65 61 72 63 68 53 68 6f 77 4d 6f 72 65 20 2e 6e 6f 4c 69 6e 6b Data Ascii: msRange{padding-right:.5em;padding-left:.5em}.pSearchShowMore .pShowMore{padding:0}.pSearchShowMore .pShowMoreNoLink{padding:0;color:rgb(153,153,153);text-align:left}.topNavigation .pSearchShowMore .noLink,.relatedListsearchFooter .pSearchShowMore .noLink
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 70 65 72 2c 23 62 72 6f 77 73 65 72 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 63 6c 61 73 73 69 63 57 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 35 70 78 7d 23 61 6c 6f 68 61 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 63 6c 61 73 73 69 63 53 68 6f 74 2c 23 62 72 6f 77 73 65 72 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 63 6c 61 73 73 69 63 53 68 6f 74 2c 23 61 6c 6f 68 61 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 61 6c 6f 68 61 53 68 6f 74 2c 23 62 72 6f 77 73 65 72 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 61 6c 6f 68 61 53 68 6f 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 61 6c 6f 68 61 53 6b 69 6e 2f 63 6c 61 73 73 69 63 5f 73 63 72 65 65 6e 73 68 6f 74 2e 67 69 66 29 3b 77 69 64 Data Ascii: per,#browserWarningDialog .classicWrapper{margin-right:25px}#alohaWarningDialog .classicShot,#browserWarningDialog .classicShot,#alohaWarningDialog .alohaShot,#browserWarningDialog .alohaShot{background-image:url(/img/alohaSkin/classic_screenshot.gif);wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50046	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	1730	OUT	GET /sCSS/60.0/sprites/1710411414000/Theme3/gc/dStandard.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:29 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:29 GMT Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 984d2667498898d121ed9a6e256975e8
2024-04-16 17:43:29 UTC	15950	IN	Data Raw: 38 30 30 30 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 45 78 70 72 65 73 73 69 6f 6e 53 65 74 4f 62 6a 65 63 74 41 6c 69 61 73 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 45 78 70 72 65 73 73 69 6f 6e 53 65 74 4f 62 6a 65 63 74 41 6c 69 61 73 42 6c 6f 63 Data Ascii: 8000/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.ExpressionSetObjectAliasTab .primaryPalette,.individualPalette .ExpressionSetObjectAliasBloc
2024-04-16 17:43:29 UTC	16384	IN	Data Raw: 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 62 53 75 62 42 6c 6f 63 6b 2c 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 62 50 61 67 65 42 6c 6f 63 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 33 70 78 20 73 6f 6c 69 64 20 23 34 61 39 30 65 32 7d 2e 62 6f 64 79 44 69 76 20 2e 6d 72 75 4c 69 73 74 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 62 6f 64 79 44 69 76 20 2e 68 6f 76 65 72 44 65 74 61 69 6c 20 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 42 6c 6f 63 6b 20 2e 73 65 Data Ascii: nTemplateVersionTab .bSubBlock,.actionPlanTemplateVersionTab .bPageBlock{border-top:3px solid #4a90e2}.bodyDiv .mruList.individualPalette .actionPlanTemplateVersionBlock .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .actionPlanTemplateVersionBlock .se
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 35 33 38 61 7d 2e 73 77 61 72 6d 54 61 62 20 2e 62 72 64 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 35 33 38 61 7d 2e 73 77 61 72 6d 54 61 62 20 2e 6c 69 73 74 56 69 65 77 70 6f 72 74 20 2e 73 75 62 4e 61 76 20 2e 6c 69 6e 6b 42 61 72 2c 2e 73 77 61 72 6d 54 61 62 20 2e 6d 43 6f 6d 70 6f 6e 65 6e 74 20 2e 63 48 65 61 64 65 72 2c 2e 73 77 61 72 6d 54 61 62 20 2e 67 65 6e 65 72 69 63 54 61 62 6c 65 2c 2e 73 77 61 72 6d 54 61 62 20 2e 62 53 75 62 42 6c 6f 63 6b 2c 2e 73 77 61 72 6d 54 61 62 20 2e 62 50 61 67 65 42 6c 6f 63 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 33 70 78 20 73 6f 6c 69 64 20 23 66 66 35 33 38 61 7d 2e 62 6f 64 79 44 Data Ascii: dPalette{background-color:#ff538a}.swarmTab .brdPalette{border-top-color:#ff538a}.swarmTab .listViewport .subNav .linkBar,.swarmTab .mComponent .cHeader,.swarmTab .genericTable,.swarmTab .bSubBlock,.swarmTab .bPageBlock{border-top:3px solid #ff538a}.bodyD
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 30 37 63 61 64 7d 2e 64 65 6c 65 67 61 74 65 64 41 63 63 6f 75 6e 74 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 Data Ascii: ryPalette .pbHeader,.lookupHoverDetail .deleteEventBlock .secondaryPalette .pbHeader,.chatterHover .deleteEventBlock .secondaryPalette .pbHeader,.chatterHover .deleteEventBlock .secondaryPalette{border-color:#107cad}.delegatedAccountTab .primaryPalette,.i
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 39 37 63 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 37 39 37 63 30 7d 2e 68 6f 6d 65 54 61 62 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 68 6f 6d 65 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 66 65 65 66 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 66 65 65 66 38 7d 2e 68 6f 6d 65 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 68 6f 6d 65 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c Data Ascii: nd-color:#1797c0;border-color:#1797c0}.homeTab .secondaryPalette,.individualPalette .homeBlock .secondaryPalette{background-color:#cfeef8;border-color:#cfeef8}.homeTab .tertiaryPalette,.individualPalette .homeBlock .tertiaryPalette,.layoutEdit .individual
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 42 6c 6f 63 6b 20 2e 70 62 54 69 74 6c 65 20 68 33 7b 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 30 20 32 37 70 78 7d 2e 6f 72 64 65 72 53 75 6d 6d 61 72 79 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 6f 72 64 65 72 53 75 6d 6d 61 72 79 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 62 39 36 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 62 39 36 66 66 7d 2e 6f 72 64 65 72 53 75 6d 6d 61 72 79 54 61 62 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 6f 72 64 65 72 53 75 6d 6d 61 72 79 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 Data Ascii: Block .pbTitle h3{margin:3px 0 0 27px}.orderSummaryTab .primaryPalette,.individualPalette .orderSummaryBlock .primaryPalette{background-color:#1b96ff;border-color:#1b96ff}.orderSummaryTab .secondaryPalette,.individualPalette .orderSummaryBlock .secondaryP
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 61 39 65 62 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 61 39 65 62 65 7d 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 54 61 62 20 2e 62 67 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 33 36 66 62 64 7d 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 54 61 62 20 2e 62 72 64 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 32 33 36 66 62 64 7d 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 54 Data Ascii: tertiaryPalette,.layoutEdit .individualPalette .personaccountBlock .tertiaryPalette{background-color:#8a9ebe;border-color:#8a9ebe}.personaccountTab .bgdPalette{background-color:#236fbd}.personaccountTab .brdPalette{border-top-color:#236fbd}.personaccountT
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 66 65 65 66 38 7d 2e 74 61 73 6b 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 74 61 73 6b 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 73 70 72 69 74 65 73 2f 6d 61 73 74 65 72 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 31 33 30 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 74 61 73 6b 4d 72 75 20 2e 6d 72 75 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 73 70 72 69 74 65 73 2f 6d 61 73 74 65 72 2e 70 6e 67 29 3b 62 61 63 Data Ascii: order-color:#cfeef8}.taskTab .pageTitleIcon,.individualPalette .taskBlock .pageTitleIcon{background-image:url(/img/sprites/master.png);background-position:0 -1130px;width:32px;height:32px}.taskMru .mruIcon{background-image:url(/img/sprites/master.png);bac
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 46 69 6c 65 4c 69 73 74 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 2c 2e 61 6c 6c 54 61 62 54 61 62 20 2e 63 68 61 74 74 65 72 46 69 6c 65 4c 69 73 74 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 66 69 6c 65 73 32 34 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 46 69 6c 65 4c 69 73 74 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e Data Ascii: .bRelatedList .chatterFileListBlock .relatedListIcon,.allTabTab .chatterFileListBlock .relatedListIcon{background-image:url(/img/icon/files24.png);background-position:0 0;width:24px;height:24px}.bRelatedList .chatterFileListBlock .relatedListIcon{position
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 78 7d 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 4d 72 75 20 2e 6d 72 75 49 63 6f 6e 7b 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 2c 2e 61 6c 6c 54 61 62 54 61 62 20 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 68 61 74 74 65 72 61 6e 73 77 65 72 73 32 34 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 41 Data Ascii: x}.chatterAnswersMru .mruIcon{}.bRelatedList .chatterAnswersBlock .relatedListIcon,.allTabTab .chatterAnswersBlock .relatedListIcon{background-image:url(/img/icon/chatteranswers24.png);background-position:0 0;width:24px;height:24px}.bRelatedList .chatterA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50044	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	508	OUT	OPTIONS /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:29 UTC	684	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:29 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: text/plain allow: POST,OPTIONS requestid: driftbde7c934455b8c90e5fade6ca80 content-length: 13 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-04-16 17:43:29 UTC	13	IN	Data Raw: 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 Data Ascii: POST, OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50047	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:29 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom0.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 4da459698580cdc7f4820b1b7f4c9c05
2024-04-16 17:43:30 UTC	15950	IN	Data Raw: 31 31 30 65 64 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 43 75 73 74 6f 6d 31 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 31 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: 110ed/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.Custom1Tab .primaryPalette,.individualPalette .Custom1Block .primaryPalette{background-colo
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 43 75 73 74 6f 6d 31 34 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 2c 2e 61 6c 6c 54 61 62 54 61 62 20 2e 43 75 73 74 6f 6d 31 34 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 73 70 72 69 74 65 73 2f 6d 61 73 74 65 72 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 36 31 34 70 78 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 43 75 73 74 Data Ascii: );background-position:0 0;width:16px;height:16px}.bRelatedList .Custom14Block .relatedListIcon,.allTabTab .Custom14Block .relatedListIcon{background-image:url(/img/sprites/master.png);background-position:0 -614px;width:24px;height:24px}.bRelatedList .Cust
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 43 75 73 74 6f 6d 32 31 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 63 7d 2e 43 75 73 74 6f 6d 32 31 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 32 31 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 6f 6d 70 75 74 65 72 33 32 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 Data Ascii: daryPalette .pbHeader,.chatterHover .Custom21Block .secondaryPalette{border-color:#66c}.Custom21Tab .pageTitleIcon,.individualPalette .Custom21Block .pageTitleIcon{background-image:url(/img/icon/computer32.png);background-position:0 0;width:32px;height:32
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 32 36 35 34 7d 2e 43 75 73 74 6f 6d 32 36 37 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 32 36 37 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 32 36 37 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 62 37 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 32 62 37 66 7d 2e 43 75 73 74 6f 6d 32 36 37 54 61 62 20 2e 62 67 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 32 36 35 34 7d 2e 43 75 73 74 6f Data Ascii: 2654}.Custom267Tab .tertiaryPalette,.individualPalette .Custom267Block .tertiaryPalette,.layoutEdit .individualPalette .Custom267Block .tertiaryPalette{background-color:#002b7f;border-color:#002b7f}.Custom267Tab .bgdPalette{background-color:#002654}.Custo
2024-04-16 17:43:30 UTC	4781	IN	Data Raw: 73 74 6f 6d 33 31 32 54 61 62 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 33 31 32 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 64 32 38 39 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 64 32 38 39 33 7d 2e 43 75 73 74 6f 6d 33 31 32 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 33 31 32 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 33 31 32 42 6c 6f Data Ascii: stom312Tab .secondaryPalette,.individualPalette .Custom312Block .secondaryPalette{background-color:#ed2893;border-color:#ed2893}.Custom312Tab .tertiaryPalette,.individualPalette .Custom312Block .tertiaryPalette,.layoutEdit .individualPalette .Custom312Blo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50049	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom1.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 9fb643ebe1efbd9ef4ff868dde9eb8e6
2024-04-16 17:43:30 UTC	15950	IN	Data Raw: 33 65 61 32 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 43 75 73 74 6f 6d 33 32 31 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 33 32 31 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: 3ea2/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.Custom321Tab .primaryPalette,.individualPalette .Custom321Block .primaryPalette{background-c
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6f 6d 33 39 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 74 65 6c 65 73 63 6f 70 65 32 34 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 0d 0a 38 31 35 36 0d 0a 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 43 75 73 74 6f 6d 33 39 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 Data Ascii: om39Block .relatedListIcon{background-image:url(/img/icon/telescope24.png);background-posi8156tion:0 0;width:24px;height:24px}.bRelatedList .Custom39Block .relatedListIcon{position:relative;margin-top:-4px;margin-left:5px;display:inline}.bRelatedList
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 43 75 73 74 6f 6d 34 38 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 35 36 33 36 33 7d 2e 43 75 73 74 6f 6d 34 38 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 34 38 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 74 72 6f 70 68 79 33 32 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 43 75 73 74 6f 6d 34 Data Ascii: .pbHeader,.chatterHover .Custom48Block .secondaryPalette{border-color:#e56363}.Custom48Tab .pageTitleIcon,.individualPalette .Custom48Block .pageTitleIcon{background-image:url(/img/icon/trophy32.png);background-position:0 0;width:32px;height:32px}.Custom4
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 35 37 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 35 37 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 39 62 34 63 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 39 62 34 63 64 7d 2e 43 75 73 74 6f 6d 35 37 54 61 62 20 2e 62 67 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 66 63 63 7d 2e 43 75 73 74 6f 6d 35 37 54 61 62 20 2e 62 72 64 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f Data Ascii: ette,.individualPalette .Custom57Block .tertiaryPalette,.layoutEdit .individualPalette .Custom57Block .tertiaryPalette{background-color:#79b4cd;border-color:#79b4cd}.Custom57Tab .bgdPalette{background-color:#007fcc}.Custom57Tab .brdPalette{border-top-colo
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 36 35 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 75 73 74 6f 6d 35 31 5f 31 30 30 2f 63 75 70 33 32 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 43 75 73 74 6f 6d 36 35 4d 72 75 20 2e 6d 72 75 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 75 73 74 6f 6d 35 31 5f 31 30 30 2f 63 75 70 31 36 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 Data Ascii: alPalette .Custom65Block .pageTitleIcon{background-image:url(/img/icon/custom51_100/cup32.png);background-position:0 0;width:32px;height:32px}.Custom65Mru .mruIcon{background-image:url(/img/icon/custom51_100/cup16.png);background-position:0 0;width:16px;h
2024-04-16 17:43:30 UTC	1559	IN	Data Raw: 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 38 35 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 36 38 35 34 7d 2e 43 75 73 74 6f 6d 37 34 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 37 34 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 37 34 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 32 38 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 62 32 38 63 7d 2e 43 75 73 74 6f 6d 37 34 54 61 62 20 Data Ascii: lette{background-color:#006854;border-color:#006854}.Custom74Tab .tertiaryPalette,.individualPalette .Custom74Block .tertiaryPalette,.layoutEdit .individualPalette .Custom74Block .tertiaryPalette{background-color:#00b28c;border-color:#00b28c}.Custom74Tab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50050	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom2.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 613fdf1584e8528fed24e83e54022fb2
2024-04-16 17:43:30 UTC	15950	IN	Data Raw: 33 65 61 32 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 43 75 73 74 6f 6d 37 35 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 37 35 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 3ea2/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.Custom75Tab .primaryPalette,.individualPalette .Custom75Block .primaryPalette{background-col
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 38 37 34 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 63 38 37 34 34 7d 2e 43 75 73 74 6f 6d 38 33 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 0d 0a 37 38 64 36 0d 0a 65 20 2e 43 75 73 74 6f 6d 38 33 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 38 33 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 61 35 37 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 63 61 35 37 37 7d 2e 43 75 73 74 6f 6d 38 33 54 61 62 20 2e Data Ascii: kground-color:#fc8744;border-color:#fc8744}.Custom83Tab .tertiaryPalette,.individualPalett78d6e .Custom83Block .tertiaryPalette,.layoutEdit .individualPalette .Custom83Block .tertiaryPalette{background-color:#fca577;border-color:#fca577}.Custom83Tab .
2024-04-16 17:43:30 UTC	14655	IN	Data Raw: 75 73 74 6f 6d 39 31 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 32 37 35 36 36 7d 2e 43 75 73 74 6f 6d 39 31 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 39 31 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 75 73 74 6f 6d 35 31 5f 31 30 30 2f 73 68 69 65 6c 64 33 32 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 43 75 73 74 6f 6d 39 31 4d 72 75 20 2e 6d 72 75 49 63 6f 6e Data Ascii: ustom91Block .secondaryPalette{border-color:#827566}.Custom91Tab .pageTitleIcon,.individualPalette .Custom91Block .pageTitleIcon{background-image:url(/img/icon/custom51_100/shield32.png);background-position:0 0;width:32px;height:32px}.Custom91Mru .mruIcon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50051	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom3.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 34d2d15df991fb66fd8b1940a6b768cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50053	142.250.105.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	973	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-6E6YzVxq3Z0QxpWRK-OjPw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:30 UTC	364	IN	Data Raw: 36 32 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 62d3<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 36 45 36 59 7a 56 78 71 33 5a 30 51 78 70 57 52 4b 2d 4f 6a 50 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="6E6YzVxq3Z0QxpWRK-OjPw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 68 72 4d 71 36 49 6d 46 39 35 49 41 50 57 4e 76 78 74 38 73 45 31 53 71 75 51 6f 6d 31 62 32 6c 7a 42 48 46 64 2d 70 47 73 44 72 52 50 57 5f 4e 77 72 33 76 32 36 6d 59 68 52 34 75 38 47 70 78 72 6c 42 4b 36 63 4a 58 35 38 58 57 35 34 30 52 34 59 39 6f 43 6c 4d 4f 4d 47 43 4b 65 30 4a 46 6b 4a 6f 47 6a 33 30 51 67 68 79 46 70 38 4f 6d 49 34 37 74 51 44 39 45 47 39 36 71 70 6a 6b 6b 42 43 62 30 4c 69 37 50 4d 46 37 72 30 30 39 70 70 37 54 6b 2d 71 7a 4c 79 67 78 63 6f 32 56 36 75 64 43 4c 5f 7a 76 7a 56 48 5f 32 4a 31 56 78 68 47 48 6e 2d 63 47 41 38 37 68 79 54 54 78 54 44 63 33 6d 61 4a 42 4f 4a 62 48 69 42 6f 62 7a 56 56 49 39 6f 75 56 4a 31 51 63 48 59 56 68 44 7a 4c 76 41 6d 41 50 64 51 30 75 51 30 49 4f 63 67 33 5a 46 7a 37 39 31 6d 43 78 68 64 69 77 Data Ascii: hrMq6ImF95IAPWNvxt8sE1SquQom1b2lzBHFd-pGsDrRPW_Nwr3v26mYhR4u8GpxrlBK6cJX58XW540R4Y9oClMOMGCKe0JFkJoGj30QghyFp8OmI47tQD9EG96qpjkkBCb0Li7PMF7r009pp7Tk-qzLygxco2V6udCL_zvzVH_2J1VxhGHn-cGA87hyTTxTDc3maJBOJbHiBobzVVI9ouVJ1QcHYVhDzLvAmAPdQ0uQ0IOcg3ZFz791mCxhdiw
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 61 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 36 45 36 59 7a 56 78 71 33 5a 30 51 78 70 57 52 4b 2d 4f 6a 50 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 4c 56 45 45 78 63 57 39 46 4e 31 70 45 65 6a 41 31 56 58 56 36 52 30 4a 74 63 7a 64 44 56 6d 31 31 51 7a 4d 30 63 31 6f 30 62 6d 35 59 64 30 35 71 5a 7a 41 32 4e 56 42 76 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 63 6e 64 71 4d 44 56 47 Data Ascii: a"><script type="text/javascript" nonce="6E6YzVxq3Z0QxpWRK-OjPw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9LVEExcW9FN1pEejA1VXV6R0JtczdDVm11QzM0c1o0bm5Yd05qZzA2NVBvLmpz\x22,\x22\x22,\x22cndqMDVG
2024-04-16 17:43:30 UTC	1255	IN	Data Raw: 55 33 56 6e 53 58 70 51 59 57 31 59 5a 44 67 76 5a 30 56 72 4d 55 78 78 5a 43 39 32 52 6d 30 31 4f 43 39 57 61 46 4e 74 64 32 31 43 63 6d 4e 32 4f 56 6c 50 4d 54 6c 52 54 6c 4d 30 63 46 64 31 54 30 56 74 52 30 55 79 63 6c 42 36 4e 56 59 72 54 30 68 6f 55 6a 4a 78 5a 58 42 49 64 6b 68 43 4e 48 64 6f 62 30 52 4f 63 56 46 32 64 54 64 30 4d 6b 68 59 59 6c 4a 51 62 56 4a 49 64 55 68 48 5a 56 4a 31 4e 57 68 71 59 6d 77 34 53 57 34 76 61 6b 38 30 56 7a 68 70 54 45 70 6a 62 55 68 4e 56 45 70 74 54 6e 4e 31 59 55 31 6b 52 48 64 33 52 47 77 78 54 33 41 79 53 6c 56 78 61 6e 59 35 63 45 59 7a 54 54 42 32 51 6d 68 30 63 54 46 44 51 31 4a 52 52 7a 64 4e 51 6b 46 48 4e 53 74 44 57 45 46 4e 65 47 52 52 5a 6c 5a 42 5a 47 68 6e 65 46 6f 7a 51 33 42 49 54 45 52 61 54 55 49 Data Ascii: U3VnSXpQYW1YZDgvZ0VrMUxxZC92Rm01OC9WaFNtd21CcmN2OVlPMTlRTlM0cFd1T0VtR0UyclB6NVYrT0hoUjJxZXBIdkhCNHdob0ROcVF2dTd0MkhYYlJQbVJIdUhHZVJ1NWhqYmw4SW4vak80VzhpTEpjbUhNVEptTnN1YU1kRHd3RGwxT3AySlVxanY5cEYzTTB2Qmh0cTFDQ1JRRzdNQkFHNStDWEFNeGRRZlZBZGhneFozQ3BITERaTUI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50052	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 769 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	769	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 52 4f 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,"countryCode":"RO"},"userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-16 17:43:30 UTC	670	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:30 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 4ebe32cef391a314 content-length: 915 x-envoy-upstream-service-time: 128 server: istio-envoy connection: close
2024-04-16 17:43:30 UTC	915	IN	Data Raw: 7b 22 69 64 22 3a 22 64 33 33 30 30 65 34 38 35 62 31 62 61 63 62 62 38 36 33 32 65 63 63 32 39 63 66 63 35 35 66 66 22 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"d3300e485b1bacbb8632ecc29cfc55ff","userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","companyId":null,"internal":false,"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50056	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	829	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTOk&operationContext=DELIVERY&contentId=05T8Z00002WJTrf&page=0&d=/a/8Z000000GYqW/XIhk.eaEqq45jwJH6U5I0GuVBBifKvGPF7KZfPoKJac&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=1p4JpfwYEe6ek1-rUPMeYA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=1p4JpfwYEe6ek1-rUPMeYA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:30 GMT Content-Length: 121000 Connection: close
2024-04-16 17:43:30 UTC	15202	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 08 03 05 06 07 09 04 ff c4 00 69 10 00 01 02 05 01 04 05 03 09 12 0a 06 08 05 02 07 01 00 02 03 04 05 06 11 07 08 12 21 51 09 13 31 41 61 22 71 81 14 32 52 74 91 Data Ascii: JFIFCCi!Q1Aa"q2Rt
2024-04-16 17:43:30 UTC	19	IN	Data Raw: 2b ba ef 62 7d c5 9b 48 15 2c 77 70 2b 36 91 1c 06 eb bd Data Ascii: +b}H,wp+6
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 89 f7 16 6d 06 37 5d ec 4f b8 b3 64 15 2c 77 70 2a 8d 02 37 5d ec 4f b8 b3 68 82 0b 0f 22 a8 d0 2b ba ef 62 7d c5 46 88 e0 41 61 3d c5 66 d0 e2 57 75 de c4 fb 8b 36 88 2a 58 ee 47 dc 54 68 0d d7 7b 13 ee 2c da 04 6e 9e c2 0a cd a0 41 6b b9 1f 71 51 95 e0 46 eb bd 89 f7 16 6d 13 c4 a9 63 b9 15 9b 44 11 ba ef 62 7d c5 9b 40 82 c7 77 02 a8 c1 05 a7 bd a5 51 a0 54 b5 dc 8f b8 b3 68 15 2c 77 22 a8 d1 04 6e bb b0 b4 fb 8b 36 88 63 75 de c4 fb 8b 36 88 20 b1 de c4 fb 8b 36 81 5d d7 7b 13 ee 2c da 04 16 3b d8 9f 71 55 82 bb ae f6 27 dc 59 b4 40 2d 3d ed 2b 36 81 5d d7 7b 13 ee 2a 34 47 02 a5 87 91 f7 16 6d 60 32 37 5d ec 4f b8 a8 d1 03 75 de c4 fb 8b 29 20 6a 4a cc ce 53 e6 61 ce c8 4c 46 96 98 84 e0 e8 71 60 bc b1 ec 23 bc 38 71 05 67 28 a6 b0 ca b4 99 90 9a 5b Data Ascii: m7]Od,wp7]Oh"+b}FAa=fWu6XGTh{,nAkqQFmcDb}@wQTh,w"n6cu6 6]{,;qU'Y@-=+6]{*4Gm`27]Ou) jJSaLFq`#8qg([
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 93 9e d7 80 e6 80 7b 8b dc 7b 57 6b ca 7b c9 50 a7 0b 4a 5b 93 5b fa 97 04 6b 73 3d 94 a0 8f 52 d7 88 38 46 19 f4 9e 68 15 bf a8 9a 11 51 d5 19 5a 74 18 77 35 90 c6 ce 32 6d ac 02 24 69 2d e0 23 41 79 ef 00 1d f1 9e c2 d3 8e d2 bd 17 27 2f a7 42 e9 50 6f c1 9f bf 98 e4 5b cd c6 5b 3c cc fb 3a 2e b5 4e a5 a8 7b 34 c0 a1 56 66 5f 31 37 66 54 62 d1 9b 11 e7 2e 32 db ad 89 04 13 df ba d7 96 8f 06 85 5e 52 5b 46 de f3 6a 3c 24 b3 ed e7 17 31 d9 9e 57 39 8a 5b 10 7f b4 86 f0 f6 cd cb f1 e5 77 ba cf 99 e1 fd 3e e3 6a de 45 7b 0f 5b 57 82 38 21 00 40 10 04 01 00 40 10 04 06 d5 75 fd 8b d5 fd a1 1f e2 dc b9 9a 7f eb 74 bd 68 fb d1 2b 89 87 d2 4e fa d5 8b ed b5 57 86 ce 46 0a cf 3b eb 67 a9 a4 bc 24 30 6c c5 cb 9d 82 c5 49 e6 a7 00 a1 7a 9c 02 85 ca d8 27 05 49 e6 Data Ascii: {{Wk{PJ[[ks=R8FhQZtw52m$i-#Ay'/BPo[[<:.N{4Vf_17fTb.2^R[Fj<$1W9[w>jE{[W8!@@uth+NWF;g$0lIz'I
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 96 94 64 08 4d 6c d4 e7 56 3d 53 3b 14 0f 2a 2c 57 f6 b8 93 93 8c e0 76 0c 05 e3 ef 2f 6b 5f 54 75 2a bc fa 39 91 c4 9c dc de 59 4d 72 d0 5d 3a da 02 c9 9d b2 ef ea 24 09 86 c7 86 ef 52 4f 36 18 13 32 51 b1 e4 c5 84 fe d0 41 c6 47 61 1c 0a 59 5e d6 b1 a8 aa 52 7e ce 66 21 37 07 94 79 cb d1 e5 78 dd 5b 3e 6d 63 72 ec c3 74 4e bd f2 15 59 99 b9 07 42 24 f5 6d 9f 96 0e 74 38 cc 1d dd 64 36 b8 1e 79 6f 25 eb f5 ea 50 bf b0 8d ec 16 f5 87 ec 7c de c3 97 5d 29 c1 4d 1f 3e df 5f ed 0f b0 ff 00 fe db fe fa e5 6d 0f cd 15 3f ab dc 28 79 27 ed 3d 68 5e 0c e0 9b 6d cb f6 39 55 f6 94 7f 8b 72 bd 3f 1d 75 92 b8 9e 5e 74 3c 7d b5 b5 23 f3 34 0f ef 25 7b 5e 55 f9 0a 5d 7f 03 99 75 e2 a3 aa fa 41 65 ab d3 fb 74 d6 e9 96 bc 78 d0 aa b5 01 4a 91 94 74 27 96 bb ac 8d 2d 0e Data Ascii: dMlV=S;,Wv/k_Tu9YMr]:$RO62QAGaY^R~f!7yx[>mcrtNYB$mt8d6yo%P\|])M>_m?(y'=h^m9Ur?u^t<}#4%{^U]uAetxJt'-
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 00 40 70 bd 6b fb 4e 5f 5f d5 ba 97 f7 68 8b b3 d1 7c e5 6f eb c3 fd c8 bd 3f 1d 75 9e 14 5b 9f e8 79 7f 31 f7 d7 ea cb a5 f6 8c ef 5b c3 2d 70 0f fa 2a 3f 98 7b eb 3a 0b ed 10 47 07 23 2b b0 68 b9 55 46 81 04 72 59 b4 0a aa 34 0a 9e 0b 36 88 27 19 e2 16 6d 15 21 66 d0 2a 46 16 6d 00 d7 39 87 79 8e 2d 23 bc 24 2a 4e 8c b6 e9 b6 9f 4a 1c 0f ba 5e b3 33 07 0d 8a 04 56 f8 f0 2b d4 e9 fc b1 bd b4 c4 6b fd a4 7d 3b 9f 6f cc d6 35 5a e2 6e 72 f5 49 49 8c 00 fd c7 72 77 05 ee 34 fe 53 e9 fa 86 22 a5 b3 2e 89 6e fc 78 1a c6 a4 64 7a 85 b2 4f fa be da 7f d1 4c 7c 7c 45 f9 bf ba 23 4f 94 97 2d 74 c7 fd a8 f3 f7 be 5e 47 6f af 14 71 42 00 80 20 08 02 00 80 20 08 0f 92 ab 48 a5 57 24 a2 53 6b 54 d9 69 f9 48 a3 0f 81 33 09 b1 18 e1 e2 08 c2 de de e6 b5 a5 45 56 84 dc Data Ascii: @pkN__h\|o?u[y1[-p?{:G#+hUFrY46'm!fFm9y-#$*NJ^3V+k};o5ZnrIIrw4S".nxdzOL\|\|E#O-t^GoqB HW$SkTiH3EV
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 7b 6b 4e 9c 7c 19 25 ed df ce 5e 50 8e dc 52 e0 73 3d 37 d1 5d 78 d7 ed 28 a0 6a 95 f7 b4 7d e9 6a d6 aa 74 98 13 14 8a 6d 06 33 61 4a c9 30 42 02 14 48 f9 1b d3 11 5f 80 f7 92 47 17 90 3b 17 1e e2 f2 d6 c6 bc a8 52 a3 19 24 f7 b7 c5 f5 74 2e 82 b2 9c 61 27 14 8d 0b 63 6b fb fa 8f b1 34 f6 a8 57 60 4b 55 ef ea 45 6a 35 97 01 fb 98 85 3b 53 6c c0 83 0a 33 9a 31 dc e0 e2 3b cb 4f 66 54 d4 d2 a9 4f 52 54 23 ba 0d 6d 75 2c 67 01 d2 4e a6 ca e1 c4 e4 74 4d 95 f6 82 93 a2 c2 be e6 76 af bc a2 ea 39 84 27 5f 2f 14 c3 7d 0c c7 c6 f7 a9 5d 2b 8e 30 73 e4 64 10 7b c0 ee 58 cf 53 b4 72 ef 4a 84 7b df 0f e6 eb cf 49 0e a4 78 6c ee 3a ef 46 9d ab 1b 41 ec 99 a8 b3 37 d6 ab dd 34 0a f5 1e e8 ae c4 8f 16 9d 34 0b db 0a 04 13 bd 4f cb c1 fa dc 12 5b bb db 80 b9 97 7d e2 Data Ascii: {kN\|%^PRs=7]x(j}jtm3aJ0BH_G;R$t.a'ck4W`KUEj5;Sl31;OfTORT#mu,gNtMv9'_/}]+0sd{XSrJ{Ixl:FA744O[}
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 40 76 ce cc 47 1a ab 2e 7f 99 4c 7b c1 78 ce 5e 79 9e 5e b4 4e 2d e7 92 33 08 b9 7c 47 07 52 50 bb 9a 9c 02 a5 ea d8 07 9b c4 65 7d ed a3 be 2a a8 d0 2a 46 16 6d 10 41 19 59 b4 1a c9 55 9b 44 75 85 9b 41 a2 08 ca a3 44 16 64 08 91 0f 92 de 1c d6 d4 6c ea dc 3f 01 6e fc 09 49 b3 e9 87 24 c6 f1 88 77 8f 2e e5 dd 5b e8 d4 e9 ef aa f6 9f e0 59 45 23 e8 00 34 60 0c 05 db c6 11 82 d9 8a c2 2c 15 80 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 1b ad a9 f6 53 46 fc e1 2d f1 8d 5c 3d 47 f5 3a be ac bd cc ac fc 56 7a 50 e7 af ca f8 3c e9 42 e5 29 0c 94 2e 56 c0 c1 42 e5 6c 12 51 cf 56 48 92 85 ea 70 0a 17 73 56 c0 2a 5e a7 00 d3 2e 56 c1 25 49 e6 54 a4 0a 97 8e e5 64 89 34 cb d5 92 07 16 d4 e7 67 4e ee 4f cd 91 fe 09 5d be 82 bf 49 db fa f1 f7 Data Ascii: @vG.L{x^y^N-3\|GRPe}*FmAYUDuADdl?nI$w.[YE#4`,@@@@@SF-\=G:VzP<B).VBlQVHpsV^.V%ITd4gNO]I
2024-04-16 17:43:31 UTC	7475	IN	Data Raw: 90 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 06 74 e8 4b b1 a4 96 d0 fe 6a 7e 31 cb f3 d7 2b 17 e9 ab 8e bf 82 3a 4b 9f 2b 23 2a f4 9f 5a e8 d4 da 1b 6c fb e1 a7 d4 90 da 61 40 98 2c eb 19 d5 9f e4 3c 76 e3 91 e4 be 3f ca 1e 4b d7 af 71 f4 ed 3f c6 7b da e0 f3 d2 8e 24 e9 bc e5 1b cc dd e9 a0 d6 33 df 5d b5 a9 d2 b3 b5 52 09 80 c9 76 3c ee b8 f8 bb 83 07 9b 8a e0 d3 d2 f9 45 ab 25 6f 79 27 1a 7c f9 c7 c3 7b 2b b3 39 6e 66 c9 ac fa a7 69 5e 96 24 9d 3e 95 51 eb 2a 1d 7c 18 d1 a0 88 4f 68 67 92 77 86 48 c1 c1 38 5c fe 4c 68 17 ba 5e a3 2a 95 a3 88 61 a4 f2 b7 ef dc 5a 9c 1c 5e f1 a6 7a e7 41 65 be cb 37 50 e0 ef cb 43 87 d4 43 98 74 3e b1 8f 85 dc c8 8d ed e1 cd 35 de 4a 5c 3b 97 7d a6 3f 09 bc b5 9c 3c f4 a6 27 4d e7 Data Ascii: @@@@@tKj~1+:K+#Zla@,<v?Kq?{$3]Rv<E%oy'\|{+9nfi^$>Q\|OhgwH8\Lh^*aZ^zAe7PCCt>5J\;}?<'M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50057	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	829	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLAa&operationContext=DELIVERY&contentId=05T8Z0000250azu&page=0&d=/a/8Z0000019R98/ofPnbj4wOZYBKpWeSGciEv2ng6eNiy.5nOQjk70.mf8&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1181	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=1p6mC_wYEe6wyK0XSJMgvA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=1p6mC_wYEe6wyK0XSJMgvA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:30 GMT Content-Length: 31577 Connection: close
2024-04-16 17:43:30 UTC	15203	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 01 50 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 0f 90 00 00 07 00 00 00 04 30 32 32 31 90 03 00 02 00 00 00 14 00 00 01 08 90 04 00 02 00 00 00 14 00 00 01 1c 90 10 00 02 00 00 00 07 00 00 01 30 90 11 00 02 00 00 00 07 00 00 01 38 90 12 00 02 00 00 00 07 00 00 01 40 91 01 00 07 00 00 00 04 01 02 03 00 92 90 00 02 00 00 00 04 30 35 38 00 92 91 00 02 00 00 00 04 30 35 38 00 92 92 00 02 00 00 00 04 30 35 38 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 Data Ascii: JFIFHHPExifMM*>F(iNHH022108@0580580580100
2024-04-16 17:43:30 UTC	19	IN	Data Raw: b6 9d 9e 5f 34 90 86 04 11 ee 9d 5b 6b 15 68 83 29 0a 48 Data Ascii: _4[kh)H
2024-04-16 17:43:30 UTC	16355	IN	Data Raw: 38 04 89 07 8f 3c 24 6d ae 2f 16 fc 18 ad 60 8a e6 53 b2 4c a4 53 bb 46 84 8d b9 07 7a 32 95 c6 e5 20 86 02 b1 74 e3 26 a4 d6 c7 9f 5f 03 87 af 56 15 6a c2 f2 86 de 47 63 5e 77 a8 f8 1e e3 fe 12 5b ff 00 15 f8 6b 54 6d 22 ff 00 56 b4 8a ce f3 31 09 e3 91 60 2c 61 95 11 88 09 3c 62 46 50 df 32 b2 90 1d 1b 6a 6d 8b 5a f8 a1 e1 8d 22 c3 53 b9 89 e6 ba 9b 4d 8a e5 cc 4b 6f 30 12 35 ab 88 e5 44 90 c7 b1 8a 39 01 b6 93 b4 7c c7 0a 09 ad 3d 77 c6 fa 7f 87 ee 34 75 bb 82 77 8b 58 f3 36 94 82 67 95 36 47 e6 60 c0 88 d2 92 47 51 b4 15 e4 90 30 6b 4f 3e 87 a2 ae 73 7a 57 c2 1f 0f 68 9a 68 d2 74 cb 8b 84 b6 5f ec 8c 79 8c 25 90 9d 22 e3 ed 28 cc ed 92 cd 2b e4 c8 c7 92 49 23 9a f5 aa e6 2d fc 5d e1 bb c4 f3 6d 6f d2 55 f3 6d e1 05 43 10 cf 74 15 a1 09 81 f3 06 0c 0e Data Ascii: 8<$m/`SLSFz2 t&_VjGc^w[kTm"V1`,a<bFP2jmZ"SMKo05D9\|=w4uwX6g6G`GQ0kO>szWhht_y%"(+I#-]moUmCt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50055	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	734	OUT	GET /sfc/servlet.shepherd/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkSjr&operationContext=CHATTER&contentId=05T8Z00002WJRwY HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1469	IN	HTTP/1.1 302 Found Date: Tue, 16 Apr 2024 17:43:30 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=1p6lj_wYEe6wYz_x1C_cxA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=1p6lj_wYEe6wYz_x1C_cxA; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://docusign.lightning.force.com/content/session?url=https%3A%2F%2Fdocusign.file.force.com%2Fsfc%2Fservlet.shepherd%2Fversion%2FrenditionDownload%3Frendition%3DORIGINAL_Jpeg%26versionId%3D0688Z00000kkSjr%26operationContext%3DCHATTER%26contentId%3D05T8Z00002WJRwY Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50058	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	829	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1181	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=1p6mUvwYEe6ZEAWYiSTtBQ; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:30 GMT Content-Length: 36300 Connection: close
2024-04-16 17:43:30 UTC	15203	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 24 00 00 02 4a 08 06 00 00 00 1c 0d 5e 5a 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 07 74 49 4d 45 07 e6 0c 0c 11 2c 1c b3 3b fe 20 00 00 20 00 49 44 41 54 78 9c ec dd 7d 74 5b f7 7d e7 f9 b7 48 f1 41 b6 23 5a 4e 88 ce 6c 20 dd b6 b4 aa ae 94 e5 94 18 b3 85 c7 3e 91 d6 da c2 1d b7 c4 86 2d bd d6 1c 79 a2 5d 59 b0 4b 8e b1 9b 6d 94 20 8e ba ea 58 3d b2 83 46 39 93 19 8c c1 c4 8c 34 f5 8c 74 ac 8c d9 b2 06 b7 6e 8c 8d 53 eb b4 89 d1 72 0d 76 dc 48 53 8f cc 36 b0 d0 ed 08 74 ad 81 92 d8 d4 13 b1 7f 00 17 b8 17 4f 04 49 50 57 94 3e af 73 70 24 e2 fe 9e 2f c8 fb bd bf df 0f c0 9a 5c 2e 97 43 44 44 44 c4 41 2d 4e 37 40 44 44 44 44 01 89 88 88 88 38 4e 01 89 88 88 88 38 4e 01 Data Ascii: PNGIHDR$J^ZpHYs%%IR$tIME,; IDATx}t[}HA#ZNl >-y]YKm X=F94tnSrvHS6tOIPW>sp$/\.CDDDA-N7@DDDD8N8N
2024-04-16 17:43:30 UTC	19	IN	Data Raw: b8 70 61 c9 c1 08 c0 e6 cd 9b 97 3c bb 22 22 22 22 ab 9f Data Ascii: pa<""""
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: f6 90 88 88 88 88 e3 1c 0b 48 2e 7e 70 6d f9 85 64 62 04 0c 03 23 9a 5c 46 fe 28 4b cc bd 42 32 c4 02 06 4b ed 52 45 19 d7 b9 8f 99 58 60 e9 e7 a3 76 a1 37 e0 79 12 11 91 66 6a ca a6 d6 c5 fa fc b1 73 fc d5 b9 0f 39 fe b9 1e d6 df d6 ba e4 72 32 89 49 08 85 f0 85 13 24 47 3c 78 16 5b 80 cb cf 58 6a c9 d5 af 0e 37 43 1f 6f 86 3e 88 88 48 5d d7 7d 86 e4 f3 c7 ce 31 f1 bd 0b 9c 7b ef 32 e9 f7 ae 2c a3 a4 24 e3 41 18 18 1a 61 38 14 66 34 96 a9 9d d4 9c 49 31 1f e6 1d 7c f9 9d b7 2d 5d 80 68 b4 74 b7 9f 8c 1a 44 63 f6 e3 d6 2a 93 51 4b f9 81 18 19 cb f3 d1 64 92 68 d9 f3 b6 9e 58 f3 46 13 e5 8d 27 16 a8 d2 f6 6a c7 aa cd 22 58 fb 98 89 11 08 c4 88 45 1b 2c cf 7a 2c 19 b5 d4 63 10 a8 32 de 99 58 80 fe 60 1c c2 83 b6 b6 64 62 81 fa 6d b4 b5 b5 81 f3 64 6b 4b 94 Data Ascii: H.~pmdb#\F(KB2KREX`v7yfjs9r2I$G<x[Xj7Co>H]}1{2,$Aa8f4I1\|-]htDc*QKdhXF'j"XE,z,c2X`dbmdkK
2024-04-16 17:43:30 UTC	4694	IN	Data Raw: 07 0d 25 39 37 56 15 ae 95 78 00 51 96 a1 f5 12 8f 61 f1 f6 71 37 6a d1 2d 14 a9 50 84 56 5f 17 1e 3c 74 b1 51 73 c2 db 65 51 3b 46 95 40 d6 fa b7 4c e2 b7 b3 d4 65 13 a8 6d 08 eb 0e 1e 88 cc aa 63 d6 34 79 70 9d ed 6e d4 30 4d 0d a3 f6 63 4f 52 01 45 b4 70 46 bc dd d8 9b 75 48 1f 9f b1 9a 87 c6 71 60 af a3 ae 15 85 59 13 71 4c 85 b7 35 c3 db 1c e3 d6 71 d0 fb 30 6a 5c ee 27 c6 e4 ad 53 22 5a 44 33 ff da 6f 3f 29 f9 fa 1f bc 83 4b 57 3f c2 a1 43 98 61 32 02 b8 56 19 75 cd 44 67 e8 2a 2a 4c 2e 6a b5 0d b8 a5 f8 2c 80 5a f5 d0 b4 14 28 4a ff 1d 61 76 a2 3f 85 1c cd c1 67 cd 5c cc 96 5a ed a0 a8 0b 53 ff 9a 89 4e a3 04 69 af 94 44 96 a1 d5 cb 50 ea a3 e3 54 ab 1d 98 7a 5e d8 67 c0 68 7a 19 57 b0 06 4c 79 1d 8a e2 08 b1 f4 4a 96 fa b7 65 06 53 e9 46 b3 3f 03 Data Ascii: %97VxQaq7j-PV_<tQseQ;F@Lemc4ypn0McOREpFuHq`YqL5q0j\'S"ZD3o?)KW?Ca2VuDg**L.j,Z(Jav?g\ZSNiDPTz^ghzWLyJeSF?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50054	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	829	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTTL&operationContext=DELIVERY&contentId=05T8Z00002WJU0Y&page=0&d=/a/8Z000000GYqS/LAWu8kNCayWAEvdGd0FtNaVbu5rBG.VBRGsbheRWGmo&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Set-Cookie: BrowserId=1p7MrPwYEe6wik1idC7r6Q; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=1p7MrPwYEe6wik1idC7r6Q; domain=.force.com; path=/; expires=Wed, 16-Apr-2025 17:43:30 GMT; Max-Age=31536000; secure; SameSite=None X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:30 GMT Content-Length: 117066 Connection: close
2024-04-16 17:43:30 UTC	15202	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 08 03 05 06 07 09 04 ff c4 00 6a 10 00 02 01 02 04 02 04 06 08 0d 10 05 09 07 03 05 00 01 02 03 04 05 06 07 11 08 12 13 21 31 51 09 14 22 41 61 71 15 32 52 74 81 Data Ascii: JFIFCCj!1Q"Aaq2Rt
2024-04-16 17:43:30 UTC	19	IN	Data Raw: 97 73 f8 8a 4c 07 2c bd cb f8 8c e6 04 72 be c6 99 9c c0 Data Ascii: sL,r
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 87 19 77 3f 88 a4 ab c9 1c b2 f7 2f e2 33 98 4f 35 5c 25 dc cc e6 10 8e 59 7b 97 f1 19 cc 08 70 97 99 32 92 21 c5 f9 e2 ca 4c 0a b8 cb b9 fc 46 73 02 ae 12 ee 65 26 10 8e 59 76 38 bf 88 ce 61 12 72 cb dc bf 88 ce 61 08 70 97 b9 7f 11 9c c0 af 2c bd cb f8 8c e6 04 38 4b dc bf 88 ac 8a f2 cb dc bf 88 ce 61 03 8b f3 c5 99 cc 0a f2 cb dc bf 88 a4 c2 39 2a e0 fb 9f c4 67 31 82 51 cb 2f 72 fe 22 93 08 39 65 ee 5f c4 65 54 0d 4b 5b 9b cc 3e e6 9d ed 85 c5 6b 6b 8a 52 52 a7 56 8c dc 27 06 bc ea 4b ad 33 3a a9 89 8c 4a b3 11 2c 84 d2 de 39 b5 a3 4f 95 2b 0c 76 ee 9e 6c c2 e1 b2 e8 b1 1d fa 78 c7 ba 35 97 95 f8 dc c7 53 a9 da 2c 5e e3 47 d1 9f 37 c1 c7 af 4d 45 7c b8 33 07 4b 78 db d1 7d 46 74 ac 71 2c 4a a6 57 c5 27 b2 f1 6c 53 68 d2 94 bb a1 59 79 0f e1 d9 9d 16 Data Ascii: w?/3O5\%Y{p2!LFse&Yv8arap,8Ka9*g1Q/r"9e_eTK[>kkRRV'K3:J,9O+vlx5S,^G7ME\|3Kx}Ftq,JW'lShYy
2024-04-16 17:43:30 UTC	1163	IN	Data Raw: 87 e2 f6 aa 69 d4 b6 bb a5 05 09 29 2e d4 a5 b7 32 7e 75 23 a5 dd 74 75 e8 b5 55 51 54 70 99 cc 7a 18 dd a2 68 aa 61 dc 18 96 25 87 e0 d8 7d ce 2d 8b 5e d1 b3 b2 b3 a5 2a d7 17 15 a6 a1 4e 95 38 ad e5 29 49 f5 24 97 9c eb e9 a6 6b 98 a6 98 cc cb 38 8c bc a8 d2 9c 52 7c 5b 78 4c 6a 6a 76 5b a1 52 b6 59 cb 17 6b 10 85 ce de 4a b5 b3 a5 d1 50 9f fe f2 af 2c 92 ee 93 ee 3d ce aa 9f 9a f6 6e f3 5f 85 57 0f 5c f1 9f 64 39 d5 7e aa cf 56 79 bb 8f c2 f7 a7 53 c5 b4 a7 2a 6a 85 8d 1f d5 39 63 16 76 75 ea 2e d5 42 e6 3d 4f e0 a9 4e 1f 8d e9 3a fe 8a ea 3a b7 eb b1 3f bd 1e e6 7a 5a b1 54 d2 e9 1d 49 d4 67 c6 c6 b3 f0 e7 a5 16 37 12 ba b1 b7 c2 2c 6f b1 e5 17 ba 8d cc a2 a7 77 cd e9 8d 2a 1b 7a 39 df 79 d9 69 f4 ff 00 33 e9 b5 37 e7 9e 66 23 d1 e4 fc 65 a5 34 f7 9a Data Ascii: i).2~u#tuUQTpzha%}-^N8)I$k8R\|[xLjjv[RYkJP,=n_W\d9~VySj9cvu.B=ON::?zZTIg7,ow*z9yi37f#e4
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: 7b 6e 92 d1 16 f4 14 51 1c a2 62 3f 07 37 53 18 a2 21 b4 f1 c5 9e ab 69 87 84 3a 9e a1 db d2 75 27 97 6b e0 98 83 82 ed 9c 69 d2 a6 e5 15 e9 71 dd 1a 6c d6 23 53 b4 f7 99 fd ee b4 26 cd 3d 6b 58 7a e1 91 b3 be 58 d4 7c a7 86 67 6c 9d 8b 50 c4 70 8c 5a de 37 16 d7 14 64 a4 9c 5a ec 7d d2 4f 74 d3 eb 4d 34 78 2b d6 6b d3 dc 9b 57 23 13 0e 04 c4 d3 38 96 dd aa da 9d 95 34 77 20 e3 1a 87 9c b1 2a 56 78 6e 13 6d 2a cf 9e 5b 4a b5 4d bc 8a 50 5f be 9c a5 b2 49 77 96 d3 69 ae 6a ee c5 9b 71 99 94 d3 4c d7 38 87 9d de 0a 7c b1 8d e7 bd 66 d4 ae 20 31 6b 59 d3 b7 ad 1a b6 d0 a8 d3 e5 95 dd dd 7e 9a a4 62 fc fc b1 8a df bb 9a 27 ae e9 35 ca 6c 69 ed 69 29 ff 00 d8 88 c3 95 a9 9c 53 14 be 0e 0e 3f d6 69 a9 3e bc c1 fd e6 99 7d db ea 6b 7f e9 f7 26 ef 89 87 13 d7 6c Data Ascii: {nQb?7S!i:u'kiql#S&=kXzX\|glPpZ7dZ}OtM4x+kW#84w Vxnm[JMP_IwijqL8\|f 1kY~b'5lii)S?i>}k&l
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: f0 63 2b b9 70 bd ae b1 b1 52 77 4e 15 d5 1e 4f 6d d2 7b 1d 3e 5d bd 3b ec 7a 7e 91 e3 e5 d6 33 cb ff 00 fa 72 75 1e 1d 2d c3 c0 d0 f0 ef 62 35 3a 0f 93 d9 2f 19 c3 5d 4d fd b7 43 c9 5b 6f 83 9b 98 a7 4b 73 d6 b5 d9 c7 f2 46 af 9c 3d 28 3c 73 88 c4 df 0a 0b c2 d7 08 79 85 62 0a 1d 2b c4 b0 e5 67 cd fe df a7 5d 9e 9e 4e 93 fb 4e f7 a3 9d 6f 9c 29 c7 64 fb 9b e9 fc 63 1e 72 72 be 7e 07 ec 7b c4 14 9c f9 ee 39 f9 7f d9 7b 27 0e 7f 83 97 73 b7 bb 8f ed 05 39 ff 00 df a2 d6 af da 1d 43 c2 56 03 c7 e6 27 a5 2e e3 86 7c 7e d6 d3 29 2c 4a e2 33 a5 d3 d8 c2 4a ef 68 f4 8e 4a b4 5c fb 39 3d 1b 76 1c fd d2 bd aa 9b f8 d6 c7 d3 c7 9f 97 a9 a5 d9 b5 d6 fa 7c dd d3 f4 21 e1 82 fe 36 50 fe b7 86 7c c3 ae ef bd 1f fb 3f ee 67 9d 3b ae 35 63 84 5f 08 de ba 5d e1 57 9a ab Data Ascii: c+pRwNOm{>];z~3ru-b5:/]MC[oKsF=(<syb+g]NNo)dcrr~{9{'s9CV'.\|~),J3JhJ\9=v\|!6P\|?g;5c_]W
2024-04-16 17:43:30 UTC	16384	IN	Data Raw: bb 87 f0 bc e8 63 13 5d 1c 6e 96 03 7f 27 19 76 6f c9 27 c9 f1 bd 84 6c 9b 55 33 d7 9b fc 3d 30 77 9b 5c fa ce 71 c1 57 07 fa c1 47 57 ef 78 a7 e2 6a bc e3 9a ee 9d 5a 96 16 15 a7 19 57 55 aa c1 c2 55 eb 28 79 34 f9 69 b7 18 53 5d 89 f5 ed b2 47 1b 77 dd 74 f3 a7 8d 0e 8b c1 f2 cf e5 1f 9c ab 7a ed 3d 5e a5 1c 9c 6b 55 f8 7c e3 a3 41 35 7b 32 6b 2f 0f 79 da fb 3a 61 f9 92 f2 77 d7 d6 53 94 2a 56 96 ef c9 a5 56 d6 6d 46 aa 8c 76 8c 65 4f 69 24 97 52 36 d3 6b f6 cd 76 9e 9d 3e ae 9e ac d3 c2 27 fe fe 29 a6 e5 aa e9 8a 6b 8c 36 e9 f1 e9 c7 c5 2a 1e c0 54 e1 6b 6c 5d ae 8d 5c fb 05 88 7b 7e fe 4e 6e 4f ed 2f f3 26 d5 33 d7 ef fc 3d 30 9e f3 6b 9f 59 be 70 a7 c2 4e bd 67 fd 7b 87 15 5c 55 aa 96 78 8d a5 6f 1b c3 f0 cb 8e 55 71 52 ba 8f 2d 27 2a 71 7b 51 a5 49 Data Ascii: c]n'vo'lU3=0w\qWGWxjZWUU(y4iS]Gwtz=^kU\|A5{2k/y:awSVVmFveOi$R6kv>')k6Tkl]\{~NnO/&3=0kYpNg{\UxoUqR-'*q{QI
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: 64 7d 94 30 aa d5 76 95 57 d1 af ed 3d 16 87 a2 da 9d 4e 2a bf f4 29 fc 7d 8d 22 dc cf 36 e3 42 ca de df ae 10 dd fb a7 d6 cf 65 a1 d9 b4 7b 7c 66 d5 3f 4b b6 78 cb 58 a6 23 93 5c ed 52 00 00 00 00 00 00 00 00 03 ba b8 43 fb 32 5b 7d ef ba f9 28 f0 7d d1 fe a3 ab ef 53 ef 70 f5 fe 25 9d 0e 47 e7 b8 87 48 a4 a6 5b 09 c3 4d c8 9c 25 e4 d1 f7 19 87 7c ab 5d c5 26 10 83 39 80 33 9a 45 5a d8 ce 61 13 08 29 30 73 43 5d c5 26 10 83 39 81 56 bb 8c e6 04 14 98 15 68 ce 60 43 5b 94 98 42 bd 9d 4c ce 60 e6 35 e7 46 73 0a a1 ad cc e6 05 5a d8 ce 60 1a dc a4 c0 ab 5b 14 98 10 67 30 21 ad 8a 4c 2b c9 56 b7 33 98 4f 35 4a cc 20 32 aa 94 21 ad cc e6 09 85 4a 4c 20 6b 73 39 82 61 52 93 08 43 5b 99 cc 0d 4a 16 77 17 53 e4 a1 46 53 ef d9 75 1c cd 06 d5 ac dd 2b ef 7a 4b 73 Data Ascii: d}0vW=N*)}"6Be{\|f?KxX#\RC2[}(}Sp%GH[M%\|]&93EZa)0sC]&9Vh`C[BL`5FsZ`[g0!L+V3O5J 2!JL ks9aRC[JwSFSu+zKs
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: ca 79 7b 2a 62 b8 4e 29 8d 50 85 f5 e5 a5 4a 34 6d 60 f9 ea ca 52 5b 2d e2 bb 17 a5 ec 76 1b 65 71 63 57 6e f5 7e 0d 35 44 cb 5b 54 cf 5a 25 88 d4 2e 68 57 8e f4 aa 29 7a 3c e7 db b4 7b 8e 97 5f 4f 5b 4f 5c 4f bf d8 ed a2 a8 ab 93 54 e7 24 00 00 00 00 00 00 00 00 07 67 f0 cb f6 79 c9 9f 7c 57 c8 91 e4 ba 77 ff 00 8e ea fe ef e7 0e 36 b3 c4 54 f5 1c fc 8c f3 60 00 00 00 01 12 8c 67 17 09 c5 4a 32 5b 34 d6 e9 a2 62 66 27 30 3a 8f 51 78 58 d1 ed 46 55 2e 6e b2 ec 70 8c 46 a6 ef c7 70 cd a8 cd be f9 45 2e 49 7c 2b 7f 49 ed 36 5e 9f 6f 7b 2e 29 a2 ef 5e 88 fd da f8 c7 aa 79 c7 b5 ca b5 ac bd 6b 84 4e 63 ce c5 cd 46 e0 63 51 f2 d7 4b 7d 92 6f 6d f3 2d 94 37 6a 8a da 8d d2 8f dc bf 26 4f d4 fe 03 eb 7b 2f 75 7d af 5d 8b 7a fa 66 cd 5d bc e9 f6 f3 8f 5c 3b 2b 5b Data Ascii: y{*bN)PJ4m`R[-veqcWn~5D[TZ%.hW)z<{_O[O\OT$gy\|Ww6T`gJ2[4bf'0:QxXFU.npFpE.I\|+I6^o{.)^ykNcFcQK}om-7j&O{/u}]zf]\;+[
2024-04-16 17:43:31 UTC	2378	IN	Data Raw: ae b6 8d 79 b0 db bf 92 8f 9b 77 56 ff 00 c7 6a fb f4 fb dc 1d c7 c4 7a de 8a d3 a9 ba 3f 30 c4 ba 06 b1 20 07 8d 27 ee 67 ad 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 7d 88 99 c0 ac a4 fc c6 75 57 3e 41 47 d7 da 61 56 67 98 8e cf 51 94 d2 21 af 3a 33 98 55 06 73 02 ad 6c 67 30 05 26 04 35 b9 49 81 52 93 02 ad 6c 67 30 84 35 b9 9c c1 31 95 4c e6 11 e9 0c e6 09 84 35 b9 49 84 2b d8 67 30 05 26 11 c9 56 b6 29 30 4c 20 ce 61 0a b5 b1 9c c0 86 b7 29 30 85 4a 4c 01 94 c0 86 b7 ec 33 98 c2 26 15 2b 30 8c 8d 6e 67 30 2a 67 30 21 ad cc e6 05 4a 4c 08 68 a4 c0 a9 9c c0 86 9a 33 98 41 db d8 52 61 13 18 41 94 c2 15 68 a4 c0 83 39 81 56 8a 4c 08 29 30 21 ae e3 39 84 4c 2a 67 30 67 b5 0d 6c 52 61 13 18 41 4a a9 40 d6 e6 53 02 ad 14 98 47 27 39 d3 9d 6f d5 Data Ascii: ywVjz?0 'g}uW>AGaVgQ!:3Uslg0&5IRlg051L5I+g0&V)0L a)0JL3&+0ng0g0!JLh3ARaAh9VL)0!9Lg0glRaAJ@SG'9o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50059	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289409101&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 14838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	14838	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 31 34 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 32 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 33 31 33 33 38 2e 32 38 31 32 35 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 36 34 2c 22 41 72 67 73 22 3a 5b 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 31 39 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 2c 31 32 38 30 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e 64 22 3a 34 30 2c 22 41 72 67 73 22 3a 5b 31 32 36 33 2c 39 30 37 5d 2c 22 57 68 65 6e 22 3a 36 31 34 30 7d 2c 7b 22 4b 69 6e Data Ascii: {"Seq":5,"When":6140,"Evts":[{"Kind":42,"Args":[1263,31338.28125],"When":6140},{"Kind":10,"Args":[3,0,0],"When":6140},{"Kind":64,"Args":[3,0,0],"When":6140},{"Kind":19,"Args":[1263,907,1280,907],"When":6140},{"Kind":40,"Args":[1263,907],"When":6140},{"Kin
2024-04-16 17:43:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50065	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=3&ClientTime=1713289409730&PageStart=1713289404678&PrevBundleTime=1713289409092&LastActivity=1697&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 11617 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	11617	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 7d 8b 76 db 46 92 e8 af 70 b8 33 da 38 23 50 e8 77 b7 33 5a 5f bf e2 78 e2 d8 5e 4b 4e 36 a3 78 b4 10 09 49 b4 29 92 e1 43 b2 f3 b8 df 72 ff 64 cf b9 3f 74 7f e1 56 75 57 83 00 48 c0 b0 27 9e d9 7b ee 38 33 14 08 14 aa ab ab ab eb d5 d5 cd 9f fb 47 f9 8f fd db 62 bf ff dd 65 3e ed df 96 32 85 eb 87 d7 ab 65 ff f6 c9 cf fd af c7 d3 51 ff b6 e2 fb fd bb 8b 0b bc f5 aa 0c f8 eb 7e 84 60 69 5a 80 f4 af c7 cb f1 d9 24 ef 97 61 e5 06 d6 15 90 70 df ec 6b 99 ee 6b a5 f7 99 ff 9f 14 6a 5f 2a 46 df 34 13 65 24 7a 83 84 6f 48 32 c2 ec a7 fb 69 09 90 b3 0d a0 14 1d 01 cb 18 81 24 e6 c4 40 70 cb b8 da d7 5d 70 87 57 9a 61 2b e8 65 47 82 5b 01 2b 18 4d 99 60 d9 09 b7 7f a5 19 b6 8c 1e 06 a4 46 07 df 8d b4 15 b0 82 51 36 13 dc 84 5b ee Data Ascii: }vFp38#Pw3Z_x^KN6xI)Crd?tVuWH'{83Gbe>2eQ~`iZ$apkkj_*F4e$zoH2i$@p]pWa+eG[+M`FQ6[
2024-04-16 17:43:30 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:30 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 30 36 37 35 7d 0a Data Ascii: {"BundleTime":1713289410675}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50060	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	666	OUT	POST /track/?verbose=1&ip=1&_=1713289409326 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1170 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	1170	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 50 61 67 65 25 32 30 56 69 65 77 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 25 33 46 6c 61 6e 67 75 61 67 65 25 33 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Page%20View%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3
2024-04-16 17:43:30 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 25 x-envoy-upstream-service-time: 34 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:30 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50061	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289409101&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:43:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50063	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289409102&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:43:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50064	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289409102&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	4420	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 39 38 35 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 39 38 35 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 38 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 65 6e 74 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 39 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a Data Ascii: {"Seq":8,"When":9856,"Evts":[{"Kind":100,"Args":["visible"],"When":9856},{"Kind":57,"Args":[12,"pointerover",16691.5,48,16738.800000000017,16739,0],"When":9875},{"Kind":57,"Args":[12,"pointerenter",16691.5,48,16739,16739,0],"When":9875},{"Kind":57,"Args":
2024-04-16 17:43:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50062	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289409102&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 5856 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	5856	OUT	Data Raw: 7b 22 53 65 71 22 3a 39 2c 22 57 68 65 6e 22 3a 31 30 33 38 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 33 26 43 6c 69 65 6e 74 54 69 6d 65 Data Ascii: {"Seq":9,"When":10380,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime
2024-04-16 17:43:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50067	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom4.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:30 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: bc63dd227382a3b2dd56ed3bb9614a51

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50068	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom5.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: afd43467b3dd222bb5aed5f29ebfe22d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50069	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom6.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:30 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:30 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 22f5baeab278cd27787ec0af7463c7b8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50072	3.161.150.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	640	OUT	GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/domains.json HTTP/1.1 Host: api-cdn.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	645	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 44 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT Last-Modified: Thu, 08 Feb 2024 12:33:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 17:43:32 GMT Cache-Control: max-age=120,s-maxage=120 ETag: "bd0b814b289c55fd0f2d0cd84ca3acd5" Vary: Accept-Encoding,Origin X-Cache: RefreshHit from cloudfront Via: 1.1 ec13c3d37b9631316c1317d4f9c05e1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: z5jy1qLb3SXB6tpsg2qnLpd-5nZ5N9XKPr5PBhzE41fkgsJ096DW6A==
2024-04-16 17:43:31 UTC	44	IN	Data Raw: 7b 22 61 6c 6c 6f 77 41 6c 6c 44 6f 6d 61 69 6e 73 22 3a 74 72 75 65 2c 22 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 3a 5b 5d 7d Data Ascii: {"allowAllDomains":true,"allowedDomains":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50074	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom7.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 4434c49c60b042ed35a51dd5996218dc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50073	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom8.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 6a0dc5dad464bb51dda2f845447e07d6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50075	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	1761	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom9.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: a974fbdc17037e5a26f70e9646f8ae6b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50077	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:30 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:30 UTC	443	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 32 38 39 33 39 38 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 31 62 39 34 62 31 32 33 2d 39 64 65 61 2d 34 35 33 35 2d 39 61 34 31 2d 65 38 33 36 39 39 30 38 39 61 66 30 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=305622db-cab4-46c0-8a17-15a582e0ed4c&sessionStarted=1713289398&targeting_context=%7B%22sessionId%22%3A%221b94b123-9dea-4535-9a41-e83699089af0%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-16 17:43:31 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Tue, 16 Apr 2024 17:43:31 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: d7ef97fe43fcd068 vary: Accept-Encoding x-envoy-upstream-service-time: 201 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 17c056a089c69d54a02a9a3ca804fdd6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: 6mNgymH3XCOpExM7UFeHhtZylmlPDTeO2WPPlsGjx2-zEmv9ReNAmw==
2024-04-16 17:43:31 UTC	15487	IN	Data Raw: 38 35 34 39 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 69 74 79 22 3a 22 41 74 6c 61 6e 74 61 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 32 34 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 33 30 33 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 33 2e 37 34 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 38 34 2e 33 38 37 31 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e 22 3a Data Ascii: 8549{"location":{"ip":"81.181.57.52","city":"Atlanta","subdivision":"Georgia","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":524,"postalCode":"30301","latitude":33.7485,"longitude":-84.3871},"tokenResult":{"accessToken":
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 68 61 74 65 61 6e 64 6f 2e 20 50 75 65 64 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 Data Ascii: ssage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests chateando. Puedes habilitar las c
2024-04-16 17:43:31 UTC	2258	IN	Data Raw: 31 31 2c 35 31 36 36 39 37 31 2c 35 32 31 33 31 34 38 2c 35 32 36 35 36 36 30 2c 35 32 36 35 31 39 37 2c 35 32 31 33 31 34 32 2c 35 32 39 30 37 33 33 2c 35 32 35 36 31 32 39 2c 35 32 35 37 30 38 35 2c 35 32 33 34 39 30 31 2c 35 32 31 33 31 35 35 2c 35 31 38 31 37 34 39 2c 35 32 36 30 35 34 36 2c 35 32 30 39 39 36 39 2c 35 32 31 33 31 34 39 2c 35 32 31 33 31 37 35 2c 35 32 35 33 38 35 36 2c 35 32 31 33 31 36 37 2c 35 32 31 33 31 36 38 2c 35 32 37 39 37 38 30 2c 35 32 35 37 31 37 38 2c 35 32 36 35 37 37 33 2c 35 32 35 32 36 33 30 2c 35 32 31 33 31 37 33 2c 35 32 34 35 36 31 30 2c 35 32 37 32 31 33 30 2c 35 32 33 34 39 31 31 2c 35 32 34 33 33 34 39 2c 35 32 36 31 38 34 39 2c 35 32 36 37 38 39 31 2c 35 32 36 35 35 36 36 2c 35 32 38 32 37 34 30 2c 35 32 36 35 Data Ascii: 11,5166971,5213148,5265660,5265197,5213142,5290733,5256129,5257085,5234901,5213155,5181749,5260546,5209969,5213149,5213175,5253856,5213167,5213168,5279780,5257178,5265773,5252630,5213173,5245610,5272130,5234911,5243349,5261849,5267891,5265566,5282740,5265
2024-04-16 17:43:31 UTC	10764	IN	Data Raw: 32 61 30 34 0d 0a 35 37 34 39 36 2c 35 32 35 37 37 31 31 2c 35 32 37 30 30 38 39 2c 35 32 37 30 33 33 32 2c 35 32 37 31 30 31 37 2c 35 32 37 31 37 39 36 2c 35 32 37 32 31 33 30 2c 35 32 37 32 32 34 39 2c 35 32 37 33 38 31 33 2c 35 32 37 34 36 33 36 2c 35 32 37 35 31 30 33 2c 35 32 38 33 36 39 31 2c 35 32 38 36 30 31 31 2c 35 32 38 36 30 31 32 2c 35 32 38 36 30 31 33 2c 35 32 38 36 30 31 34 2c 35 32 38 36 30 31 35 2c 35 32 38 36 33 36 36 5d 2c 22 61 75 74 6f 4f 66 66 6c 69 6e 65 22 3a 74 72 75 65 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 4d 6f 64 65 22 3a 22 41 4c 57 41 59 53 5f 4f 4e 4c 49 4e 45 22 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 49 64 22 3a 39 31 33 35 36 38 7d 2c 7b 22 69 64 22 3a 32 38 36 39 33 2c 22 6d 65 6d 62 65 72 Data Ascii: 2a0457496,5257711,5270089,5270332,5271017,5271796,5272130,5272249,5273813,5274636,5275103,5283691,5286011,5286012,5286013,5286014,5286015,5286366],"autoOffline":true,"teamAvailabilityMode":"ALWAYS_ONLINE","teamAvailabilityId":913568},{"id":28693,"member
2024-04-16 17:43:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50080	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289409103&PageStart=1713289396931&PrevBundleTime=1713289408147&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	3166	OUT	Data Raw: 7b 22 53 65 71 22 3a 31 30 2c 22 57 68 65 6e 22 3a 31 33 30 34 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 75 69 64 3d 61 6a 48 6e 59 62 5a 65 56 75 34 74 6c 35 70 30 33 74 68 4d 32 67 26 76 3d 31 26 68 6f 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 32 30 35 39 39 2e 39 30 30 30 30 30 30 30 30 30 32 33 2c 34 38 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 33 36 2c 22 78 6d 6c 68 74 74 Data Ascii: {"Seq":10,"When":13049,"Evts":[{"Kind":57,"Args":[2,"https://tags.srv.stackadapt.com/js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com",20599.900000000023,481.79999999998836,"xmlhtt
2024-04-16 17:43:31 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50084	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=5&ClientTime=1713289407933&PageStart=1713289396931&PrevBundleTime=1713289408147&LastActivity=3725&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50085	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=2&ClientTime=1713289408022&PageStart=1713289404678&PrevBundleTime=1713289408042&LastActivity=3153&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50081	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /s/sfsites/aura?r=9&zoomin_app.ZoominCommunitySearch.obtainSearchSourcesList=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: a60d101af6e53ffb530ebc47c9abcaf6
2024-04-16 17:43:31 UTC	1614	IN	Data Raw: 36 34 32 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 642<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50083	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1729	OUT	GET /s/sfsites/aura?r=8&aura.ApexAction.execute=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 29b6ea0fc3b4471a54fa74776d59d87f
2024-04-16 17:43:31 UTC	1515	IN	Data Raw: 35 64 66 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 5df<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50082	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1823	OUT	GET /s/sfsites/aura?r=10&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=1&zoomin_app.ZoominCommunitySearch.obtainSearchPreference=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: a7b171d92123d64db6c563d7ecac2414
2024-04-16 17:43:31 UTC	1809	IN	Data Raw: 37 30 35 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 705<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50076	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 573 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	573	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 63 63 38 63 33 32 34 30 2d 39 33 65 31 2d 34 39 33 34 2d 38 34 39 39 2d 30 34 37 35 66 65 62 33 39 30 39 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 32 31 30 30 64 63 66 39 2d 36 34 65 36 2d 34 35 63 62 2d 39 64 38 38 2d 32 34 32 33 66 64 31 38 33 30 32 38 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%22cc8c3240-93e1-4934-8499-0475feb39090%22%2C%22instanceId%22%3A%222100dcf9-64e6-45cb-9d88-2423fd183028%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-16 17:43:31 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:31 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 230ede51779c140e vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 15 server: istio-envoy connection: close
2024-04-16 17:43:31 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50078	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	563	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 36 34 30 34 34 66 66 33 2d 30 31 37 39 2d 34 61 34 37 2d 61 63 38 30 2d 66 34 63 32 32 37 39 63 36 61 34 36 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 63 63 38 63 33 32 34 30 2d 39 33 65 31 2d 34 39 33 34 2d 38 34 39 39 2d 30 34 37 35 66 65 62 33 39 30 39 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 32 31 30 30 64 63 66 39 2d 36 34 65 36 2d Data Ascii: metric_payload=%7B%22id%22%3A%2264044ff3-0179-4a47-ac80-f4c2279c6a46%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%22cc8c3240-93e1-4934-8499-0475feb39090%22%2C%22instanceId%22%3A%222100dcf9-64e6-
2024-04-16 17:43:31 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:31 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 85511d5c7d097ca3 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-04-16 17:43:31 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50079	13.110.252.95	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	867	OUT	GET /content/session?url=https%3A%2F%2Fdocusign.file.force.com%2Fsfc%2Fservlet.shepherd%2Fversion%2FrenditionDownload%3Frendition%3DORIGINAL_Jpeg%26versionId%3D0688Z00000kkSjr%26operationContext%3DCHATTER%26contentId%3D05T8Z00002WJRwY HTTP/1.1 Host: docusign.lightning.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BrowserId_sec=1p6lj_wYEe6wYz_x1C_cxA
2024-04-16 17:43:31 UTC	1336	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 16 Apr 2024 17:43:31 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Content-Type: text/html; charset=UTF-8 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://docusign.my.salesforce.com/visualforce/session?url=https%3A%2F%2Fdocusign.lightning.force.com%2Fcontent%2Fsession%3Furl%3Dhttps%253A%252F%252Fdocusign.file.force.com%252Fsfc%252Fservlet.shepherd%252Fversion%252FrenditionDownload%253Frendition%253DORIGINAL_Jpeg%2526versionId%253D0688Z00000kkSjr%2526operationContext%253DCHATTER%2526contentId%253D05T8Z00002WJRwY Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50087	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=3&ClientTime=1713289410169&PageStart=1713289404678&PrevBundleTime=1713289409092&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 45501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 34 34 30 33 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 34 34 30 33 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 34 34 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 39 2c 22 41 72 67 73 22 3a 5b 34 34 30 37 2c 36 34 30 2c 36 35 36 2c 31 36 2c 31 36 2c 34 33 35 2c 34 35 31 2c 31 36 2c 31 36 2c 36 31 33 5d 2c 22 57 68 65 6e 22 3a 34 34 30 36 7d 2c 7b 22 4b 69 6e 64 22 3a 32 32 2c 22 41 72 67 73 22 3a 5b 37 33 37 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 34 32 31 7d 2c 7b 22 4b 69 6e 64 22 3a 34 33 2c 22 41 72 67 73 22 3a 5b 37 33 37 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 34 32 Data Ascii: {"Seq":3,"When":4403,"Evts":[{"Kind":52,"Args":[],"When":4403},{"Kind":100,"Args":["visible"],"When":4404},{"Kind":9,"Args":[4407,640,656,16,16,435,451,16,16,613],"When":4406},{"Kind":22,"Args":[737,0,0],"When":4421},{"Kind":43,"Args":[737,0,0],"When":442
2024-04-16 17:43:31 UTC	16384	OUT	Data Raw: 32 35 2c 32 5d 2c 5b 35 34 38 32 2c 32 5d 2c 5b 37 35 33 39 2c 36 5d 2c 5b 37 35 32 39 2c 35 5d 2c 5b 32 34 33 33 2c 32 5d 2c 33 32 2c 5b 34 39 37 2c 32 5d 2c 5b 38 32 38 30 2c 37 5d 2c 5b 36 34 38 33 2c 32 5d 2c 5b 35 35 30 31 2c 32 5d 2c 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 6c 61 74 66 6f 72 6d 2f 67 6f 2d 6c 69 76 65 2f 22 2c 5b 34 33 30 31 2c 34 5d 2c 5b 38 32 39 36 2c 38 5d 2c 5b 32 34 33 30 2c 33 5d 2c 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 6c 61 74 66 6f 72 6d 2f 61 75 74 68 2f 22 2c 5b 31 34 37 36 2c 35 5d 2c 5b 38 32 36 35 2c 35 5d 2c 5b 37 35 32 39 2c 35 5d 2c 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e Data Ascii: 25,2],[5482,2],[7539,6],[7529,5],[2433,2],32,[497,2],[8280,7],[6483,2],[5501,2],"https://developers.docusign.com/platform/go-live/",[4301,4],[8296,8],[2430,3],"https://developers.docusign.com/platform/auth/",[1476,5],[8265,5],[7529,5],"https://developers.
2024-04-16 17:43:31 UTC	12733	OUT	Data Raw: 41 72 67 73 22 3a 5b 39 39 34 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 34 33 2c 22 41 72 67 73 22 3a 5b 39 39 34 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 32 32 2c 22 41 72 67 73 22 3a 5b 39 36 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 34 33 2c 22 41 72 67 73 22 3a 5b 39 36 33 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 32 32 2c 22 41 72 67 73 22 3a 5b 31 30 30 36 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 34 33 2c 22 41 72 67 73 22 3a 5b 31 30 30 36 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 38 37 7d 2c 7b 22 4b 69 6e 64 22 3a 32 32 2c 22 41 72 67 73 22 3a 5b Data Ascii: Args":[994,0,0],"When":4887},{"Kind":43,"Args":[994,0,0],"When":4887},{"Kind":22,"Args":[963,0,0],"When":4887},{"Kind":43,"Args":[963,0,0],"When":4887},{"Kind":22,"Args":[1006,0,0],"When":4887},{"Kind":43,"Args":[1006,0,0],"When":4887},{"Kind":22,"Args":[
2024-04-16 17:43:31 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50088	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=4&ClientTime=1713289410176&PageStart=1713289404678&PrevBundleTime=1713289409092&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1927 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	1927	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 33 38 33 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 32 31 22 2c 31 32 35 36 38 2e 36 39 39 39 39 39 39 39 39 39 38 33 2c 31 35 35 36 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 22 69 6d 67 22 2c 30 2c 30 2c 31 32 35 36 38 2e 36 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 34 31 32 35 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 33 38 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 Data Ascii: {"Seq":4,"When":6383,"Evts":[{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=21",12568.699999999983,1556.3999999999942,"img",0,0,12568.699999999983,0,0,0,0,0,0,0,14125.099999999977,0,0,0],"When":6383},{"Kind":57,"Args":[2,"https://fs-obfuscated
2024-04-16 17:43:31 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50089	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom10.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 1f4e262ec011ceb092a1fb383eb70ac0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50090	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom11.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 40ebbecc506643fb0c6e87c88ff703e1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50091	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom12.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: beb6fcc65b640b5a74a8e39c9bc15ba8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50086	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftf16e67240159d1fdd64057b6f0e cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:43:31 GMT server: istio-envoy connection: close
2024-04-16 17:43:31 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50093	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=3&ClientTime=1713289409730&PageStart=1713289404678&PrevBundleTime=1713289409092&LastActivity=1697&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50092	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom13.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: eb51ce1804a5bef1e6ca4c87cf03c0f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50094	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom14.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 2bd194b15a841815bd5413d19c270762

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50095	13.109.180.8	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom15.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:31 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:31 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 5dbf3431cef0088c9c09fb29afc8d8d5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50096	130.211.34.183	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713289409326 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:31 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50098	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	693	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLAa&operationContext=DELIVERY&contentId=05T8Z0000250azu&page=0&d=/a/8Z0000019R98/ofPnbj4wOZYBKpWeSGciEv2ng6eNiy.5nOQjk70.mf8&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
2024-04-16 17:43:31 UTC	636	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:31 GMT Content-Length: 31577 Connection: close
2024-04-16 17:43:31 UTC	15748	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 01 50 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 0f 90 00 00 07 00 00 00 04 30 32 32 31 90 03 00 02 00 00 00 14 00 00 01 08 90 04 00 02 00 00 00 14 00 00 01 1c 90 10 00 02 00 00 00 07 00 00 01 30 90 11 00 02 00 00 00 07 00 00 01 38 90 12 00 02 00 00 00 07 00 00 01 40 91 01 00 07 00 00 00 04 01 02 03 00 92 90 00 02 00 00 00 04 30 35 38 00 92 91 00 02 00 00 00 04 30 35 38 00 92 92 00 02 00 00 00 04 30 35 38 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 Data Ascii: JFIFHHPExifMM*>F(iNHH022108@0580580580100
2024-04-16 17:43:31 UTC	19	IN	Data Raw: b2 94 1c 90 c0 67 b6 69 d8 68 ec a8 ae 4f 4f f1 a7 86 f5 Data Ascii: gihOO
2024-04-16 17:43:31 UTC	15810	IN	Data Raw: 5b e8 f4 db 1b a6 69 a5 19 42 d0 ca 88 ec 14 39 45 91 90 21 91 54 e5 a3 0d bd 40 3b 94 60 e1 ef e3 1f 0e c7 ac b6 80 f7 45 6f 23 91 21 60 62 93 cb 49 64 40 e8 8d 2e df 2c 33 ab 0d a0 b0 2c 78 19 20 8a 4c 9b 9d 4d 15 c3 69 de 3f f0 e5 f2 e9 e8 6e 87 9d a8 45 0c 8a 62 8e 69 20 4f b4 67 cb 0d 31 89 55 0c 84 61 04 9b 19 8e 00 5c 90 2a 4f f8 58 3e 11 c4 e7 ed f9 f2 08 00 79 52 93 31 2d b3 fd 1c 6d cd c7 cd f2 fe e7 7f 38 1d 48 ca 2a d6 3b 5a 2b 8e 4f 1d 78 5e 49 2d 22 86 ed a5 7b cc 60 47 0c ae 62 cb f9 7f bf 0a 87 c8 f9 c1 53 e6 ec c3 06 07 95 20 5f d6 fc 51 a1 78 74 c6 35 6b 93 11 90 17 c2 c6 f2 95 8d 31 ba 47 11 ab 14 8d 72 37 48 d8 45 c8 c9 19 14 08 e8 a8 ae 17 4b f1 c5 8e a5 2f 88 25 68 64 83 4f d0 1b 6b dc 3c 73 03 26 d8 c4 8e ca a6 20 19 40 3c 14 66 2c Data Ascii: [iB9E!T@;`Eo#!`bId@.,3,x LMi?nEbi Og1Ua\OX>yR1-m8H;Z+Ox^I-"{`GbS _Qxt5k1Gr7HEK/%hdOk<s& @<f,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50097	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	693	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000aiLLO&operationContext=DELIVERY&contentId=05T8Z0000250bPx&page=0&d=/a/8Z0000019R9R/adKetthMVr3oF_HLVNPrg1fuPlilTymdq8NtJcwl5Kc&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
2024-04-16 17:43:31 UTC	636	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:31 GMT Content-Length: 36300 Connection: close
2024-04-16 17:43:31 UTC	15748	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 24 00 00 02 4a 08 06 00 00 00 1c 0d 5e 5a 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 07 74 49 4d 45 07 e6 0c 0c 11 2c 1c b3 3b fe 20 00 00 20 00 49 44 41 54 78 9c ec dd 7d 74 5b f7 7d e7 f9 b7 48 f1 41 b6 23 5a 4e 88 ce 6c 20 dd b6 b4 aa ae 94 e5 94 18 b3 85 c7 3e 91 d6 da c2 1d b7 c4 86 2d bd d6 1c 79 a2 5d 59 b0 4b 8e b1 9b 6d 94 20 8e ba ea 58 3d b2 83 46 39 93 19 8c c1 c4 8c 34 f5 8c 74 ac 8c d9 b2 06 b7 6e 8c 8d 53 eb b4 89 d1 72 0d 76 dc 48 53 8f cc 36 b0 d0 ed 08 74 ad 81 92 d8 d4 13 b1 7f 00 17 b8 17 4f 04 49 50 57 94 3e af 73 70 24 e2 fe 9e 2f c8 fb bd bf df 0f c0 9a 5c 2e 97 43 44 44 44 c4 41 2d 4e 37 40 44 44 44 44 01 89 88 88 88 38 4e 01 89 88 88 88 38 4e 01 Data Ascii: PNGIHDR$J^ZpHYs%%IR$tIME,; IDATx}t[}HA#ZNl >-y]YKm X=F94tnSrvHS6tOIPW>sp$/\.CDDDA-N7@DDDD8N8N
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 97 50 7c 92 44 d5 88 24 4d 3a 0e e1 84 79 51 f2 30 92 3a Data Ascii: P\|D$M:yQ0:
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: 8c b7 bc c4 d8 68 31 c0 31 d3 79 43 f6 34 be c8 50 69 59 c8 ed c6 17 4f 93 2e cc d4 44 86 4a 0b 46 2e ff 30 a1 70 a2 74 d1 b5 95 6b ef 47 62 32 4e 68 d8 12 a8 78 86 88 f8 8a 8d 62 34 1c 62 d8 92 d9 33 14 81 c9 04 99 2a c7 5c fe 31 52 43 ee 1a 81 59 b1 31 96 3c 2e dc 7d 30 9d ce 2c 50 57 9a 69 e2 4c 9a 03 ec f2 33 96 1a c2 5d bf a2 3a fd 0b 93 a8 88 11 1a 3b 4f c9 fc 60 97 ce 83 cb cb 80 cf 9e c6 5a 9f 2b df c1 05 c6 44 44 44 9c d6 d4 3d 24 67 de 9d e3 d1 2f bf 03 c0 71 4b d0 d1 dc 60 04 c8 24 98 8c 43 3c 6e 60 bb 39 1e 4f e2 1f 29 df 49 e2 61 24 35 01 c6 20 86 99 38 34 41 6a c4 c5 42 57 29 b7 db 07 e9 46 1a 14 27 d8 6f 10 b4 3d e7 23 92 01 37 e0 73 bb 6b e4 4b 93 8e fb 70 1f b6 3e 97 0f 12 4a d5 86 19 34 c2 65 f9 42 0c 1f ae 51 a6 cb 85 6b c9 97 df 1a 75 Data Ascii: h11yC4PiYO.DJF.0ptkGb2Nhxb4b3*\1RCY1<.}0,PWiL3]:;O`Z+DDD=$g/qK`$C<n`9O)Ia$5 84AjBW)F'o=#7skKp>J4eBQku
2024-04-16 17:43:31 UTC	4149	IN	Data Raw: 22 a2 b9 63 42 42 44 44 44 73 c7 84 84 88 88 88 e6 8e 09 09 11 11 11 cd 1d 13 12 22 22 22 9a 3b 26 24 44 44 44 34 77 4c 48 88 88 88 68 ee 98 90 10 11 11 d1 dc 31 21 21 22 22 a2 b9 63 42 42 44 44 44 73 c7 84 84 88 88 88 e6 6e 26 7f ed 77 1e fe e6 9d 5f e0 87 6f be 8f b7 2e 5e c3 5b 17 af e3 0e 00 5f 7a e4 28 be b4 74 0c 8f ff d3 7b f1 95 53 9f 9d 77 88 44 44 44 34 a6 85 fc e3 7a 2f fe f9 7f c6 a5 ab 1f e1 d1 87 8f e2 4b 8f 1c c3 97 1e 39 8a 2e 80 b7 2e 5e c7 5b 17 ae e1 ad 8b d7 f0 4f 8e 1f 81 f1 7b ff 64 de a1 12 11 11 d1 18 16 2e 21 f9 da ff f8 16 9e fe da 83 f8 c6 d7 1f 1a b9 5e e3 ff 0a 70 f6 87 ff 80 d7 ff f8 4b 37 29 32 22 22 22 9a d6 42 25 24 5f 33 de c2 8b ff ad 8c c2 a3 9f 1b 6b fd 1f 9d 7b 1f 7f f8 f2 ff 8b ef bf f0 c5 03 8e 8c 88 88 88 f6 63 61 Data Ascii: "cBBDDDs""";&$DDD4wLHh1!!""cBBDDDsn&w_o.^[_z(t{SwDDD4z/K9..^[O{d.!^pK7)2"""B%$_3k{ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50100	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	693	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTTL&operationContext=DELIVERY&contentId=05T8Z00002WJU0Y&page=0&d=/a/8Z000000GYqS/LAWu8kNCayWAEvdGd0FtNaVbu5rBG.VBRGsbheRWGmo&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
2024-04-16 17:43:31 UTC	637	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:31 GMT Content-Length: 117066 Connection: close
2024-04-16 17:43:31 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 08 03 05 06 07 09 04 ff c4 00 6a 10 00 02 01 02 04 02 04 06 08 0d 10 05 09 07 03 05 00 01 02 03 04 05 06 07 11 08 12 13 21 31 51 09 14 22 41 61 71 15 32 52 74 81 Data Ascii: JFIFCCj!1Q"Aaq2Rt
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 26 75 1a 8d a6 cd de 34 7d 19 f3 72 f6 38 b5 e9 68 ab 97 Data Ascii: &u4}r8h
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: 06 60 e9 67 1a 9a 25 a9 7d 15 95 c6 34 f2 d6 2b 53 65 e2 98 b3 54 e3 29 77 42 af b4 97 c2 d3 f4 1d 25 fd b6 fd 8e 38 cc 79 9c 4a f4 f5 d1 c7 9b bd e9 d7 a5 5a 94 6b 50 ab 0a 94 e6 b9 a1 38 49 4a 32 5d e9 ae d3 83 86 08 94 c9 c2 1a 6e 45 b0 95 5c bb cb 44 0a 39 93 81 47 3d cb 60 55 be f2 70 28 e6 5b 09 c2 8e 65 a2 12 a3 91 38 15 72 2d 83 0a 4a 65 b0 96 9c a7 e9 27 02 8d 93 81 57 24 8b 60 51 c8 b4 41 85 5c 8b 61 38 51 c8 9c 25 d2 7c 5f 4b 7d 15 be f7 f5 af cb 3d d7 73 a8 fe ff 00 b7 e8 ab dc e5 e8 7c 74 30 1c fd 20 ef 40 00 00 00 00 00 00 00 00 6f 38 3e 03 2b c8 ab 9b a6 e3 45 f6 25 db 2f ff 00 d1 c1 d4 ea fb dc f5 68 e6 89 ab 0e 47 42 ca d2 da 2a 34 6d e1 1d bc fb 75 9d 5d 77 6b ae 73 54 a9 9c b5 b9 63 ee 57 c4 51 07 2c 7d ca f8 80 72 c7 dc af 88 07 2c 7d Data Ascii: `g%}4+SeT)wB%8yJZkP8IJ2]nE\D9G=`Up([e8r-Je'W$`QA\a8Q%\|_K}=s\|t0 @o8>+E%/hGB*4mu]wksTcWQ,}r,}
2024-04-16 17:43:31 UTC	618	IN	Data Raw: 51 2c 1f f0 49 eb 26 15 84 58 e6 9e 1e 73 45 d4 70 fc 6e 8e 23 3c 53 0d b6 af e4 4a b3 e5 50 b8 a4 b7 fd fc 25 04 f9 7b 76 6f b9 9e 9b a5 1a 4a ab 9a 75 74 71 a7 18 9f c9 c8 d5 51 9c 57 0f 49 4f 1c e2 3c c7 f0 b0 6a cd 8e 78 cc 19 37 87 2c 93 52 38 a6 33 6f 7e af b1 0a 36 cf 9e 50 b9 a8 ba 2b 7b 7e af df be 79 49 ae d5 bc 7b cf 69 d1 8d 2c d9 a2 bd 65 ce 11 8c 47 a3 9c cb 99 a6 a7 ab 13 5c bd 06 d1 bc 90 f4 db 49 f2 86 41 9b 4e a6 03 83 5a 58 d5 e5 ec e9 21 4e 2a 7b 7a 39 b7 3c 9e ae f7 ca 2f d7 77 b6 66 5c 5a e7 ad 54 cb 99 1c 75 40 3c 99 d6 9f f5 b5 e0 5f ef 16 03 fd d6 89 ee f4 7f 50 d5 f7 6a f7 cb 9d 47 88 97 a7 3a bb f6 27 ce bf ee ee 25 fd da a1 e2 f4 be 3e 8f 4c 7b dc 3a 7c 28 60 2f 81 9f f6 97 54 3d f5 86 7c 8a e7 aa e9 6f 85 6b d7 f9 39 5a bf 23 Data Ascii: Q,I&XsEpn#<SJP%{voJutqQWIO<jx7,R83o~6P+{~yI{i,eG\IANZX!N*{z9</wf\ZTu@<_PjG:'%>L{:\|(`/T=\|ok9Z#
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 7b 6e 92 d1 16 f4 14 51 1c a2 62 3f 07 37 53 18 a2 21 b4 f1 c5 9e ab 69 87 84 3a 9e a1 db d2 75 27 97 6b e0 98 83 82 ed 9c 69 d2 a6 e5 15 e9 71 dd 1a 6c d6 23 53 b4 f7 99 fd ee b4 26 cd 3d 6b 58 7a e1 91 b3 be 58 d4 7c a7 86 67 6c 9d 8b 50 c4 70 8c 5a de 37 16 d7 14 64 a4 9c 5a ec 7d d2 4f 74 d3 eb 4d 34 78 2b d6 6b d3 dc 9b 57 23 13 0e 04 c4 d3 38 96 dd aa da 9d 95 34 77 20 e3 1a 87 9c b1 2a 56 78 6e 13 6d 2a cf 9e 5b 4a b5 4d bc 8a 50 5f be 9c a5 b2 49 77 96 d3 69 ae 6a ee c5 9b 71 99 94 d3 4c d7 38 87 9d de 0a 7c b1 8d e7 bd 66 d4 ae 20 31 6b 59 d3 b7 ad 1a b6 d0 a8 d3 e5 95 dd dd 7e 9a a4 62 fc fc b1 8a df bb 9a 27 ae e9 35 ca 6c 69 ed 69 29 ff 00 d8 88 c3 95 a9 9c 53 14 be 0e 0e 3f d6 69 a9 3e bc c1 fd e6 99 7d db ea 6b 7f e9 f7 26 ef 89 87 13 d7 6c Data Ascii: {nQb?7S!i:u'kiql#S&=kXzX\|glPpZ7dZ}OtM4x+kW#84w Vxnm[JMP_IwijqL8\|f 1kY~b'5lii)S?i>}k&l
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: f0 63 2b b9 70 bd ae b1 b1 52 77 4e 15 d5 1e 4f 6d d2 7b 1d 3e 5d bd 3b ec 7a 7e 91 e3 e5 d6 33 cb ff 00 fa 72 75 1e 1d 2d c3 c0 d0 f0 ef 62 35 3a 0f 93 d9 2f 19 c3 5d 4d fd b7 43 c9 5b 6f 83 9b 98 a7 4b 73 d6 b5 d9 c7 f2 46 af 9c 3d 28 3c 73 88 c4 df 0a 0b c2 d7 08 79 85 62 0a 1d 2b c4 b0 e5 67 cd fe df a7 5d 9e 9e 4e 93 fb 4e f7 a3 9d 6f 9c 29 c7 64 fb 9b e9 fc 63 1e 72 72 be 7e 07 ec 7b c4 14 9c f9 ee 39 f9 7f d9 7b 27 0e 7f 83 97 73 b7 bb 8f ed 05 39 ff 00 df a2 d6 af da 1d 43 c2 56 03 c7 e6 27 a5 2e e3 86 7c 7e d6 d3 29 2c 4a e2 33 a5 d3 d8 c2 4a ef 68 f4 8e 4a b4 5c fb 39 3d 1b 76 1c fd d2 bd aa 9b f8 d6 c7 d3 c7 9f 97 a9 a5 d9 b5 d6 fa 7c dd d3 f4 21 e1 82 fe 36 50 fe b7 86 7c c3 ae ef bd 1f fb 3f ee 67 9d 3b ae 35 63 84 5f 08 de ba 5d e1 57 9a ab Data Ascii: c+pRwNOm{>];z~3ru-b5:/]MC[oKsF=(<syb+g]NNo)dcrr~{9{'s9CV'.\|~),J3JhJ\9=v\|!6P\|?g;5c_]W
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: bb 87 f0 bc e8 63 13 5d 1c 6e 96 03 7f 27 19 76 6f c9 27 c9 f1 bd 84 6c 9b 55 33 d7 9b fc 3d 30 77 9b 5c fa ce 71 c1 57 07 fa c1 47 57 ef 78 a7 e2 6a bc e3 9a ee 9d 5a 96 16 15 a7 19 57 55 aa c1 c2 55 eb 28 79 34 f9 69 b7 18 53 5d 89 f5 ed b2 47 1b 77 dd 74 f3 a7 8d 0e 8b c1 f2 cf e5 1f 9c ab 7a ed 3d 5e a5 1c 9c 6b 55 f8 7c e3 a3 41 35 7b 32 6b 2f 0f 79 da fb 3a 61 f9 92 f2 77 d7 d6 53 94 2a 56 96 ef c9 a5 56 d6 6d 46 aa 8c 76 8c 65 4f 69 24 97 52 36 d3 6b f6 cd 76 9e 9d 3e ae 9e ac d3 c2 27 fe fe 29 a6 e5 aa e9 8a 6b 8c 36 e9 f1 e9 c7 c5 2a 1e c0 54 e1 6b 6c 5d ae 8d 5c fb 05 88 7b 7e fe 4e 6e 4f ed 2f f3 26 d5 33 d7 ef fc 3d 30 9e f3 6b 9f 59 be 70 a7 c2 4e bd 67 fd 7b 87 15 5c 55 aa 96 78 8d a5 6f 1b c3 f0 cb 8e 55 71 52 ba 8f 2d 27 2a 71 7b 51 a5 49 Data Ascii: c]n'vo'lU3=0w\qWGWxjZWUU(y4iS]Gwtz=^kU\|A5{2k/y:awSVVmFveOi$R6kv>')k6Tkl]\{~NnO/&3=0kYpNg{\UxoUqR-'*q{QI
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 64 7d 94 30 aa d5 76 95 57 d1 af ed 3d 16 87 a2 da 9d 4e 2a bf f4 29 fc 7d 8d 22 dc cf 36 e3 42 ca de df ae 10 dd fb a7 d6 cf 65 a1 d9 b4 7b 7c 66 d5 3f 4b b6 78 cb 58 a6 23 93 5c ed 52 00 00 00 00 00 00 00 00 03 ba b8 43 fb 32 5b 7d ef ba f9 28 f0 7d d1 fe a3 ab ef 53 ef 70 f5 fe 25 9d 0e 47 e7 b8 87 48 a4 a6 5b 09 c3 4d c8 9c 25 e4 d1 f7 19 87 7c ab 5d c5 26 10 83 39 80 33 9a 45 5a d8 ce 61 13 08 29 30 73 43 5d c5 26 10 83 39 81 56 bb 8c e6 04 14 98 15 68 ce 60 43 5b 94 98 42 bd 9d 4c ce 60 e6 35 e7 46 73 0a a1 ad cc e6 05 5a d8 ce 60 1a dc a4 c0 ab 5b 14 98 10 67 30 21 ad 8a 4c 2b c9 56 b7 33 98 4f 35 4a cc 20 32 aa 94 21 ad cc e6 09 85 4a 4c 20 6b 73 39 82 61 52 93 08 43 5b 99 cc 0d 4a 16 77 17 53 e4 a1 46 53 ef d9 75 1c cd 06 d5 ac dd 2b ef 7a 4b 73 Data Ascii: d}0vW=N*)}"6Be{\|f?KxX#\RC2[}(}Sp%GH[M%\|]&93EZa)0sC]&9Vh`C[BL`5FsZ`[g0!L+V3O5J 2!JL ks9aRC[JwSFSu+zKs
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: ca 79 7b 2a 62 b8 4e 29 8d 50 85 f5 e5 a5 4a 34 6d 60 f9 ea ca 52 5b 2d e2 bb 17 a5 ec 76 1b 65 71 63 57 6e f5 7e 0d 35 44 cb 5b 54 cf 5a 25 88 d4 2e 68 57 8e f4 aa 29 7a 3c e7 db b4 7b 8e 97 5f 4f 5b 4f 5c 4f bf d8 ed a2 a8 ab 93 54 e7 24 00 00 00 00 00 00 00 00 07 67 f0 cb f6 79 c9 9f 7c 57 c8 91 e4 ba 77 ff 00 8e ea fe ef e7 0e 36 b3 c4 54 f5 1c fc 8c f3 60 00 00 00 01 12 8c 67 17 09 c5 4a 32 5b 34 d6 e9 a2 62 66 27 30 3a 8f 51 78 58 d1 ed 46 55 2e 6e b2 ec 70 8c 46 a6 ef c7 70 cd a8 cd be f9 45 2e 49 7c 2b 7f 49 ed 36 5e 9f 6f 7b 2e 29 a2 ef 5e 88 fd da f8 c7 aa 79 c7 b5 ca b5 ac bd 6b 84 4e 63 ce c5 cd 46 e0 63 51 f2 d7 4b 7d 92 6f 6d f3 2d 94 37 6a 8a da 8d d2 8f dc bf 26 4f d4 fe 03 eb 7b 2f 75 7d af 5d 8b 7a fa 66 cd 5d bc e9 f6 f3 8f 5c 3b 2b 5b Data Ascii: y{*bN)PJ4m`R[-veqcWn~5D[TZ%.hW)z<{_O[O\OT$gy\|Ww6T`gJ2[4bf'0:QxXFU.npFpE.I\|+I6^o{.)^ykNcFcQK}om-7j&O{/u}]zf]\;+[
2024-04-16 17:43:32 UTC	2378	IN	Data Raw: ae b6 8d 79 b0 db bf 92 8f 9b 77 56 ff 00 c7 6a fb f4 fb dc 1d c7 c4 7a de 8a d3 a9 ba 3f 30 c4 ba 06 b1 20 07 8d 27 ee 67 ad 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 7d 88 99 c0 ac a4 fc c6 75 57 3e 41 47 d7 da 61 56 67 98 8e cf 51 94 d2 21 af 3a 33 98 55 06 73 02 ad 6c 67 30 05 26 04 35 b9 49 81 52 93 02 ad 6c 67 30 84 35 b9 9c c1 31 95 4c e6 11 e9 0c e6 09 84 35 b9 49 84 2b d8 67 30 05 26 11 c9 56 b6 29 30 4c 20 ce 61 0a b5 b1 9c c0 86 b7 29 30 85 4a 4c 01 94 c0 86 b7 ec 33 98 c2 26 15 2b 30 8c 8d 6e 67 30 2a 67 30 21 ad cc e6 05 4a 4c 08 68 a4 c0 a9 9c c0 86 9a 33 98 41 db d8 52 61 13 18 41 94 c2 15 68 a4 c0 83 39 81 56 8a 4c 08 29 30 21 ae e3 39 84 4c 2a 67 30 67 b5 0d 6c 52 61 13 18 41 4a a9 40 d6 e6 53 02 ad 14 98 47 27 39 d3 9d 6f d5 Data Ascii: ywVjz?0 'g}uW>AGaVgQ!:3Uslg0&5IRlg051L5I+g0&V)0L a)0JL3&+0ng0g0!JLh3ARaAh9VL)0!9Lg0glRaAJ@SG'9o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50099	13.110.65.234	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	693	OUT	GET /sfc/dist/version/renditionDownload?rendition=ORIGINAL_Jpeg&versionId=0688Z00000kkTOk&operationContext=DELIVERY&contentId=05T8Z00002WJTrf&page=0&d=/a/8Z000000GYqW/XIhk.eaEqq45jwJH6U5I0GuVBBifKvGPF7KZfPoKJac&oid=00D300000000bS4&dpt=null&viewId= HTTP/1.1 Host: docusign.file.force.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=1p6mUvwYEe6ZEAWYiSTtBQ
2024-04-16 17:43:31 UTC	637	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 X-Robots-Tag: noindex, nofollow, noarchive Content-Type: image/jpeg Expires: Fri, 31 May 2024 17:43:31 GMT Content-Length: 121000 Connection: close
2024-04-16 17:43:31 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 02 02 02 03 02 02 02 03 03 03 03 04 06 04 04 04 04 04 08 06 06 05 06 09 08 0a 0a 09 08 09 09 0a 0c 0f 0c 0a 0b 0e 0b 09 09 0d 11 0d 0e 0f 10 10 11 10 0a 0c 12 13 12 10 13 0f 10 10 10 ff db 00 43 01 03 03 03 04 03 04 08 04 04 08 10 0b 09 0b 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 08 03 05 06 07 09 04 ff c4 00 69 10 00 01 02 05 01 04 05 03 09 12 0a 06 08 05 02 07 01 00 02 03 04 05 06 11 07 08 12 21 51 09 13 31 41 61 22 71 81 14 32 52 74 91 Data Ascii: JFIFCCi!Q1Aa"q2Rt
2024-04-16 17:43:31 UTC	19	IN	Data Raw: 10 1c 35 7e 6d 68 e0 67 a4 a9 18 54 68 34 42 cd c4 80 b2 Data Ascii: 5~mhgTh4B
2024-04-16 17:43:31 UTC	16384	IN	Data Raw: 68 15 23 0a 8d 11 c0 d7 91 9f 9e a5 cd c3 9f a6 4e c7 94 99 82 e0 e8 71 a0 44 30 de c3 cc 38 71 0b 39 41 49 61 a0 d2 66 45 69 6e de 3a c7 61 75 34 fb 9e 34 1b ba 98 cc 02 d9 e3 bb 32 d6 fe 2c 61 c4 fe 90 2b a8 b8 d2 68 d5 df 0f 05 fa 38 76 1c 59 da c2 5c 37 19 83 a5 9b 6a 68 96 a5 f5 52 53 15 a3 6d 55 62 60 7a 92 ac 44 36 b9 dc 99 17 d6 3b d2 41 f0 5d 25 7d 36 bd 0d f8 ca f4 1c 49 db ce 1b f8 9d ef 0e 3c 28 d0 9b 1a 04 56 44 86 f1 bc c7 b1 c1 cd 70 e6 08 ed 5c 1c 18 10 e7 a9 c1 06 99 72 b6 09 2a 5d cd 59 20 50 bd 4e 01 42 fc ab 60 15 27 9a 9c 02 85 ea d8 27 05 0b d5 92 24 a1 72 9c 02 a5 ca d8 18 28 e7 ab 60 93 4d cf f1 53 80 50 95 38 05 4b 80 56 c0 28 5c ac 90 c1 52 e5 6c 13 82 85 ca 70 49 d2 7b 5f 3b 3a 2b 3d ed e9 5f 86 bd d7 73 a5 fa 7e 9f 54 bd c7 2e Data Ascii: h#NqD08q9AIafEin:au442,a+h8vY\7jhRSmUb`zD6;A]%}6I<(VDp\r*]Y PNB`''$r(`MSP8KV(\RlpI{_;:+=_s~T.
2024-04-16 17:43:31 UTC	618	IN	Data Raw: 00 15 d7 ea 1e 22 eb 2b 2e 07 27 5d 49 43 37 7a 29 ff 00 82 d4 ef 6e 48 7b d1 97 c0 7f ea 07 8e 9d ea cf fe 27 59 aa 71 89 9f cb f3 81 d5 04 01 00 40 10 04 01 00 40 78 f1 b6 a7 fb 48 a9 5f 9d ed 9f 85 01 7d 07 48 f3 3b ea 97 c4 e7 d2 f2 3d a7 b0 eb e7 c7 00 20 38 be a9 7d ac ae ef cc 33 ff 00 dd de b7 b6 f2 f0 eb 5e f2 d1 f1 91 e6 0f 43 9f db 9a fc fe ac 43 fe f7 0d 7b 4e 56 7e ad 4f d6 f8 1c cb af 15 1f 1d 8b 3d 07 49 3a 57 2a 30 ee 67 09 78 15 1b 96 7a 5a 1c 58 bc 06 27 a0 38 c0 76 4f 60 26 23 06 7c 55 ab c7 e9 5a 12 d8 e6 8a fc 1e f1 2f 0a 86 e3 d7 25 e0 8e 09 0e 73 5a 0b 9c 40 00 64 93 dc 10 1e 47 ec f9 39 0f 56 7a 52 aa d7 9d b7 88 b4 c9 7a d5 62 a4 63 30 65 a6 5e 1c 17 c1 6b b3 c9 ce 2c e3 df bc bd ed fa fa 2e 88 a9 cf 8e 12 fc 72 73 a7 e0 d1 c3 39 Data Ascii: "+.']IC7z)nH{'Yq@@xH_}H;= 8}3^CC{NV~O=I:W*0gxzZX'8vO`&#\|UZ/%sZ@dG9VzRzbc0e^k,.rs9
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: bd 07 bb a9 77 e6 8c 59 37 65 1e 3b 22 cb 54 28 52 6f 05 bd 81 e2 13 5a f6 f9 c3 9a e1 e8 5e 56 f6 94 a8 5c ce 9c b8 a6 ce 2c d6 cc 9a 39 e2 e2 95 3c b4 e9 89 ba 64 6b 37 b6 9c e9 e5 3d ed 8d 52 a7 c9 cd ce 47 86 ce 2e 6f aa 5f 09 90 9a 7c 4f 54 e3 8f 10 bd bf 25 29 38 53 a9 59 f0 6d 7e 1f fd 9c db 55 84 d9 e9 26 97 d1 26 6d ad 35 b4 ed d9 d0 44 c5 32 89 23 27 18 1e e7 c3 80 c6 bb fb 41 5e 3a e6 6a a5 69 cd 73 b7 ef 38 92 79 93 67 27 58 95 08 0f 2a ba 65 be cf 34 ef f3 2c e7 c7 35 7b 8e 49 79 2a 9d 6b dc 73 6d 38 33 d2 3d 17 fb 4e d8 9f d5 9a 5f f7 58 6b c7 de 7e b1 53 d6 7e f3 89 3f 19 9e 61 eb 2b 19 13 a5 b2 94 c8 8d 0e 69 b9 a8 39 07 da 72 eb da da 79 85 fa b2 f7 b3 99 0f 20 7a dc bc 11 c1 3c 8f db 6a 2b 74 c3 a4 62 da d4 0a e3 0b 29 91 a6 28 75 5e b5 Data Ascii: wY7e;"T(RoZ^V\,9<dk7=RG.o_\|OT%)8SYm~U&&m5D2#'A^:jis8yg'Xe4,5{Iyksm83=N_Xk~S~?a+i9ry z<j+tb)(u^
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 74 f6 51 b9 6d df 15 96 d7 48 7d a1 70 d7 c0 6d 37 7e df 9a df 79 c3 04 16 47 c3 ce 79 34 b5 c4 aa 68 9f 69 a4 4e 10 e3 e1 7b 88 a3 be 93 48 f5 b5 ae 6b da 1c d2 08 23 20 8e f0 bc 11 c1 25 01 e4 8e de 71 a1 5c 9d 21 56 75 1a 80 04 59 f9 57 db f2 91 ba b3 92 23 19 8e b0 03 e2 18 f6 9f 4a f7 ba 22 ef 7a 4c e5 3e 1e 17 b8 e7 51 dd 49 b6 7d 7d 2c f2 f1 e9 7b 45 58 15 ea 84 37 44 a7 3e 8b 08 b7 3e b4 f5 53 6e 31 1b ee 11 ee aa f2 5d a9 59 d4 82 e3 9f 80 b6 f1 1a 3d 57 a3 4f 4a 54 e8 f2 35 29 08 cd 8b 2b 37 2d 0a 3c 18 8d 39 6b e1 b9 a1 cd 23 c0 82 17 86 9c 5c 64 e2 f8 a3 84 f8 9f 62 a9 04 02 0e 40 20 e3 b5 01 e4 a6 8f 7f b5 be ab fd 67 af 7f 73 8e bd e5 df 98 57 ab 1f 7a 39 d3 f2 07 ad 8b c1 9c 13 1d 3a 42 6b 72 74 3d 90 b5 05 f3 71 9a c3 3b 29 06 46 08 3d af Data Ascii: tQmH}pm7~yGy4hiN{Hk# %q\!VuYW#J"zL>QI}},{EX7D>>Sn1]Y=WOJT5)+7-<9k#\db@ gsWz9:Bkrt=q;)F=
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 13 c9 2d a8 7f da 8f 6e fe 78 b7 be 04 35 ef 74 df 32 4b aa 47 3a 9f 90 ed 3d 6d 5e 08 e0 84 07 8f 16 ff 00 fb 59 66 7f af f3 7f 01 eb e8 35 3c c4 bd 44 73 df 90 f6 1e 8a ed 5b b2 75 8f b5 55 a1 2d 45 b8 66 e2 d2 ab 34 97 3e 25 26 af 02 18 7b e5 dc e0 37 98 f6 9c 6f c3 76 06 5b 91 c4 02 08 5e 47 4c d5 2a e9 95 1c a1 bd 3e 28 e2 53 aa e9 bc a3 04 60 ec 85 d2 31 b3 ab a2 4a 68 c5 f7 31 55 a3 c2 71 74 38 54 8a c3 5b 0c 8e dc 99 59 9c 34 1f 06 e5 7a 77 aa e9 17 fb ee 61 87 e9 5f 14 72 bb ed 2a 9e 32 37 2b 4b a4 67 6a 2d 07 ba 65 ad 5d aa 74 de 3c e4 a4 47 06 c4 8b 1a 9f ea 09 e6 b3 bd f0 cb 40 85 1b 1d b8 00 67 98 54 ab a0 59 5e c1 d4 b1 9e 1f 5e 57 cd 10 e8 42 6b 30 67 a2 ed 3a 73 b4 4e 92 03 88 35 db 3e f4 a6 77 82 04 58 11 07 ba d7 b4 fa 5a e6 f8 2f 23 f6 Data Ascii: -nx5t2KG:=m^Yf5<Ds[uU-Ef4>%&{7ov[^GL>(S`1Jh1Uqt8T[Y4zwa_r27+Kgj-e]t<G@gTY^^WBk0g:sN5>wXZ/#
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 06 d4 eb 4f a9 a7 6a 04 8c bd d7 4f 66 1a 63 9c 40 9c 6b 7f 2c 0d d7 9f ca 19 f1 5d 2d c6 8b 4a 7b e9 3d 97 f8 1c 69 da 46 5b e3 b8 cc 0d 2d da cb 45 35 58 42 95 a5 dd 10 e9 75 48 98 1f 33 aa 98 97 8a 5d c9 a4 9d d7 fa 0f a1 74 77 1a 7d 7b 7f 1a 39 5d 28 e1 ce 84 e9 f1 47 71 02 08 04 1c 83 c4 15 c2 32 25 00 40 10 15 2e 01 49 19 28 e7 a9 c0 28 5c ad 82 4a 13 cd 59 20 54 bf 92 9c 03 4c b9 58 15 27 9a 9c 02 a5 f8 56 48 9c 1a 65 ea 52 24 a1 72 b6 01 52 e5 64 86 0d 59 37 fd 51 de 65 4a ab 71 27 d4 5c 4a c4 1d 8b a2 07 2d ac ff 00 49 0b fe 65 e6 39 55 ff 00 8b a9 fc 0a b3 b4 97 91 20 20 08 02 00 80 20 08 0d be e1 a3 4a dc 74 0a 95 bd 3a 5c 25 ea 92 71 a4 a3 16 9e 3b 91 18 58 ec 7a 1c 55 e9 cd d3 9a 9a e6 de 4a 78 79 3c e9 d3 8b 7b 45 36 73 a4 4c 69 2e d3 fb 2c Data Ascii: OjOfc@k,]-J{=iF[-E5XBuH3]tw}{9](Gq2%@.I((\JY TLX'VHeR$rRdY7QeJq'\J-Ie9U Jt:\%q;XzUJxy<{E6sLi.,
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 56 6d 11 c0 82 32 a8 d0 68 85 9b 44 64 a9 18 54 68 34 42 a3 89 01 62 e2 0a 91 85 46 88 e0 42 a3 43 89 52 30 b3 68 80 a8 d0 35 25 27 27 29 d3 50 e7 a9 f3 71 a5 66 20 bb 7a 1c 58 2f 2c 7b 0f 30 e1 c4 2c a5 14 f7 32 1a cf 13 bf b4 cf 6d cd 5d b1 84 29 1b 82 62 15 d5 4d 66 06 e4 f9 c4 c3 5b f8 b1 87 13 fa 40 ae 1d 4b 38 4b 7c 77 18 4e de 32 e1 b8 cb 0d 34 db 23 47 75 0f aa 93 9b aa ba db a9 bf 03 d4 d5 42 18 c7 3b 93 62 8f 20 fa 48 3e 0b 87 3b 79 d3 e6 c9 c5 9d 09 c0 ee d8 53 10 66 21 36 3c 08 cc 8b 0d e3 79 af 63 83 9a e1 cc 11 da b3 d9 c7 13 2c 12 5c a5 22 4a 17 ab 60 1a 65 ea 70 0a 17 12 ad 80 54 b9 4e 01 47 3d 59 22 4c 51 db 88 e5 f6 9f 9a 6f ff 00 6d 7d 8f b9 4a dd 73 fd 3f 13 b4 d3 bf 6b d8 62 b2 fb 01 d9 84 01 00 40 10 04 01 00 40 10 04 01 00 40 10 04 Data Ascii: Vm2hDdTh4BbFBCR0h5%'')Pqf zX/,{0,2m])bMf[@K8K\|wN24#GuB;b H>;ySf!6<yc,\"J`epTNG=Y"LQom}Js?kb@@@
2024-04-16 17:43:32 UTC	6312	IN	Data Raw: 72 c1 d3 1e 92 3b ae f7 bd 6b 62 42 8d 27 28 e9 18 b3 02 13 e2 e2 37 a9 21 37 77 75 80 9f 5c 08 ec ee 5f 50 b7 e4 e6 a5 af 77 2d b6 b0 b0 a7 b5 56 52 52 4b 29 6e db 93 ce 5b 4b 81 cb 54 a7 52 cd 46 2b 7f f9 3a 23 6e 6d 53 b1 f5 87 5c e2 5e 3a 7b 59 f9 a7 49 75 26 52 58 47 ea 5f 0b ea 8c df de 1b af 00 f0 c8 ee 5f 44 ee 51 a0 6a 1c 9a e4 f2 b1 d4 a1 b1 53 6e 4f 19 4f 73 c6 37 a6 d1 ca b2 a5 2a 54 b6 66 b7 9d d3 d1 ff 00 b4 b6 8d 68 96 9d 5c b4 2d 49 bb 0d 2a 76 a1 56 13 32 f0 fd 49 1a 2e fc 3e a5 ad ce 58 d2 07 10 7b 57 84 ee c3 c8 6d 77 95 3a a5 bd c6 95 47 6e 11 86 1b da 8a df b4 df 3b 47 1e fa da a5 69 a7 04 62 6d e9 2f 60 54 19 54 b8 e9 37 54 d4 5a a4 dc f4 78 ed 91 74 a1 0c 2d 7c 77 1c 88 9d de 49 ce 08 ef 5f 65 d2 e7 a9 51 74 ed 6b 51 4a 9c 62 96 d6 Data Ascii: r;kbB'(7!7wu\_Pw-VRRK)n[KTRF+:#nmS\^:{YIu&RXG__DQjSnOOs7Tfh\-IvV2I.>X{Wmw:Gn;Gibm/`TT7TZxt-\|wI_eQtkQJb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50102	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	893	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289410418&PageStart=1713289396931&PrevBundleTime=1713289409054&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 373 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	373	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 91 7d 4b c3 30 10 c6 bf 4a cc 5f 1b c4 36 69 fa 96 2a c2 70 43 61 4e 65 9d 0c 91 21 5d 9b 6d c1 ac 99 6d b7 a9 db be bb 37 50 57 41 51 12 c2 71 f9 dd 73 4f 2e 1b 1c cb 67 1c f9 04 0f 67 32 c7 51 e8 79 8c e0 ce aa 2a 71 f4 b0 c1 5d 95 67 38 72 43 82 5b c5 74 9f c2 a9 c9 4b a3 25 26 58 9b 29 9c ed f8 b1 dd 1f 6c fb 9d 78 db 01 76 54 17 da 91 4f 05 cf f9 52 38 10 01 75 0f c4 a1 05 83 76 ae e3 12 e1 f2 3a eb d5 d4 f8 8f 6a 35 82 51 7a b0 bc 52 a5 1a 83 e5 ff b0 33 95 65 80 fc 82 0a 51 23 ab 6a 51 46 b6 bd 5e af ad cc a4 cb 52 4d 73 2b 35 73 7b 51 a8 55 92 be c2 6c fe 46 98 e3 73 22 68 00 41 48 09 a3 f0 6c cc 2c 6e 51 a8 86 7d 7a d4 be 39 1f dc df 76 d0 ac 9a eb 33 4c 42 ca dd fd 0d 0b 18 77 42 c1 85 2f 38 fc 97 cc 8f ef 62 02 Data Ascii: }K0J_6ipCaNe!]mm7PWAQqsO.gg2Qyq]g8rC[tK%&X)lxvTOR8uv:j5QzR3eQ#jQF^RMs+5s{QUlFs"hAHl,nQ}z9v3LBwB/8b
2024-04-16 17:43:31 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:31 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 31 37 31 30 7d 0a Data Ascii: {"BundleTime":1713289411710}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50104	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289410414&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:43:31 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50101	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289410414&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:43:31 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50103	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289410414&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	4420	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 39 38 35 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 39 38 35 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 38 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 65 6e 74 65 72 22 2c 31 36 36 39 31 2e 35 2c 34 38 2c 31 36 37 33 39 2c 31 36 37 33 39 2c 30 5d 2c 22 57 68 65 6e 22 3a 39 38 37 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a Data Ascii: {"Seq":8,"When":9856,"Evts":[{"Kind":100,"Args":["visible"],"When":9856},{"Kind":57,"Args":[12,"pointerover",16691.5,48,16738.800000000017,16739,0],"When":9875},{"Kind":57,"Args":[12,"pointerenter",16691.5,48,16739,16739,0],"When":9875},{"Kind":57,"Args":
2024-04-16 17:43:31 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50105	3.161.150.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	639	OUT	GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/config.json HTTP/1.1 Host: api-cdn.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	647	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1434 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT Last-Modified: Thu, 08 Feb 2024 12:33:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 17:43:32 GMT Cache-Control: max-age=120,s-maxage=120 ETag: "5236bcfcff0cecb5fefa2567e55ddf28" Vary: Accept-Encoding,Origin X-Cache: RefreshHit from cloudfront Via: 1.1 f5b13248899f05d12f1f01f169b30530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: 69qBkTGs71a-EuYiAwQRvm3UfA5EBPrxhJx1JdnYqKjDzAVjijIxHg==
2024-04-16 17:43:32 UTC	1434	IN	Data Raw: 7b 22 69 64 22 3a 22 64 63 39 33 65 63 34 61 2d 62 63 34 33 2d 34 32 37 63 2d 39 61 38 33 2d 38 37 35 36 65 37 33 66 36 31 64 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 68 65 61 64 6c 65 73 73 4d 6f 64 65 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 2d 75 73 22 5d 2c 22 64 65 66 61 75 6c 74 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 61 70 69 45 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 22 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 73 22 3a 7b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 45 6e 64 70 6f 69 6e 74 Data Ascii: {"id":"dc93ec4a-bc43-427c-9a83-8756e73f61dc","version":"5","headlessMode":{"enabled":false},"languages":["en-us"],"defaultLanguage":"en-us","apiEndpoint":"https://api.usw2.pure.cloud","messenger":{"enabled":true,"apps":{"conversations":{"messagingEndpoint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50107	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	426	OUT	GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/domains.json HTTP/1.1 Host: api-cdn.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 44 Connection: close Date: Tue, 16 Apr 2024 17:43:33 GMT Last-Modified: Thu, 08 Feb 2024 12:33:32 GMT ETag: "bd0b814b289c55fd0f2d0cd84ca3acd5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120,s-maxage=120 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 57674a900f587a3a1f1571205e001c6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: WV782cF97-0XdYh7_Xj2T8i9NrSVqd1xOjpzkxhrjgpprQbL7JFYRw==
2024-04-16 17:43:32 UTC	44	IN	Data Raw: 7b 22 61 6c 6c 6f 77 41 6c 6c 44 6f 6d 61 69 6e 73 22 3a 74 72 75 65 2c 22 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 22 3a 5b 5d 7d Data Ascii: {"allowAllDomains":true,"allowedDomains":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50109	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289410414&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 5856 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	5856	OUT	Data Raw: 7b 22 53 65 71 22 3a 39 2c 22 57 68 65 6e 22 3a 31 30 33 38 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 33 26 43 6c 69 65 6e 74 54 69 6d 65 Data Ascii: {"Seq":9,"When":10380,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=3&ClientTime
2024-04-16 17:43:31 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50110	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289410415&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	3166	OUT	Data Raw: 7b 22 53 65 71 22 3a 31 30 2c 22 57 68 65 6e 22 3a 31 33 30 34 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 75 69 64 3d 61 6a 48 6e 59 62 5a 65 56 75 34 74 6c 35 70 30 33 74 68 4d 32 67 26 76 3d 31 26 68 6f 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 32 30 35 39 39 2e 39 30 30 30 30 30 30 30 30 30 32 33 2c 34 38 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 33 36 2c 22 78 6d 6c 68 74 74 Data Ascii: {"Seq":10,"When":13049,"Evts":[{"Kind":57,"Args":[2,"https://tags.srv.stackadapt.com/js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com",20599.900000000023,481.79999999998836,"xmlhtt
2024-04-16 17:43:32 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50111	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1762	OUT	GET /sCSS/60.0/sprites/1713231796000/Theme3/00D300000000bS4/00540000003TkR3/gc/dCustom16.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	425	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 0 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Tue, 16 Apr 2024 01:43:16 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 4905d176b50d8843d341e45b8fe254ed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50112	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1737	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/extended.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	434	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 42a167c5dd0b3bc9a26ca526dd7e0a23
2024-04-16 17:43:32 UTC	15950	IN	Data Raw: 34 30 39 34 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 61 7b 63 6f 6c 6f 72 3a 23 33 33 33 34 33 35 7d 61 2e 6e 61 76 53 6b 69 70 4c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 2e 6e 61 76 53 6b 69 70 4c 69 6e 6b 3a 66 6f 63 75 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 3a Data Ascii: 4094/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */a{color:#333435}a.navSkipLink{color:#fff}a.navSkipLink:focus{text-decoration:underline;color:
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 6f 67 6f 20 2e 6d 73 67 43 6f 6e 74 65 6e 74 20 2e 74 65 78 74 4f 6e 6c 79 2e 6c 6f 77 49 6d 70 6f 72 74 61 6e 63 65 7b 63 6f 6c 6f 72 3a 23 31 37 39 37 63 30 7d 2e 6d 65 73 73 61 67 65 73 20 2e 6d 73 67 43 6f 6e 74 65 6e 74 20 61 2e 61 63 74 69 6f 6e 4c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 65 73 73 61 67 65 73 20 2e 6d 73 67 43 6f 6e 74 65 6e 74 20 2e 61 63 74 69 6f 6e 42 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2f 69 6d 67 2f 61 6c 6f 68 61 53 6b 69 6e 2f 62 74 6e 5f 69 6d 70 6f 72 74 61 6e 74 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e Data Ascii: ogo .msgContent .textOnly.lowImportance{color:#1797c0}.messages .msgContent a.actionLink:hover{text-decoration:underline}.messages .msgContent .actionBtn{background:transparent url(/img/alohaSkin/btn_important.png) repeat-x;font-family:Arial,Helvetica,san
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 3a 30 7d 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 30 7d 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 2e 70 61 67 65 54 79 70 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 23 34 61 34 61 35 36 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 70 78 7d 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 68 31 2e 6e 6f 53 65 63 6f 6e 64 48 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 39 70 78 3b 6d 61 72 67 69 6e 2d 62 6f Data Ascii: bottom:0}body .bPageTitle{padding:15px 0 0}body .bPageTitle .pageTitleIcon{margin-top:5px}body .bPageTitle .ptBody .pageType{font-size:.9em;font-weight:bold;color:#4a4a56;padding-left:1px}body .bPageTitle .ptBody h1.noSecondHeader{margin-top:9px;margin-bo
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 62 50 61 67 65 42 6c 6f 63 6b 2e 62 45 64 69 74 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 6c 61 62 65 6c 43 6f 6c 2c 62 6f 64 79 20 2e 62 50 61 67 65 42 6c 6f 63 6b 2e 62 45 64 69 74 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 64 61 74 61 43 6f 6c 2c 62 6f 64 79 20 2e 62 50 61 67 65 42 6c 6f 63 6b 2e 62 45 64 69 74 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 64 61 74 61 32 43 6f 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 7d 62 6f 64 79 20 2e 62 44 65 74 61 69 6c 42 6c 6f 63 6b 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 74 74 6f 6d 42 75 74 74 6f 6e 73 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 7d 62 6f 64 79 20 2e 62 44 65 74 61 69 6c 42 6c 6f 63 6b 2e 62 50 61 67 65 42 6c 6f 63 Data Ascii: bPageBlock.bEditBlock .pbBody .labelCol,body .bPageBlock.bEditBlock .pbBody .dataCol,body .bPageBlock.bEditBlock .pbBody .data2Col{padding-top:3px;padding-bottom:3px}body .bDetailBlock.bPageBlock .pbBottomButtons{padding:4px 0}body .bDetailBlock.bPageBloc
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 54 61 62 6c 65 20 2e 68 65 61 64 65 72 52 6f 77 20 74 68 2c 2e 62 4d 75 6c 74 69 75 73 65 72 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 54 61 62 6c 65 20 2e 68 65 61 64 65 72 52 6f 77 20 74 68 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 44 61 79 57 65 65 6b 56 69 65 77 20 23 64 61 79 6e 61 6d 65 72 6f 77 20 74 68 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 4d 6f 6e 74 68 56 69 65 77 20 2e 68 65 61 64 65 72 52 6f 77 20 74 64 2e 75 70 70 65 72 4c 65 66 74 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 4d 6f 6e 74 68 56 69 65 77 20 2e 68 65 61 64 65 72 52 6f 77 20 74 68 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 Data Ascii: Calendar .calendarTable .headerRow th,.bMultiuserCalendar .calendarTable .headerRow th,.bCalendar .calendarDayWeekView #daynamerow th,.bCalendar .calendarMonthView .headerRow td.upperLeft,.bCalendar .calendarMonthView .headerRow th{border-top:1px solid #e
2024-04-16 17:43:32 UTC	11019	IN	Data Raw: 61 62 20 23 65 64 69 74 50 61 67 65 3e 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 2c 62 6f 64 79 2e 43 61 6d 70 61 69 67 6e 4d 61 6e 61 67 65 4d 65 6d 62 65 72 73 45 78 69 73 74 69 6e 67 54 61 62 20 23 6d 6d 45 78 69 73 74 69 6e 67 3e 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 62 6f 64 79 2e 43 61 6d 70 61 69 67 6e 4d 61 6e 61 67 65 4d 65 6d 62 65 72 73 41 64 64 54 61 62 20 2e 6c 69 6e 6b 42 61 72 2c 62 6f 64 79 2e 43 61 6d 70 61 69 67 6e 4d 61 6e 61 67 65 4d 65 6d 62 65 72 73 45 78 69 73 74 69 6e 67 54 61 62 20 2e 6c 69 6e 6b 42 61 72 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 62 6f 64 79 2e 43 61 6d 70 61 69 67 6e 4d 61 6e Data Ascii: ab #editPage>.bPageBlock .pbBody,body.CampaignManageMembersExistingTab #mmExisting>.bPageBlock .pbBody{margin-top:12px}body.CampaignManageMembersAddTab .linkBar,body.CampaignManageMembersExistingTab .linkBar{height:auto;line-height:normal}body.CampaignMan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50106	13.110.40.235	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	924	OUT	GET /visualforce/session?url=https%3A%2F%2Fdocusign.lightning.force.com%2Fcontent%2Fsession%3Furl%3Dhttps%253A%252F%252Fdocusign.file.force.com%252Fsfc%252Fservlet.shepherd%252Fversion%252FrenditionDownload%253Frendition%253DORIGINAL_Jpeg%2526versionId%253D0688Z00000kkSjr%2526operationContext%253DCHATTER%2526contentId%253D05T8Z00002WJRwY HTTP/1.1 Host: docusign.my.salesforce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	1192	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:31 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Set-Cookie: BrowserId=13Gt6PwYEe6h5rerpX03ZQ; domain=.salesforce.com; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=13Gt6PwYEe6h5rerpX03ZQ; domain=.salesforce.com; path=/; expires=Wed, 16-Apr-2025 17:43:31 GMT; Max-Age=31536000; secure; SameSite=None Cache-Control: must-revalidate,no-cache,no-store Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Connection: close
2024-04-16 17:43:31 UTC	2	IN	Data Raw: 0a 0a Data Ascii:
2024-04-16 17:43:31 UTC	1406	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 76 61 72 20 65 73 63 61 70 65 64 48 61 73 68 20 3d 20 27 27 3b 0a 76 61 72 20 75 72 6c 20 3d 20 27 2f 73 61 6d 6c 2f 61 75 74 68 6e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {var escapedHash = '';var url = '/saml/authn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50113	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1743	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-headerOnly.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	428	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 5819 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 6c45316d95216fb5b50716cc6ad874e8
2024-04-16 17:43:32 UTC	5819	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 7a 65 6e 2d 68 65 61 64 65 72 54 6f 70 20 23 75 73 65 72 4e 61 76 42 75 74 74 6f 6e 20 23 75 73 65 72 4e 61 76 4c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 7a 65 6e 2d 68 65 61 64 65 72 54 6f 70 20 23 74 73 69 64 42 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 32 35 70 78 Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.zen-headerTop #userNavButton #userNavLabel{font-size:1em}.zen-headerTop #tsidButton{padding:0 25px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50108	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:31 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift94ed5e849a78750ed280ef3e33a cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:43:31 GMT server: istio-envoy connection: close
2024-04-16 17:43:31 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50114	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1737	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networks.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	428	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 6579 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: dba5d459c4c92cdf0e38176f1df0f0e2
2024-04-16 17:43:32 UTC	6579	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 68 74 6d 6c 20 62 6f 64 79 20 2e 62 50 61 67 65 42 6c 6f 63 6b 2e 62 72 61 6e 64 53 65 63 6f 6e 64 61 72 79 42 72 64 2c 68 74 6d Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */html{background-color:transparent;background-image:none}html body .bPageBlock.brandSecondaryBrd,htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50115	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:31 UTC	1746	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkModeration.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 629 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 01f6e3bb02eac4d15d86abf28c431445
2024-04-16 17:43:32 UTC	629	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 6e 65 74 2d 66 6c 61 67 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 63 68 61 74 74 65 72 2f 73 70 72 69 74 65 73 2f 73 70 72 69 74 65 5f 69 6d 61 67 65 73 2f 63 68 61 74 74 65 72 73 75 70 65 72 73 70 72 69 74 65 2e 70 6e 67 3f 76 3d 31 39 34 2d Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.net-flagIcon{background-image:url(/img/chatter/sprites/sprite_images/chattersupersprite.png?v=194-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50116	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1746	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/networkReputation.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	428	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 1363 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: a6068f2c450189844189f7c15beb5135
2024-04-16 17:43:32 UTC	1363	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 72 65 70 75 74 61 74 69 6f 6e 57 69 64 67 65 74 46 75 6c 6c 7b 77 69 64 74 68 3a 32 30 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 72 65 70 75 74 61 74 69 6f 6e 57 69 64 67 65 74 43 6f 6d 70 61 63 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 72 Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.reputationWidgetFull{width:200px;margin-bottom:30px}.reputationWidgetCompact{margin-bottom:10px}.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50117	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289410415&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2464 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	2464	OUT	Data Raw: 7b 22 53 65 71 22 3a 31 31 2c 22 57 68 65 6e 22 3a 31 34 37 34 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 50 4f 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 31 34 37 34 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 Data Ascii: {"Seq":11,"When":14748,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|POS\|End"],"When":14748},{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332
2024-04-16 17:43:32 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50118	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: i1w6FXU2xBdUt239XSvWvw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:43:32 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50121	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1742	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/zen-appFooter.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 315 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 17272d3400934262a232804dac3d775d
2024-04-16 17:43:32 UTC	315	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 61 67 65 46 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 61 67 65 46 6f 6f 74 65 72 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 70 61 67 65 46 6f 6f 74 65 72 20 61 7b Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.zen .zen-pageFooter{margin-top:10px;text-align:center}.zen .zen-pageFooter,.zen .zen-pageFooter a{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50122	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1734	OUT	GET /sCSS/60.0/sprites/1705602480000/Theme3/default/gc/setup.css HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	429	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/css Content-Length: 26609 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: b0f45debeae26afc01c36faa5890e173
2024-04-16 17:43:32 UTC	15955	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 73 79 73 41 64 6d 69 6e 54 61 62 20 2e 6f 75 74 65 72 20 74 64 2e 6f 4c 65 66 74 2c 2e 73 65 74 75 70 54 61 62 20 2e 6f 75 74 65 72 20 74 64 2e 6f 4c 65 66 74 7b 77 69 64 74 68 3a 32 33 30 70 78 7d 2e 73 65 74 75 70 54 61 62 20 2e 6f 75 74 65 72 20 2e 6f 52 69 67 68 74 2c 2e 73 79 73 41 64 6d Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.sysAdminTab .outer td.oLeft,.setupTab .outer td.oLeft{width:230px}.setupTab .outer .oRight,.sysAdm
2024-04-16 17:43:32 UTC	10654	IN	Data Raw: 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 27 2f 69 6d 67 2f 61 6c 6f 68 61 53 6b 69 6e 2f 73 65 74 75 70 2f 73 65 74 75 70 5f 73 65 6c 65 63 74 65 64 5f 62 6f 74 74 6f 6d 62 67 2e 70 6e 67 27 29 20 6c 65 66 74 20 62 6f 74 74 6f 6d 20 72 65 70 65 61 74 2d 78 7d 2e 73 79 73 41 64 6d 69 6e 54 61 62 20 2e 6f 4c 65 66 74 20 2e 6d 54 72 65 65 53 65 6c 65 63 74 69 6f 6e 20 23 41 75 74 6f 4e 75 6d 62 65 72 35 3e 2e 73 65 74 75 70 4e 61 76 74 72 65 65 20 Data Ascii: width:0;border-right-width:0;line-height:20px;padding-top:2px;padding-bottom:3px;padding-left:15px;background:#fff url('/img/alohaSkin/setup/setup_selected_bottombg.png') left bottom repeat-x}.sysAdminTab .oLeft .mTreeSelection #AutoNumber5>.setupNavtree

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50123	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1933	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398 If-Modified-Since: Tue, 16 Apr 2024 17:43:29 GMT
2024-04-16 17:43:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:32 GMT Last-Modified: Tue, 16 Apr 2024 17:43:32 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: dc6cc7b60be7d3201540eeecd42a658c
2024-04-16 17:43:32 UTC	15821	IN	Data Raw: 31 36 39 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 73 74 6f 6d 65 72 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 Data Ascii: 1692<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html class=""><head><title>Customer Community</title><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="
2024-04-16 17:43:32 UTC	76	IN	Data Raw: 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 70 61 67 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 74 69 6d 65 3a 20 32 32 6d 73 20 2d 2d 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: ><div></div></div></body></html>... page generation time: 22ms -->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50124	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1720	OUT	GET /jslibrary/1699262264248/ui-sfdc-javascript-impl/SfdcCore.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Wed, 14 Aug 2024 17:43:32 GMT Last-Modified: Fri, 12 Apr 2024 19:13:28 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 24f7260ce73ff33f2786a95d91074e38
2024-04-16 17:43:32 UTC	15957	IN	Data Raw: 33 65 39 33 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 41 70 69 55 74 69 6c 73 28 29 7b 7d 41 70 69 55 74 69 6c 73 2e 67 65 74 41 70 69 55 52 4c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 62 3d 64 2e 69 6e 64 65 78 4f 66 28 Data Ascii: 3e93/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */function ApiUtils(){}ApiUtils.getApiURL=function(a,c){var d=window.location.href,b=d.indexOf(
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 7b 44 41 54 45 5f 4f 46 5f 54 48 45 5f 57 45 45 4b 5f 50 41 52 41 4d 3a 22 64 61 74 65 22 2c 53 45 52 56 4c 45 54 5f 4e 41 4d 45 3a 22 63 6f 72 65 2e 61 63 74 69 76 69 74 79 2e 73 63 68 65 64 75 6c 69 6e 0d 0a 37 66 66 38 0d 0a 67 2e 42 75 73 79 54 69 6d 65 73 41 6a 61 78 53 65 72 76 6c 65 74 22 2c 54 49 4d 45 5f 5a 4f 4e 45 5f 50 41 52 41 4d 3a 22 74 69 6d 65 7a 6f 6e 65 22 2c 55 53 45 52 5f 49 44 5f 50 41 52 41 4d 3a 22 75 73 65 72 69 64 22 7d 2c 43 53 52 46 43 6f 6e 73 74 61 6e 74 73 3d 7b 43 53 52 46 5f 54 4f 4b 45 4e 3a 22 5f 43 4f 4e 46 49 52 4d 41 54 49 4f 4e 54 4f 4b 45 4e 22 7d 2c 43 61 6d 70 61 69 67 6e 4d 61 6e 61 67 65 4d 65 6d 62 65 72 73 3d 7b 41 43 43 4f 55 4e 54 5f 4a 53 3a 22 61 22 2c 41 44 44 5f 54 41 42 3a 30 2c 43 41 4d 50 41 49 47 4e Data Ascii: {DATE_OF_THE_WEEK_PARAM:"date",SERVLET_NAME:"core.activity.schedulin7ff8g.BusyTimesAjaxServlet",TIME_ZONE_PARAM:"timezone",USER_ID_PARAM:"userid"},CSRFConstants={CSRF_TOKEN:"_CONFIRMATIONTOKEN"},CampaignManageMembers={ACCOUNT_JS:"a",ADD_TAB:0,CAMPAIGN
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 43 54 45 44 5f 49 44 5f 53 55 46 46 49 58 3a 22 5f 75 6e 73 65 6c 65 63 74 65 64 22 2c 70 41 55 54 4f 5f 53 55 42 4d 49 54 54 45 44 5f 46 52 4f 4d 3a 22 6c 73 70 66 66 72 6f 6d 22 2c 70 42 41 53 45 5f 4e 41 4d 45 3a 22 6c 6b 6e 6d 22 2c 70 49 44 5f 53 55 46 46 49 58 3a 22 5f 6c 6b 69 64 22 2c 70 4d 4f 44 5f 53 55 46 46 49 58 3a 22 5f 6d 6f 64 22 2c 70 4f 4c 44 5f 4e 41 4d 45 5f 53 55 46 46 49 58 3a 22 5f 6c 6b 6f 6c 64 22 2c 0a 70 54 59 50 45 5f 53 55 46 46 49 58 3a 22 5f 6c 6b 74 70 22 7d 2c 45 64 69 74 45 76 65 6e 74 4d 75 6c 74 69 55 73 65 72 43 61 6c 65 6e 64 61 72 45 6c 65 6d 65 6e 74 43 6f 6e 73 74 61 6e 74 73 3d 7b 41 44 44 5f 41 4e 44 5f 52 45 4d 4f 56 45 5f 49 4e 56 49 54 45 45 3a 32 2c 41 44 44 5f 49 4e 56 49 54 45 45 53 3a 30 2c 45 44 49 54 5f Data Ascii: CTED_ID_SUFFIX:"_unselected",pAUTO_SUBMITTED_FROM:"lspffrom",pBASE_NAME:"lknm",pID_SUFFIX:"_lkid",pMOD_SUFFIX:"_mod",pOLD_NAME_SUFFIX:"_lkold",pTYPE_SUFFIX:"_lktp"},EditEventMultiUserCalendarElementConstants={ADD_AND_REMOVE_INVITEE:2,ADD_INVITEES:0,EDIT_
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 73 65 6c 65 63 74 4c 61 62 65 6c 22 2c 73 65 6c 65 63 74 65 64 43 68 65 63 6b 62 6f 78 50 72 65 66 69 78 3a 22 75 63 68 5f 22 2c 73 65 6c 65 63 74 65 64 46 72 61 6d 65 49 64 3a 22 73 65 6c 65 63 74 65 64 0d 0a 38 30 30 30 0d 0a 22 2c 73 65 6c 65 63 74 65 64 52 6f 77 50 72 65 66 69 78 3a 22 73 65 6c 5f 22 2c 73 65 6c 65 63 74 69 6f 6e 73 54 61 62 6c 65 49 64 3a 22 73 65 6c 65 63 74 69 6f 6e 73 22 7d 2c 4d 75 6c 74 69 55 73 65 72 43 61 6c 65 6e 64 61 72 3d 7b 53 48 4f 57 5f 4e 41 4d 45 53 5f 42 4f 54 48 3a 22 30 22 2c 53 48 4f 57 5f 4e 41 4d 45 53 5f 4c 45 46 54 3a 22 31 22 2c 53 48 4f 57 5f 4e 41 4d 45 53 5f 4e 4f 4e 45 3a 22 33 22 2c 53 48 4f 57 5f 4e 41 4d 45 53 5f 52 49 47 48 54 3a 22 32 22 7d 2c 4d 79 43 75 73 74 6f 6d 4f 62 6a 65 63 74 43 6f 6e 73 74 Data Ascii: selectLabel",selectedCheckboxPrefix:"uch_",selectedFrameId:"selected8000",selectedRowPrefix:"sel_",selectionsTableId:"selections"},MultiUserCalendar={SHOW_NAMES_BOTH:"0",SHOW_NAMES_LEFT:"1",SHOW_NAMES_NONE:"3",SHOW_NAMES_RIGHT:"2"},MyCustomObjectConst
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 2c 4d 41 58 5f 56 41 4c 49 44 5f 4d 52 55 5f 53 55 47 47 45 53 54 49 4f 4e 53 3a 31 30 2c 52 45 53 45 52 56 45 44 5f 43 48 41 52 5f 52 45 47 45 58 3a 27 5b 5c 5c 28 5c 5c 29 22 5c 5c 3f 5c 5c 2a 5d 27 2c 0a 53 45 41 52 43 48 52 45 53 55 4c 54 5f 48 4f 4c 44 45 52 5f 44 49 56 5f 49 44 3a 22 73 65 61 72 63 68 52 65 73 75 6c 74 73 48 6f 6c 64 65 72 44 69 76 22 2c 53 45 41 52 43 48 5f 41 4c 4c 5f 49 44 3a 22 73 65 61 72 63 68 41 6c 6c 22 2c 53 45 41 52 43 48 5f 41 4c 4c 5f 53 55 4d 4d 41 52 59 5f 56 49 45 57 5f 49 44 3a 22 73 65 61 72 63 68 41 6c 6c 53 75 6d 6d 61 72 79 56 69 65 77 22 2c 53 45 41 52 43 48 5f 4c 4f 47 47 49 4e 47 5f 48 41 4e 44 4c 45 52 3a 22 73 65 61 72 63 68 22 2c 53 45 41 52 43 48 5f 4d 4f 52 45 5f 4f 42 4a 45 43 54 53 5f 49 44 3a 22 73 65 Data Ascii: ,MAX_VALID_MRU_SUGGESTIONS:10,RESERVED_CHAR_REGEX:'[\$\$"\\?\\*]',SEARCHRESULT_HOLDER_DIV_ID:"searchResultsHolderDiv",SEARCH_ALL_ID:"searchAll",SEARCH_ALL_SUMMARY_VIEW_ID:"searchAllSummaryView",SEARCH_LOGGING_HANDLER:"search",SEARCH_MORE_OBJECTS_ID:"se
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 5b 57 28 66 61 28 68 29 2c 63 29 5d 3b 65 6c 73 65 7b 63 3d 6c 2e 66 69 6c 74 65 72 5b 61 5b 67 5d 2e 74 79 70 65 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 5b 67 5d 2e 6d 61 74 63 68 65 73 29 3b 69 66 28 63 5b 6e 5d 29 7b 66 6f 0d 0a 31 30 30 30 30 0d 0a 72 28 64 3d 2b 2b 67 3b 64 3c 65 26 26 21 6c 2e 72 65 6c 61 74 69 76 65 5b 61 5b 64 5d 2e 74 79 70 65 5d 3b 64 2b 2b 29 3b 72 65 74 75 72 6e 20 67 61 28 31 3c 67 26 26 66 61 28 68 29 2c 31 3c 67 26 26 55 28 61 2e 73 6c 69 63 65 28 30 2c 67 2d 31 29 2e 63 6f 6e 63 61 74 28 7b 76 61 6c 75 65 3a 22 20 22 3d 3d 3d 61 5b 67 2d 32 5d 2e 74 79 70 65 3f 22 2a 22 3a 22 22 7d 29 29 2e 72 65 70 6c 61 63 65 28 56 2c 22 24 31 22 29 2c 63 2c 67 3c 64 26 26 68 61 28 61 2e 73 6c 69 63 65 28 67 2c 64 29 29 2c 64 3c 65 26 Data Ascii: [W(fa(h),c)];else{c=l.filter[a[g].type].apply(null,a[g].matches);if(c[n]){fo10000r(d=++g;d<e&&!l.relative[a[d].type];d++);return ga(1<g&&fa(h),1<g&&U(a.slice(0,g-1).concat({value:" "===a[g-2].type?"*":""})).replace(V,"$1"),c,g<d&&ha(a.slice(g,d)),d<e&
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 29 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 22 74 79 70 65 22 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 31 3a 32 29 7d 29 3b 28 21 70 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 43 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 5c 78 33 63 69 6e 70 75 74 2f 5c 78 33 65 22 3b 0a 61 2e 66 69 72 73 74 43 68 69 6c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 22 22 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 7d 29 29 26 26 65 61 28 22 76 61 6c 75 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c Data Ascii: th",function(a,b,c){if(!c)return a.getAttribute(b,"type"===b.toLowerCase()?1:2)});(!p.attributes\|\|!C(function(a){a.innerHTML="\x3cinput/\x3e";a.firstChild.setAttribute("value","");return""===a.firstChild.getAttribute("value")}))&&ea("value",function(a,b,
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 61 6c 6c 28 61 2e 63 6f 6e 74 65 78 74 2c 64 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 64 2c 61 29 3b 61 2e 63 6f 6d 70 6c 65 74 65 3d 61 2e 73 75 63 63 65 73 73 3d 61 2e 66 61 69 6c 75 72 65 3d 61 2e 62 65 66 6f 72 65 72 65 71 75 65 73 74 3d 6e 75 6c 6c 7d 7d 3b 61 2e 64 61 74 61 26 26 28 22 47 45 54 22 3d 3d 3d 61 2e 6d 65 74 68 6f 64 7c 7c 22 48 45 41 44 22 3d 3d 3d 61 2e 6d 65 74 68 6f 64 3f 65 3d 63 2e 55 72 6c 2e 67 65 6e 65 72 61 74 65 55 72 6c 28 65 2c 61 2e 64 61 74 61 2c 7b 65 73 63 61 70 65 3a 61 2e 65 73 63 61 70 65 7d 29 3a 21 63 2e 69 73 53 74 72 69 6e 67 28 61 2e 64 61 74 61 29 26 26 61 2e 70 72 6f 63 65 73 73 44 61 74 61 26 26 28 61 2e 64 61 74 61 3d 63 2e 55 72 6c 2e 67 65 6e 65 72 61 74 65 51 75 65 72 79 53 74 72 69 6e 67 28 22 22 2c 61 Data Ascii: all(a.context,d.responseText,d,a);a.complete=a.success=a.failure=a.beforerequest=null}};a.data&&("GET"===a.method\|\|"HEAD"===a.method?e=c.Url.generateUrl(e,a.data,{escape:a.escape}):!c.isString(a.data)&&a.processData&&(a.data=c.Url.generateQueryString("",a
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 53 66 64 63 2e 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 62 2c 61 29 29 29 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 53 66 64 63 2e 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 62 2c 61 29 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 53 66 64 63 2e 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 62 2c 61 29 29 7d 2c 6c 6f 67 55 73 61 67 65 3a 66 75 6e 63 74 69 6f Data Ascii: le.log.apply(this,arguments):window.console.log(Sfdc.String.format(b,a)))},warn:function(b,a){window.console&&window.console.warn(Sfdc.String.format(b,a))},error:function(b,a){window.console&&window.console.error(Sfdc.String.format(b,a))},logUsage:functio
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 61 67 67 61 62 6c 65 20 7a 65 6e 2d 76 69 73 75 61 6c 69 7a 61 74 69 6f 6e 22 29 3b 64 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 75 69 64 73 66 64 63 22 29 3b 66 6f 72 28 76 61 72 20 66 3d 62 2c 63 3d 7b 78 3a 30 2c 79 3a 30 7d 0d 0a 39 64 66 34 0d 0a 2c 67 3d 66 26 26 66 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 6c 3d 21 31 3b 66 26 26 66 21 3d 67 3b 29 22 73 74 61 74 69 63 22 21 3d 61 2e 44 6f 6d 2e 67 65 74 53 74 79 6c 65 28 66 2c 22 70 6f 73 69 74 69 6f 6e 22 29 26 26 28 6c 3d 21 30 29 2c 6c 26 26 28 63 2e 78 2b 3d 66 2e 6f 66 66 73 65 74 4c 65 66 74 2c 63 2e 79 2b 3d 66 2e 6f 66 66 73 65 74 54 6f 70 29 2c 66 3d 66 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 74 3d 63 3b 66 3d 61 2e 44 6f 6d 2e 67 65 74 45 6c Data Ascii: aggable zen-visualization");d.removeAttribute("data-uidsfdc");for(var f=b,c={x:0,y:0}9df4,g=f&&f.ownerDocument.body,l=!1;f&&f!=g;)"static"!=a.Dom.getStyle(f,"position")&&(l=!0),l&&(c.x+=f.offsetLeft,c.y+=f.offsetTop),f=f.offsetParent;t=c;f=a.Dom.getEl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50120	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	564	OUT	GET /journey/messenger-plugins/journey.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	527	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/javascript Content-Length: 15948 Connection: close Server: nginx x-amz-id-2: ALpZS1f3RYyIMKT0FSKV4E3e/DC5ATLv4o3U4kFn+m8ybulAZ6OHgTovoMENSasle5rp6/hUPPw= x-amz-request-id: GXG72Y5TWT9N1FTA Cache-Control: max-age: 600 Content-Encoding: gzip Last-Modified: Mon, 25 Mar 2024 11:20:25 GMT x-amz-version-id: vKB0iaBbjqOqU.JG2QgufXPfcPLGGciS ETag: "24581e9ba60b8b29eeac6c54cf9fb485" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:33 UTC	15857	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 7d 5b e3 b6 f2 e8 ff f7 53 04 3f 3d a9 55 84 49 d8 97 d3 26 eb e5 61 59 b6 a5 87 05 0a 6c db 53 ca 61 8d ad 24 ea 1a 3b b5 14 58 9a f8 bb df 67 f4 66 c9 76 20 6c b7 bf 7b cf bd 7d fa 82 a3 d7 91 34 1a 8d 66 46 33 9b 5f ad 75 de e4 45 27 a5 31 c9 18 e9 d0 6c 94 17 d7 11 a7 79 d6 99 a6 24 62 a4 c3 08 e9 fc 96 cf 8a 8c dc 05 d7 34 0b 7e 63 c1 c1 fe ee de e1 e9 5e c0 3f f2 ce 57 9b ff cb f7 51 f8 72 7e 13 15 1d 12 ce bf e9 3f 1d 8c 66 59 0c 4d f8 04 73 4c 91 c8 62 43 12 d2 20 bb 4e 7c 82 b0 29 90 c9 cc 22 f4 49 b7 4b 02 f2 71 9a 17 9c 61 2f bf fa 8d c4 dc 0b 43 7e 37 25 f9 a8 43 83 71 b7 4b 83 31 1a 16 c1 38 cd af a2 74 2d 0c 8b 6e b7 08 6e 69 96 e4 b7 43 68 25 0f ab 8e d1 9c 4f 28 0b ae 09 63 d1 98 84 a4 1c fa 79 30 2d 72 Data Ascii: }}[S?=UI&aYlSa$;Xgfv l{}4fF3_uE'1ly$b4~c^?WQr~?fYMsLbC N\|)"IKqa/C~7%CqK18t-nniCh%O(cy0-r
2024-04-16 17:43:33 UTC	91	IN	Data Raw: 94 e6 36 6f 81 a8 c1 23 13 13 0b 3e 33 11 eb 95 b6 dd 79 71 17 21 5c 04 ae 41 86 b2 d6 cf 2c 6b fd 6c 85 70 c1 96 79 73 f1 70 b8 e0 c8 2e fd 70 b8 e0 4f b2 d6 cf 94 b5 7e b6 8a b5 7e 11 16 ca bc 99 62 d6 6e ad 2f 6c f5 71 21 94 28 be f8 6f f8 bf 01 2b 87 80 81 99 f2 00 00 Data Ascii: 6o#>3yq!\A,klpysp.pO~~bn/lq!(o+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50127	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1697	OUT	GET /jslibrary/1699262264248/sfdc/main.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Wed, 14 Aug 2024 17:43:32 GMT Last-Modified: Thu, 12 Oct 2023 15:07:36 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: c62fde9c21f0e2c3a979ab4ae84f839b
2024-04-16 17:43:32 UTC	15957	IN	Data Raw: 38 30 30 30 0d 0a 76 61 72 20 49 6e 6c 69 6e 65 45 64 69 74 53 74 61 74 65 20 3d 20 7b 22 45 44 49 54 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 6c 69 6e 65 45 64 69 74 57 72 69 74 65 22 2c 22 64 69 73 70 6c 61 79 22 3a 74 72 75 65 7d 2c 22 4e 4f 4e 45 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 22 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 7d 2c 22 50 4f 53 54 4f 4e 4c 59 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 22 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 7d 2c 22 52 45 41 44 4f 4e 4c 59 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 6c 69 6e 65 45 64 69 74 4c 6f 63 6b 22 2c 22 64 69 73 70 6c 61 79 22 3a 74 72 75 65 7d 7d 3b 0a 76 61 72 20 43 6f 6c 75 6d 6e 54 79 70 65 20 3d 20 7b 22 4e 41 4d 45 53 50 41 43 45 22 3a 7b 22 69 Data Ascii: 8000var InlineEditState = {"EDIT":{"cssClass":"inlineEditWrite","display":true},"NONE":{"cssClass":"","display":false},"POSTONLY":{"cssClass":"","display":false},"READONLY":{"cssClass":"inlineEditLock","display":true}};var ColumnType = {"NAMESPACE":{"i
2024-04-16 17:43:32 UTC	16384	IN	Data Raw: 65 72 46 69 65 6c 64 3b 7d 2c 22 69 6e 6c 69 6e 65 45 64 69 74 46 69 65 6c 64 4f 62 6a 65 63 74 22 3a 22 4e 75 6d 62 65 72 46 69 65 6c 64 22 2c 22 69 6e 6c 69 6e 65 45 64 69 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 69 73 43 6f 6d 70 6f 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 70 61 72 61 62 6c 65 44 61 74 61 74 79 70 65 73 22 3a 5b 22 43 22 5d 2c 22 69 73 4e 75 6d 62 65 72 22 3a 74 72 75 65 2c 22 64 61 74 61 74 79 70 65 4c 65 74 74 65 72 22 3a 22 43 22 2c 22 6e 65 65 64 73 4c 6f 6f 6b 75 70 22 3a 66 61 6c 73 65 2c 22 69 73 44 61 74 65 22 3a 66 61 6c 73 65 2c 22 69 6e 6c 69 6e 65 45 64 69 74 46 69 65 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 46 69 65 6c 64 3b 7d 2c 22 66 69 6c 74 65 Data Ascii: erField;},"inlineEditFieldObject":"NumberField","inlineEditable":true,"isCompond":false,"comparableDatatypes":["C"],"isNumber":true,"datatypeLetter":"C","needsLookup":false,"isDate":false,"inlineEditFieldConstructor":function(){return NumberField;},"filte
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 72 6e 20 61 2e 73 75 62 73 74 72 69 6e 67 28 62 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 61 73 73 75 72 65 49 6e 74 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 3d 70 61 72 73 65 49 6e 74 28 61 29 29 3f 30 3a 62 7d 0a 76 61 72 20 69 73 49 45 3d 2d 31 21 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 4d 69 63 72 6f 73 6f 66 74 22 29 2c 69 73 49 45 35 3d 30 3c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 35 2e 30 22 29 2c 69 73 49 45 37 3d 2d 31 21 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 37 22 29 2c 69 73 4f 70 65 72 61 3d 2d 31 21 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 Data Ascii: rn a.substring(b,c)}function assureInt(a){var b;return isNaN(b=parseInt(a))?0:b}var isIE=-1!=navigator.appName.indexOf("Microsoft"),isIE5=0<navigator.userAgent.indexOf("MSIE 5.0"),isIE7=-1!=navigator.userAgent.indexOf("MSIE 7"),isOpera=-1!=navigator.user
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 63 29 7b 62 3d 62 2e 6f 70 74 69 6f 6e 73 3b 66 6f 72 28 69 3d 30 3b 69 3c 63 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 6f 70 74 69 6f 6e 73 5b 63 5b 69 5d 5d 2c 67 3d 6e 65 77 20 4f 70 74 69 6f 6e 28 66 2e 74 65 78 74 2c 66 2e 76 61 6c 75 65 29 3b 67 2e 74 69 74 6c 65 3d 66 2e 74 69 74 6c 65 3b 31 3d 3d 62 2e 6c 65 6e 67 74 68 26 26 62 5b 30 5d 2e 74 65 78 74 3d 3d 65 3f 28 62 5b 30 5d 3d 67 2c 62 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 3a 62 5b 62 2e 6c 65 6e 67 74 68 5d 3d 67 7d 69 66 28 21 64 29 7b 63 3d 63 2e 73 6f 72 74 28 73 6f 72 74 4f 72 64 65 72 4e 75 6d 65 72 69 63 52 65 76 65 72 73 65 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 63 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 61 2e 6f 70 74 69 6f 6e 73 5b 63 5b 69 5d 5d 3d 6e 75 6c Data Ascii: c){b=b.options;for(i=0;i<c.length;i++){var f=a.options[c[i]],g=new Option(f.text,f.value);g.title=f.title;1==b.length&&b[0].text==e?(b[0]=g,b[0].selected=!0):b[b.length]=g}if(!d){c=c.sort(sortOrderNumericReverse);for(i=0;i<c.length;i++)a.options[c[i]]=nul
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 6e 61 6d 65 3d 3d 61 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 43 53 28 61 29 7b 72 65 74 75 72 6e 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 43 53 57 69 74 68 44 6f 63 28 64 6f 63 75 6d 65 6e 74 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 43 53 57 69 74 68 44 6f 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 63 7c 7c 63 2e 69 64 3d 3d 62 3f 63 3a 61 2e 61 6c 6c 3f 61 2e 61 6c 6c 5b 62 5d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 61 73 68 69 66 79 28 Data Ascii: d=0;d<b.length;d++)b[d].name==a&&c.push(b[d]);return c}function getElementByIdCS(a){return getElementByIdCSWithDoc(document,a)}function getElementByIdCSWithDoc(a,b){var c=a.getElementById(b);return null==c\|\|c.id==b?c:a.all?a.all[b]:null}function dashify(
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 44 45 46 41 55 4c 54 5f 4e 55 4d 5f 43 4f 4c 53 3a 22 64 65 66 61 75 6c 74 4e 75 6d 43 6f 6c 73 22 2c 46 49 45 4c 44 5f 54 59 50 45 5f 53 45 4c 45 43 54 5f 4e 41 4d 45 3a 22 61 76 61 69 6c 61 62 6c 65 44 72 6f 70 44 6f 77 6e 22 2c 48 4f 56 45 52 5f 44 49 56 3a 22 4d 4f 55 53 45 5f 48 4f 56 45 52 5f 44 49 56 22 2c 49 54 45 4d 3a 22 69 74 65 6d 22 2c 49 54 45 4d 5f 42 45 48 41 56 49 4f 52 3a 22 62 65 68 61 76 69 6f 72 22 2c 49 54 45 4d 5f 43 55 53 54 4f 4d 4c 41 42 45 4c 3a 22 63 75 73 74 6f 6d 4c 61 62 65 6c 22 2c 0a 49 54 45 4d 5f 44 45 46 41 55 4c 54 5f 43 48 45 43 4b 45 44 3a 22 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 22 2c 49 54 45 4d 5f 48 45 49 47 48 54 3a 22 68 65 69 67 68 74 22 2c 49 54 45 4d 5f 49 44 3a 22 69 74 65 6d 49 64 22 2c 49 54 45 4d 5f Data Ascii: DEFAULT_NUM_COLS:"defaultNumCols",FIELD_TYPE_SELECT_NAME:"availableDropDown",HOVER_DIV:"MOUSE_HOVER_DIV",ITEM:"item",ITEM_BEHAVIOR:"behavior",ITEM_CUSTOMLABEL:"customLabel",ITEM_DEFAULT_CHECKED:"defaultChecked",ITEM_HEIGHT:"height",ITEM_ID:"itemId",ITEM_
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 75 72 6e 6d 6f 72 65 22 2c 70 49 4e 56 49 54 45 44 5f 49 44 53 3a 22 69 6e 76 74 64 69 64 73 22 2c 70 49 4e 56 49 54 45 45 5f 49 44 5f 53 45 4c 45 43 54 45 44 3a 22 69 6e 76 73 65 6c 22 7d 2c 49 6e 76 69 74 65 72 4c 6f 6f 6b 75 70 4d 61 74 63 68 3d 7b 45 4d 41 49 4c 3a 22 65 6d 61 69 6c 22 2c 49 44 3a 22 69 64 22 2c 4e 41 4d 45 3a 22 6e 61 6d 65 22 2c 54 59 50 45 3a 22 74 79 70 65 22 2c 54 59 50 45 5f 43 4f 4e 54 41 43 54 3a 22 63 6f 6e 74 61 63 74 22 2c 54 59 50 45 5f 4c 45 41 44 3a 22 6c 65 61 64 22 2c 54 59 50 45 5f 55 53 45 52 3a 22 75 73 65 72 22 7d 2c 4a 53 50 44 69 73 70 61 74 63 68 65 72 3d 7b 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 50 41 43 4b 41 47 45 5f 50 52 45 46 49 58 3a 22 5f 75 69 2f 22 2c 50 41 43 4b 41 47 45 5f 4d 41 52 4b 45 52 3a 22 70 2f Data Ascii: urnmore",pINVITED_IDS:"invtdids",pINVITEE_ID_SELECTED:"invsel"},InviterLookupMatch={EMAIL:"email",ID:"id",NAME:"name",TYPE:"type",TYPE_CONTACT:"contact",TYPE_LEAD:"lead",TYPE_USER:"user"},JSPDispatcher={NONSTANDARD_PACKAGE_PREFIX:"_ui/",PACKAGE_MARKER:"p/
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 61 74 6f 72 22 2c 53 49 44 45 42 41 52 5f 43 4f 4c 4c 41 50 53 45 44 5f 43 4c 41 53 53 3a 22 73 69 64 65 62 61 72 43 6f 6c 6c 61 70 73 65 64 22 2c 53 49 44 45 42 41 52 5f 44 49 56 5f 49 44 3a 22 73 69 64 65 62 61 72 44 69 76 22 2c 0a 53 49 44 45 42 41 52 5f 50 49 4e 4e 45 44 5f 43 4f 4f 4b 49 45 3a 22 73 69 64 65 62 61 72 50 69 6e 6e 65 64 22 2c 70 53 45 41 52 43 48 5f 53 49 44 45 42 41 52 5f 53 54 52 3a 22 73 62 73 74 72 22 7d 2c 53 69 64 65 74 61 62 43 6f 6e 73 74 61 6e 74 73 3d 7b 42 41 43 4b 5f 54 4f 5f 54 4f 50 5f 42 54 4e 5f 49 44 3a 22 73 74 3a 42 61 63 6b 54 6f 54 6f 70 42 74 6e 22 2c 43 41 4e 56 41 53 5f 42 4f 44 59 5f 50 41 4e 45 4c 5f 49 44 3a 22 73 74 3a 43 61 6e 76 61 73 42 6f 64 79 50 61 6e 65 6c 22 2c 44 45 41 4c 56 49 45 57 5f 44 45 54 41 Data Ascii: ator",SIDEBAR_COLLAPSED_CLASS:"sidebarCollapsed",SIDEBAR_DIV_ID:"sidebarDiv",SIDEBAR_PINNED_COOKIE:"sidebarPinned",pSEARCH_SIDEBAR_STR:"sbstr"},SidetabConstants={BACK_TO_TOP_BTN_ID:"st:BackToTopBtn",CANVAS_BODY_PANEL_ID:"st:CanvasBodyPanel",DEALVIEW_DETA
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 69 73 2e 68 61 73 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 28 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 45 50 54 5f 43 4f 4f 4b 49 45 29 26 26 74 68 69 73 2e 63 72 65 61 74 65 43 6f 6f 6b 69 65 28 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 45 50 54 5f 43 4f 4f 4b 49 45 2c 6e 65 77 20 44 61 74 65 2c 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 45 50 54 5f 43 4f 4f 4b 49 45 5f 54 49 4d 45 4f 55 54 29 7d 3b 0a 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 20 30 3e 5b 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 45 50 54 5f 43 4f 4f 4b 49 45 5d 2e 69 6e 64 65 78 4f 66 28 61 29 7c 7c Data Ascii: is.hasCookieConsent(GenericSfdcPage.EPT_COOKIE)&&this.createCookie(GenericSfdcPage.EPT_COOKIE,new Date,GenericSfdcPage.EPT_COOKIE_TIMEOUT)};GenericSfdcPage.prototype.hasCookieConsent=function(a){var b=[];return 0>[GenericSfdcPage.EPT_COOKIE].indexOf(a)\|\|
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 2e 74 65 78 74 3d 62 5b 65 5d 2e 74 65 78 74 2c 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 29 7d 7d 2c 30 29 7d 2c 65 76 61 6c 41 6a 61 78 53 65 72 76 6c 65 74 4f 75 74 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 7b 69 66 28 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 41 6a 61 78 53 65 72 76 6c 65 74 2e 43 53 52 46 5f 50 52 4f 54 45 43 54 2e 6c 65 6e 67 74 68 29 21 3d 3d 41 6a 61 78 53 65 72 76 6c 65 74 2e 43 53 52 46 5f 50 52 4f 54 45 43 54 29 74 68 72 6f 77 20 53 66 64 63 2e 73 75 70 70 6f 72 74 2e 73 65 72 76 69 63 65 64 65 73 6b 2e 43 53 52 46 5f 45 52 52 4f 52 3b 0a 72 65 74 75 72 6e 20 65 76 61 6c 28 22 28 22 2b 55 74 69 6c 2e 73 74 72 69 70 43 53 52 46 50 72 6f 74 65 63 74 28 61 29 2b 22 29 22 29 7d 72 65 74 75 72 6e 20 6e 75 Data Ascii: .text=b[e].text,c.appendChild(f))}},0)},evalAjaxServletOutput:function(a){if(a){if(a.substring(0,AjaxServlet.CSRF_PROTECT.length)!==AjaxServlet.CSRF_PROTECT)throw Sfdc.support.servicedesk.CSRF_ERROR;return eval("("+Util.stripCSRFProtect(a)+")")}return nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50128	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	1702	OUT	GET /jslibrary/jslabels/1712949258000/en_US.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:33 UTC	454	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Fri, 31 May 2024 17:43:32 GMT Last-Modified: Fri, 12 Apr 2024 19:14:18 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 7941f63679c9a82d79642bfb9c86ec33
2024-04-16 17:43:33 UTC	15930	IN	Data Raw: 33 65 38 65 0d 0a 4c 43 2e 6c 61 62 65 6c 73 3d 7b 27 41 63 74 69 6f 6e 42 61 72 42 75 74 74 6f 6e 73 27 3a 7b 27 41 63 74 69 6f 6e 42 61 72 48 65 6c 70 43 68 61 74 74 65 72 44 69 73 61 62 6c 65 64 27 3a 27 41 63 74 69 6f 6e 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 61 70 70 65 61 72 20 69 6e 20 4c 69 67 68 74 6e 69 6e 67 20 45 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 69 6e 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 20 61 63 74 69 6f 6e 20 62 61 72 2c 20 61 6e 64 20 6d 61 79 20 61 70 70 65 61 72 20 69 6e 20 74 68 69 72 64 20 70 61 72 74 79 20 61 70 70 73 20 74 68 61 74 20 75 73 65 20 74 68 69 73 20 70 61 67 65 20 6c 61 79 6f 75 74 2e 27 2c 27 41 63 74 69 6f 6e 42 61 72 48 65 6c 70 43 68 61 74 74 65 72 45 6e 61 62 6c 65 64 4d 44 50 44 69 73 Data Ascii: 3e8eLC.labels={'ActionBarButtons':{'ActionBarHelpChatterDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPDis
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 68 4f 70 74 69 6f 6e 73 50 6c 75 73 41 6c 74 27 3a 27 53 68 6f 77 20 6d 6f 72 65 20 65 6d 61 69 6c 20 6f 70 74 69 6f 6e 73 27 7d 2c 27 43 61 74 65 67 6f 72 79 50 69 63 6b 65 72 27 3a 7b 27 61 6c 6c 5f 63 61 74 65 67 6f 72 69 65 73 27 3a 27 41 76 61 69 6c 61 62 6c 65 20 0d 0a 38 30 30 30 0d 0a 43 61 74 65 67 6f 72 69 65 73 3a 27 2c 27 6d 61 78 5f 63 61 74 65 67 6f 72 79 5f 68 6f 76 65 72 27 3a 27 59 6f 75 20 63 61 6e 5c 27 74 20 61 73 73 69 67 6e 20 6d 6f 72 65 20 74 68 61 6e 20 7b 30 7d 20 63 61 74 65 67 6f 72 69 65 73 2e 27 2c 27 73 65 6c 65 63 74 65 64 5f 63 61 74 65 67 6f 72 69 65 73 27 3a 27 53 65 6c 65 63 74 65 64 20 43 61 74 65 67 6f 72 69 65 73 3a 27 7d 2c 27 43 68 61 72 74 4c 65 67 65 6e 64 50 6f 73 69 74 69 6f 6e 27 3a 7b 27 31 27 3a 27 52 69 67 Data Ascii: hOptionsPlusAlt':'Show more email options'},'CategoryPicker':{'all_categories':'Available 8000Categories:','max_category_hover':'You can\'t assign more than {0} categories.','selected_categories':'Selected Categories:'},'ChartLegendPosition':{'1':'Rig
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 65 72 72 6f 72 51 75 65 73 74 69 6f 6e 54 6f 6f 53 68 6f 72 74 27 3a 27 50 6c 65 61 73 65 20 74 79 70 65 20 61 74 20 6c 65 61 73 74 20 74 68 72 65 65 20 63 68 61 72 61 63 74 65 72 73 20 74 6f 20 73 65 61 72 63 68 2e 27 7d 2c 27 43 68 61 74 74 65 72 53 65 72 76 69 63 65 45 6d 61 69 6c 73 27 3a 7b 27 45 6d 61 69 6c 50 72 65 66 27 3a 27 52 65 63 65 69 76 65 20 65 6d 61 69 6c 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 27 2c 27 45 6d 61 69 6c 50 72 65 66 44 65 73 63 27 3a 27 43 68 65 63 6b 20 74 68 69 73 20 62 6f 78 20 74 6f 20 72 65 63 65 69 76 65 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 62 79 20 65 6d 61 69 6c 20 77 68 65 6e 20 74 68 65 72 65 20 61 72 65 20 75 70 64 61 74 65 73 20 74 6f 20 71 75 65 73 74 69 6f 6e 73 20 79 6f 75 5c 27 72 65 20 66 6f 6c 6c Data Ascii: errorQuestionTooShort':'Please type at least three characters to search.'},'ChatterServiceEmails':{'EmailPref':'Receive email notifications','EmailPrefDesc':'Check this box to receive notifications by email when there are updates to questions you\'re foll
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 6c 20 73 75 6d 6d 61 72 79 20 6c 65 76 65 6c 73 27 2c 27 6d 61 74 72 69 78 50 61 72 65 6e 74 47 72 6f 75 70 56 61 6c 4c 65 67 65 6e 64 27 3a 27 53 65 6c 65 63 74 20 70 61 72 65 6e 74 20 67 72 6f 75 70 69 6e 67 20 6c 65 76 65 6c 27 2c 27 6d 61 74 72 69 78 50 61 72 65 6e 74 49 6e 73 65 72 74 4c 0d 0a 31 36 61 0d 0a 61 62 65 6c 27 3a 27 50 41 52 45 4e 54 47 52 4f 55 50 56 41 4c 28 73 75 6d 6d 61 72 79 5f 66 69 65 6c 64 2c 20 7b 30 7d 2c 20 7b 31 7d 29 27 2c 27 6d 61 74 72 69 78 50 72 65 76 43 6f 6c 47 72 6f 75 70 27 3a 27 43 6f 6c 75 6d 6e 20 67 72 6f 75 70 69 6e 67 73 27 2c 27 6d 61 74 72 69 78 50 72 65 76 47 72 6f 75 70 56 61 6c 4c 65 67 65 6e 64 27 3a 27 47 65 74 20 70 72 65 76 69 6f 75 73 20 69 6e 20 67 72 6f 75 70 69 6e 67 20 6c 65 76 65 6c 27 2c 27 6d Data Ascii: l summary levels','matrixParentGroupValLegend':'Select parent grouping level','matrixParentInsertL16aabel':'PARENTGROUPVAL(summary_field, {0}, {1})','matrixPrevColGroup':'Column groupings','matrixPrevGroupValLegend':'Get previous in grouping level','m
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 3a 27 44 69 73 61 62 6c 65 20 4f 6e 20 4e 65 78 74 20 43 6c 69 63 6b 27 2c 27 44 69 73 61 62 6c 65 43 6f 6e 74 65 78 74 4d 65 6e 75 54 6f 6f 6c 74 69 70 27 3a 27 53 68 6f 77 20 74 68 65 20 73 74 61 6e 64 61 72 64 20 62 72 6f 77 73 65 72 20 63 6f 6e 74 65 78 74 20 6d 65 6e 75 20 6f 6e 20 74 68 65 20 6e 65 78 74 5c 6e 09 09 09 72 69 67 68 74 20 63 6c 69 63 6b 2e 27 2c 27 44 6f 77 6e 6c 6f 61 64 4c 6f 67 27 3a 27 44 6f 77 6e 6c 6f 61 64 20 4c 6f 67 27 2c 27 45 64 69 74 27 3a 27 45 64 69 74 27 2c 27 45 78 65 63 75 74 65 4c 61 73 74 27 3a 27 45 78 65 63 75 74 65 20 4c 61 73 74 27 2c 27 46 69 6c 65 27 3a 27 46 69 6c 65 27 2c 27 46 69 6e 64 27 3a 27 46 69 6e 64 27 2c 27 48 65 6c 70 27 3a 27 48 65 6c 70 27 2c 27 48 65 6c 70 44 6f 63 73 27 3a 27 48 65 6c 70 20 44 Data Ascii: :'Disable On Next Click','DisableContextMenuTooltip':'Show the standard browser context menu on the next\nright click.','DownloadLog':'Download Log','Edit':'Edit','ExecuteLast':'Execute Last','File':'File','Find':'Find','Help':'Help','HelpDocs':'Help D
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 6b 20 74 68 69 73 20 70 6f 73 74 27 2c 27 46 65 65 64 50 6f 73 74 42 6f 6f 6b 6d 61 72 6b 56 65 72 62 27 3a 27 42 6f 6f 6b 6d 61 72 6b 27 2c 27 46 65 65 64 50 6f 73 74 44 65 6c 65 74 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 27 3a 27 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 6c 65 74 65 20 74 68 69 73 20 70 6f 73 74 3f 27 2c 27 46 65 65 64 50 6f 73 74 44 65 6c 65 74 65 4e 6f 6e 43 72 65 61 74 6f 72 4d 73 67 27 3a 27 54 68 69 73 20 70 6f 73 74 20 77 61 73 20 63 72 65 61 74 65 64 20 62 79 20 61 6e 6f 74 68 65 72 20 75 73 65 72 2e 20 44 65 6c 65 74 69 6e 67 20 69 74 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 72 65 6d 6f 76 65 73 20 69 74 20 66 72 6f 6d 20 65 76 65 72 79 6f 6e 65 5c 27 73 20 76 69 65 77 2c 20 6e 6f 74 20 6a 75 Data Ascii: k this post','FeedPostBookmarkVerb':'Bookmark','FeedPostDeleteConfirmation':'Are you sure you want to delete this post?','FeedPostDeleteNonCreatorMsg':'This post was created by another user. Deleting it permanently removes it from everyone\'s view, not ju
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 20 2d 2d 27 2c 27 53 65 6c 65 63 74 65 64 27 3a 27 53 65 6c 65 63 74 65 64 27 7d 2c 27 47 6c 6f 62 61 6c 5f 41 64 64 72 65 73 73 27 3a 7b 27 70 68 6f 6e 65 27 3a 27 50 68 6f 6e 65 27 7d 2c 27 47 6c 6f 62 61 6c 5f 45 6e 74 69 74 79 27 3a 7b 27 49 6e 73 74 61 6c 6c 65 64 42 79 27 3a 27 49 6e 73 74 61 6c 6c 65 64 20 50 61 63 6b 61 67 65 27 2c 27 49 6e 76 61 6c 69 64 44 65 76 65 6c 6f 70 65 72 4e 61 6d 65 4f 6e 45 6e 74 69 74 79 27 3a 27 54 68 65 20 7b 30 7d 20 66 69 65 6c 64 20 63 61 6e 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 20 75 6e 64 65 72 73 63 6f 72 65 73 20 61 6e 64 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 63 68 61 72 61 63 74 65 72 73 2e 20 49 74 20 6d 75 73 74 20 62 65 20 75 6e 69 71 75 65 2c 20 62 65 67 69 6e 20 77 69 74 68 20 61 20 6c 65 74 74 65 Data Ascii: --','Selected':'Selected'},'Global_Address':{'phone':'Phone'},'Global_Entity':{'InstalledBy':'Installed Package','InvalidDeveloperNameOnEntity':'The {0} field can only contain underscores and alphanumeric characters. It must be unique, begin with a lette
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 45 78 70 6f 72 74 2f 49 6d 70 6f 72 74 20 6f 70 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 54 72 61 6e 73 6c 61 74 69 6f 6e 20 57 6f 72 6b 62 65 6e 63 68 20 74 6f 20 74 72 61 6e 73 6c 61 74 65 20 6c 61 62 65 6c 73 20 69 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 20 77 69 74 68 20 6c 61 72 67 65 20 6e 75 6d 62 65 72 73 20 6f 66 20 63 75 73 74 6f 6d 20 6f 62 6a 65 63 74 73 2e 27 2c 27 72 65 71 75 65 73 74 54 6f 6f 42 69 67 54 69 74 6c 65 27 3a 27 54 72 61 6e 73 6c 61 74 69 6f 6e 20 57 6f 72 6b 62 65 6e 63 68 20 2d 20 43 6f 75 6c 64 20 4e 6f 74 20 43 6f 6d 70 6c 65 74 65 20 52 65 71 75 65 73 74 27 2c 27 75 6e 73 61 76 65 64 43 68 61 6e 67 65 73 4d 65 73 73 61 67 65 27 3a 27 59 6f 75 20 68 61 76 65 20 75 6e 73 61 76 65 Data Ascii: lease use the Export/Import options in the Translation Workbench to translate labels in organizations with large numbers of custom objects.','requestTooBigTitle':'Translation Workbench - Could Not Complete Request','unsavedChangesMessage':'You have unsave
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 4c 69 76 65 43 68 61 74 41 67 65 6e 74 53 74 61 74 75 73 27 3a 7b 27 61 74 43 61 70 61 63 69 74 79 27 3a 27 41 74 20 43 61 70 61 63 69 74 79 27 2c 27 61 77 61 79 27 3a 27 41 77 61 79 27 2c 27 6f 66 66 6c 69 6e 65 27 3a 27 4f 66 66 6c 69 6e 65 27 2c 27 6f 6e 6c 69 6e 65 27 3a 27 4f 6e 6c 69 6e 65 27 2c 27 73 74 61 74 75 73 4d 73 67 27 3a 27 7b 30 7d 20 28 7b 31 7d 29 e2 80 8e 27 7d 2c 27 4c 69 76 65 43 68 61 74 42 6c 6f 63 6b 56 69 73 69 74 6f 72 27 3a 7b 27 42 6c 6f 63 6b 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 27 3a 27 42 6c 6f 63 6b 20 49 50 20 61 64 64 72 65 73 73 20 7b 30 7d 3f 27 7d 2c 27 4c 69 76 65 43 68 61 74 46 69 6c 65 54 72 61 6e 73 66 65 72 27 3a 7b 27 46 69 6c 65 54 72 61 6e 73 66 65 72 52 65 71 75 65 73 74 65 64 27 3a 27 41 67 65 6e 74 20 7b 30 Data Ascii: LiveChatAgentStatus':{'atCapacity':'At Capacity','away':'Away','offline':'Offline','online':'Online','statusMsg':'{0} ({1})'},'LiveChatBlockVisitor':{'BlockConfirmation':'Block IP address {0}?'},'LiveChatFileTransfer':{'FileTransferRequested':'Agent {0
2024-04-16 17:43:33 UTC	16384	IN	Data Raw: 6e 6c 79 53 74 6f 72 65 41 67 67 72 65 67 61 74 65 43 6f 76 65 72 61 67 65 27 3a 27 53 74 6f 72 65 20 4f 6e 6c 79 20 41 67 67 72 65 67 61 74 65 64 20 43 6f 64 65 20 43 6f 76 65 72 61 67 65 27 2c 27 6f 6e 6c 79 53 74 6f 72 65 41 67 67 72 65 67 61 74 65 43 6f 76 65 72 61 67 65 5f 64 65 73 63 27 3a 27 53 74 6f 72 65 73 20 63 6f 64 65 20 63 6f 76 65 72 61 67 65 20 72 65 73 75 6c 74 73 20 61 67 67 72 65 67 61 74 65 64 20 66 6f 72 20 61 6c 6c 20 74 65 73 74 20 6d 65 74 68 6f 64 73 3b 20 79 6f 75 20 63 61 6e 5c 27 74 20 76 69 65 77 20 63 6f 64 65 20 63 6f 76 65 72 61 67 65 20 72 65 73 75 6c 74 73 20 66 6f 72 20 69 6e 64 69 76 69 64 75 61 6c 20 74 65 73 74 20 6d 65 74 68 6f 64 73 2e 20 55 73 65 20 6f 6e 6c 79 20 74 6f 20 72 65 64 75 63 65 20 63 6f 64 65 20 63 6f Data Ascii: nlyStoreAggregateCoverage':'Store Only Aggregated Code Coverage','onlyStoreAggregateCoverage_desc':'Stores code coverage results aggregated for all test methods; you can\'t view code coverage results for individual test methods. Use only to reduce code co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50132	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	425	OUT	GET /webdeployments/v1/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/config.json HTTP/1.1 Host: api-cdn.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	556	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1434 Connection: close Date: Tue, 16 Apr 2024 17:43:33 GMT Last-Modified: Thu, 08 Feb 2024 12:33:32 GMT ETag: "5236bcfcff0cecb5fefa2567e55ddf28" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120,s-maxage=120 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 648261549d922701aa86d7bb06b0a4b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: 3oIucg-4Jmqw6grxti1iYVu7kPgp8KTQV-jmM-iISzyHTPDRqVw-xQ==
2024-04-16 17:43:33 UTC	1434	IN	Data Raw: 7b 22 69 64 22 3a 22 64 63 39 33 65 63 34 61 2d 62 63 34 33 2d 34 32 37 63 2d 39 61 38 33 2d 38 37 35 36 65 37 33 66 36 31 64 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 68 65 61 64 6c 65 73 73 4d 6f 64 65 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 2d 75 73 22 5d 2c 22 64 65 66 61 75 6c 74 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 61 70 69 45 6e 64 70 6f 69 6e 74 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 22 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 73 22 3a 7b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 7b 22 6d 65 73 73 61 67 69 6e 67 45 6e 64 70 6f 69 6e 74 Data Ascii: {"id":"dc93ec4a-bc43-427c-9a83-8756e73f61dc","version":"5","headlessMode":{"enabled":false},"languages":["en-us"],"defaultLanguage":"en-us","apiEndpoint":"https://api.usw2.pure.cloud","messenger":{"enabled":true,"apps":{"conversations":{"messagingEndpoint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50130	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift46c7d0743fa850984eb85812560 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:32 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 6417444f186fcad59e9411723c25d4ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: o_SuyCCQAVrQRHXGfNu3XmVit8LSlnoG6OMgkR5JObTLw-d2ZcMGvg==
2024-04-16 17:43:32 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50119	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	569	OUT	GET /journey/messenger-plugins/offersHelper.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: text/javascript Content-Length: 5195 Connection: close Server: nginx x-amz-id-2: AomYE2XZ8B5V3Y98Hr3TO+KTPMDlGyf3wDkCIaP8DaLNTiMDLveKysYh2R/xcYDcpqqq4W+mVXw= x-amz-request-id: 026AR8RK99W3E244 Cache-Control: max-age: 600 Content-Encoding: gzip Last-Modified: Mon, 25 Mar 2024 11:20:25 GMT x-amz-version-id: gyaRgKcL_pX4U35DyVCpqd32ZfoPXZlf ETag: "a9b7e3be96255a59ca32b3159ea791f9" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:33 UTC	5195	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 3a 6b 73 d4 ba 92 df f7 57 38 5e 6e 90 38 1e 8f 27 21 90 33 c1 b0 10 c2 39 dc 82 13 96 70 eb d6 6e 92 25 1a bb c7 23 c6 96 8c 24 cf 83 69 ff f7 2d c9 9e 67 86 0b e7 d6 56 ed 97 0b 05 23 4b ad 56 ab d5 52 3f bb 8f 0e bc 37 52 79 39 4f 40 68 f0 b8 18 4a 55 30 c3 a5 f0 ca 1c 98 06 4f 03 78 72 38 04 a5 7f 87 bc 04 15 16 5c 84 5f 74 f8 ee ed f9 c5 1f 57 17 a1 99 19 ef 51 f7 df 08 a1 f1 f3 c5 84 29 0f e2 c5 71 f4 a4 0f f1 f3 05 84 30 2b a5 32 3a 7e f8 2c e5 13 2f c9 99 d6 b1 9f 81 00 3d d7 1d 56 96 fe f3 1b e1 79 cf b4 99 e7 e0 9a 9e d7 7d f4 c8 7b 2b b8 e1 2c f7 f8 50 b1 02 3c 37 ac 1f 75 1b 80 70 39 3f 91 9d 66 7c d1 0c d8 3f 23 e0 d9 c8 f4 bd e8 6c dd 37 e5 a9 19 6d 77 0d a4 4a 41 f5 3d 21 05 6c 74 97 52 73 bb f9 be 37 e4 33 Data Ascii: :ksW8^n8'!39pn%#$i-gV#KVR?7Ry9O@hJU0Oxr8\_tWQ)q0+2:~,/=Vy}{+,P<7up9?f\|?#l7mwJA=!ltRs73

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50131	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	639	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289410418&PageStart=1713289396931&PrevBundleTime=1713289409054&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:32 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50129	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:32 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift6217e5b4ad994d3eef849d8aab4 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:32 GMT server: istio-envoy connection: close
2024-04-16 17:43:32 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50134	142.250.105.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	869	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 16 Apr 2024 17:43:32 GMT Date: Tue, 16 Apr 2024 17:43:32 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:33 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-16 17:43:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50133	13.110.40.235	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	788	OUT	GET /visualforce/session?url=https%3A%2F%2Fdocusign.lightning.force.com%2Fcontent%2Fsession%3Furl%3Dhttps%253A%252F%252Fdocusign.file.force.com%252Fsfc%252Fservlet.shepherd%252Fversion%252FrenditionDownload%253Frendition%253DORIGINAL_Jpeg%2526versionId%253D0688Z00000kkSjr%2526operationContext%253DCHATTER%2526contentId%253D05T8Z00002WJRwY HTTP/1.1 Host: docusign.my.salesforce.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=13Gt6PwYEe6h5rerpX03ZQ
2024-04-16 17:43:33 UTC	637	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests X-Robots-Tag: none Referrer-Policy: origin-when-cross-origin Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Cache-Control: must-revalidate,no-cache,no-store Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Connection: close
2024-04-16 17:43:33 UTC	2	IN	Data Raw: 0a 0a Data Ascii:
2024-04-16 17:43:33 UTC	1406	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 76 61 72 20 65 73 63 61 70 65 64 48 61 73 68 20 3d 20 27 27 3b 0a 76 61 72 20 75 72 6c 20 3d 20 27 2f 73 61 6d 6c 2f 61 75 74 68 6e Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {var escapedHash = '';var url = '/saml/authn
2024-04-16 17:43:33 UTC	697	IN	Data Raw: 0a 3c 2f 68 65 61 64 3e 0a 0a 0a 3c 2f 68 74 6d 6c 3e 0a 0a 0a 0a 0a 0a 3c 21 2d 2d 20 42 6f 64 79 20 65 76 65 6e 74 73 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 62 6f 64 79 4f 6e 4c 6f 61 64 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 50 72 65 66 65 72 65 6e 63 65 42 69 74 73 29 7b 77 69 6e 64 6f 77 2e 50 72 65 66 65 72 65 6e 63 65 42 69 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 73 72 66 54 6f 6b 65 6e 3d 22 6e 75 6c 6c 22 3b 7d 3b 7d 66 75 6e 63 74 69 6f 6e 20 62 6f 64 79 4f 6e 42 65 66 6f 72 65 55 6e 6c 6f 61 64 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 62 6f 64 79 4f 6e 46 6f 63 75 73 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 62 6f 64 79 4f 6e 55 6e 6c 6f 61 64 28 29 7b Data Ascii: </head></html>... Body events --><script type="text/javascript">function bodyOnLoad(){if(window.PreferenceBits){window.PreferenceBits.prototype.csrfToken="null";};}function bodyOnBeforeUnload(){}function bodyOnFocus(){}function bodyOnUnload(){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50125	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	711	OUT	GET /messenger/messenger.html HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/html Content-Length: 1204 Connection: close Server: nginx x-amz-id-2: L8UFFi+Puw5F0NcMLgp/1YddJjjPuhLc9H6QHrUlWDL2M2Um2dAqDXe7BQ8fjQI/lUTDFSC3tQc= x-amz-request-id: DVK78AAYHWMXQ140 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Egti0qFAf6IRzb_4DWuRcv7zla5vN2pe ETag: "1404b75da8e2bb3dc0247b949a748afe" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:33 UTC	1204	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6e 65 77 72 65 6c 69 63 2f 6e 65 77 72 65 6c 69 63 2d 61 67 65 6e 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4d 65 73 73 65 6e 67 65 72 28 29 7b 5b Data Ascii: <!DOCTYPE html> <html> <head> <meta charset="utf-8"/> <meta name="viewport" content="width=device-width,initial-scale=1" http-equiv="X-UA-Compatible" content="IE=edge"/> <script src="newrelic/newrelic-agent.js"></script> <script>function loadMessenger(){[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50126	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	720	OUT	GET /messenger/messenger-renderer.html HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	503	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:32 GMT Content-Type: text/html Content-Length: 1286 Connection: close Server: nginx x-amz-id-2: nYAxG2ZHFlUuG3nNuAOyESiYJTn+82w7cr7Tn5NIq9RCIYHzNL6zXbF29sR/R14IT9LblPa+YN4= x-amz-request-id: CAT8CD2427H4H10Q Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 2meds8fQBL5KFWr9otYXvOKXw4Grwen2 ETag: "5e33c9db52cede671fbd6ced2fa68603" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:33 UTC	1286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4d 65 73 73 65 6e 67 65 72 28 29 7b 5b 22 6d 65 73 73 61 67 69 6e 67 4d 69 64 64 6c 65 77 61 72 65 2e 6d 69 6e 2e 6a 73 22 2c 22 64 65 66 61 75 6c 74 56 65 6e 64 6f 72 73 2e 6d 69 6e 2e 6a 73 Data Ascii: <!DOCTYPE html> <html> <head> <meta charset="utf-8"/> <meta name="viewport" content="width=device-width,initial-scale=1" http-equiv="X-UA-Compatible" content="IE=edge"/> <script>function loadMessenger(){["messagingMiddleware.min.js","defaultVendors.min.js

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50136	142.250.105.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	857	OUT	GET /js/bg/KTA1qoE7ZDz05UuzGBms7CVmuC34sZ4nnXwNjg065Po.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ&co=aHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&badge=bottomleft&cb=7l0ie99tpsc8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:33 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18274 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 11:41:15 GMT Expires: Wed, 16 Apr 2025 11:41:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 21738 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:33 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4d 3d 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 64 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 29 7b 69 66 28 28 4a 3d 28 54 3d 64 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4a 3b 74 72 79 7b 4a 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var M=function(J){return J},d=this\|\|self,K=function(J,T){if((J=(T=d.trustedTypes,null),!T)\|\|!T.createPolicy)return J;try{J=T.createPolicy("bg",{createHTM
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 22 2b 74 7d 7d 28 64 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 4a 56 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 29 7b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 7d 2c 28 54 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 4a 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 2c 74 Data Ascii: eateScript(t)}:function(t){return""+t}}(d)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var JV=function(J,T){return[function(){return J},(T(function(t){t(J)}),function(){})]},P=function(J,T,t
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 64 29 7b 28 54 2e 51 6e 28 64 29 2c 4a 29 2e 51 6e 28 64 29 7d 2c 28 4a 3d 28 54 3d 28 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 51 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 57 29 7b 35 30 3e 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 29 2e 6a 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6a 2e 70 75 73 68 28 64 29 3a 28 57 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 35 30 3e 57 26 26 28 74 68 69 73 2e 6a 5b 57 5d 3d 64 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 29 2e 4f 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 6e 29 72 65 74 75 72 6e 5b 30 2c 30 5d 3b 72 65 74 75 72 6e 5b 28 74 68 69 73 2e 6a 2e 73 6f 72 Data Ascii: n=0,[])}return[function(d){(T.Qn(d),J).Qn(d)},(J=(T=((t.prototype.Qn=function(d,W){50>(this.n++,this).j.length?this.j.push(d):(W=Math.floor(Math.random()*this.n),50>W&&(this.j[W]=d))},t.prototype).OC=function(){if(0===this.n)return[0,0];return[(this.j.sor
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 4a 29 2c 54 29 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 54 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4a 2e 6c 65 6e 67 74 68 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4a 2e 73 70 6c 69 63 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 4a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 73 70 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 54 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 Data Ascii: ype.toString.call(J),T))return"object";if("[object Array]"==T\|\|"number"==typeof J.length&&"undefined"!=typeof J.splice&&"undefined"!=typeof J.propertyIsEnumerable&&!J.propertyIsEnumerable("splice"))return"array";if("[object Function]"==T\|\|"undefined"!=typ
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 7b 74 3d 54 5b 4a 2e 54 3d 74 72 75 65 2c 31 5d 3b 74 72 79 7b 64 3d 4a 2e 4f 7c 7c 4a 2e 4e 28 54 29 7d 63 61 74 63 68 28 71 29 7b 6d 28 71 2c 4a 29 2c 64 3d 4a 2e 4f 7d 74 28 64 29 7d 65 6c 73 65 20 69 66 28 57 3d 3d 45 69 29 54 5b 33 5d 26 26 28 4a 2e 44 3d 74 72 75 65 29 2c 54 5b 34 5d 26 26 28 4a 2e 67 3d 74 72 75 65 29 2c 54 5b 35 5d 26 26 28 4a 2e 55 3d 74 72 75 65 29 2c 54 5b 36 5d 26 26 28 4a 2e 54 3d 74 72 75 65 29 2c 4a 2e 4e 28 54 29 3b 65 6c 73 65 20 69 66 28 57 3d 3d 46 49 29 4a 2e 44 3d 74 72 75 65 2c 4a 2e 4e 28 54 29 3b 65 6c 73 65 20 69 66 28 57 3d 3d 47 41 29 7b 4a 2e 55 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 64 3d 30 3b 64 3c 4a 2e 69 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 74 3d 4a 2e 69 5b 64 5d 2c 74 5b 30 5d 5b 74 5b 31 Data Ascii: {t=T[J.T=true,1];try{d=J.O\|\|J.N(T)}catch(q){m(q,J),d=J.O}t(d)}else if(W==Ei)T[3]&&(J.D=true),T[4]&&(J.g=true),T[5]&&(J.U=true),T[6]&&(J.T=true),J.N(T);else if(W==FI)J.D=true,J.N(T);else if(W==GA){J.U=true;try{for(d=0;d<J.i.length;d++)try{t=J.i[d],t[0][t[1
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 4d 2c 4b 2c 75 2c 79 2c 44 2c 52 2c 49 29 7b 69 66 28 52 3d 67 28 74 2c 33 36 35 29 2c 52 3e 3d 74 2e 76 29 74 68 72 6f 77 5b 65 2c 33 31 5d 3b 66 6f 72 28 49 3d 28 75 3d 28 64 3d 28 4d 3d 54 2c 74 2e 61 39 2e 6c 65 6e 67 74 68 29 2c 52 29 2c 30 29 3b 30 3c 4d 3b 29 71 3d 75 25 38 2c 57 3d 75 3e 3e 33 2c 63 3d 38 2d 28 71 7c 30 29 2c 4b 3d 74 2e 48 5b 57 5d 2c 63 3d 63 3c 4d 3f 63 3a 4d 2c 4a 26 26 28 44 3d 74 2c 79 3d 75 2c 44 2e 59 21 3d 79 3e 3e 36 26 26 28 44 2e 59 3d 79 3e 3e 36 2c 79 3d 67 28 44 2c 38 31 29 2c 44 2e 66 69 3d 73 69 28 44 2e 59 2c 44 2e 53 2c 5b 30 2c 30 2c 79 5b 31 5d 2c 79 5b 32 5d 5d 29 29 2c 4b 5e 3d 74 2e 66 69 5b 57 26 64 5d 29 2c 49 7c 3d 28 4b 3e 3e 38 2d 28 71 7c 30 29 2d 28 63 7c 30 29 26 28 31 3c 3c 63 29 2d 31 29 3c 3c 28 Data Ascii: M,K,u,y,D,R,I){if(R=g(t,365),R>=t.v)throw[e,31];for(I=(u=(d=(M=T,t.a9.length),R),0);0<M;)q=u%8,W=u>>3,c=8-(q\|0),K=t.H[W],c=c<M?c:M,J&&(D=t,y=u,D.Y!=y>>6&&(D.Y=y>>6,y=g(D,81),D.fi=si(D.Y,D.S,[0,0,y[1],y[2]])),K^=t.fi[W&d]),I\|=(K>>8-(q\|0)-(c\|0)&(1<<c)-1)<<(
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 65 28 30 2c 32 30 34 38 29 7d 2c 24 67 3d 66 75 6e 63 74 69 6f 6e 28 4a 2c 54 2c 74 2c 64 2c 57 2c 71 2c 63 29 7b 66 6f 72 28 28 74 2e 7a 48 3d 4d 6d 28 74 2e 57 2c 28 74 2e 61 39 3d 28 74 2e 48 77 3d 65 38 2c 74 5b 74 2e 5a 64 3d 5a 41 2c 56 5d 29 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 29 29 2c 74 29 2e 79 6e 3d 6b 5b 74 2e 57 5d 28 74 2e 7a 48 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 63 3d 30 2c 71 3d 5b 5d 3b 32 38 38 3e 63 3b 63 2b 2b 29 71 5b 63 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 29 3b 6c 28 74 72 75 65 2c 74 2c 28 76 28 74 2c 28 28 76 28 28 50 28 31 32 39 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 2c 44 2c 52 Data Ascii: e(0,2048)},$g=function(J,T,t,d,W,q,c){for((t.zH=Mm(t.W,(t.a9=(t.Hw=e8,t[t.Zd=ZA,V]),{get:function(){return this.concat()}})),t).yn=k[t.W](t.zH,{value:{value:{}}}),c=0,q=[];288>c;c++)q[c]=String.fromCharCode(c);l(true,t,(v(t,((v((P(129,function(M,K,u,y,D,R
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 30 39 2c 28 58 28 28 74 2e 4e 4b 3d 28 58 28 74 2c 34 32 38 2c 28 28 58 28 74 2c 33 36 35 2c 28 74 2e 46 46 3d 28 28 74 2e 4f 3d 76 6f 69 64 20 30 2c 74 2e 4c 3d 5b 5d 2c 74 2e 58 46 3d 64 2c 74 2e 45 43 3d 28 74 2e 66 69 3d 76 6f 69 64 20 30 2c 32 35 29 2c 74 2e 70 69 3d 54 2c 74 2e 42 3d 28 74 2e 68 6b 3d 30 2c 74 2e 44 3d 66 61 6c 73 65 2c 30 29 2c 74 29 2e 5a 3d 28 28 74 2e 6c 4e 3d 30 2c 74 29 2e 68 3d 30 2c 74 2e 54 3d 66 61 6c 73 65 2c 28 74 2e 4a 3d 28 74 2e 53 73 3d 28 28 74 2e 41 3d 5b 5d 2c 74 29 2e 47 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 74 68 69 73 2e 6c 3d 4d 7d 29 2c 76 6f 69 64 20 30 29 2c 28 28 74 2e 46 3d 76 6f 69 64 20 30 2c 74 29 2e 58 3d 66 61 6c 73 65 2c 74 2e 56 3d 5b 5d 2c 74 2e 6f 3d 6e 75 6c 6c 2c 74 29 2e 48 3d 5b 5d 2c Data Ascii: 09,(X((t.NK=(X(t,428,((X(t,365,(t.FF=((t.O=void 0,t.L=[],t.XF=d,t.EC=(t.fi=void 0,25),t.pi=T,t.B=(t.hk=0,t.D=false,0),t).Z=((t.lN=0,t).h=0,t.T=false,(t.J=(t.Ss=((t.A=[],t).G=0,function(M){this.l=M}),void 0),((t.F=void 0,t).X=false,t.V=[],t.o=null,t).H=[],
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 34 29 29 2c 74 29 29 2c 31 31 38 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 53 38 28 4d 2c 34 29 7d 2c 74 29 2c 50 28 32 33 39 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 29 7b 21 4c 28 74 72 75 65 2c 4d 2c 66 61 6c 73 65 2c 4b 29 26 26 28 4b 3d 63 43 28 4d 29 2c 79 3d 4b 2e 57 77 2c 75 3d 4b 2e 56 6e 2c 4d 2e 6c 3d 3d 4d 7c 7c 75 3d 3d 4d 2e 53 73 26 26 79 3d 3d 4d 29 26 26 28 58 28 4d 2c 4b 2e 76 77 2c 75 2e 61 70 70 6c 79 28 79 2c 4b 2e 73 29 29 2c 4d 2e 5a 3d 4d 2e 4b 28 29 29 7d 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 2c 79 2c 44 2c 52 2c 49 2c 45 2c 61 2c 42 2c 59 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 48 28 46 2c 72 29 7b 66 6f 72 28 3b 62 3c 46 3b 29 4b 7c 3d 47 28 4d 29 3c 3c 62 2c 62 2b 3d 38 3b 72 65 74 75 72 6e 20 72 3d 28 Data Ascii: 4)),t)),118),function(M){S8(M,4)},t),P(239,function(M,K,u,y){!L(true,M,false,K)&&(K=cC(M),y=K.Ww,u=K.Vn,M.l==M\|\|u==M.Ss&&y==M)&&(X(M,K.vw,u.apply(y,K.s)),M.Z=M.K())},t),function(M,K,u,y,D,R,I,E,a,B,Y,b){function H(F,r){for(;b<F;)K\|=G(M)<<b,b+=8;return r=(
2024-04-16 17:43:33 UTC	1255	IN	Data Raw: 29 2c 78 29 28 4d 29 2c 4d 29 29 2c 44 3d 67 28 4d 2c 44 29 2c 67 28 4d 2c 79 29 29 2c 67 29 28 4d 2c 75 29 2c 67 28 4d 2e 6c 2c 4b 29 29 2c 30 21 3d 3d 4b 29 26 26 28 44 3d 42 43 28 31 2c 4d 2c 44 2c 79 2c 4b 2c 75 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 2c 44 2c 6e 29 2c 58 28 4d 2c 32 31 39 2c 5b 4b 2c 75 2c 44 5d 29 29 7d 29 2c 74 29 2c 74 29 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 53 38 28 4d 2c 33 29 7d 29 2c 74 29 2c 74 29 29 2c 33 31 29 2c 74 29 2c 4f 28 34 29 29 29 2c 50 29 28 32 38 30 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 44 41 28 31 2c 4d 29 7d 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 4d 2c 4b 2c 75 29 7b 4b 3d 78 28 28 75 3d 78 28 4d 29 2c 4d 29 29 2c 4b 3d 67 28 4d 2c 4b 29 2c 30 21 3d 67 28 4d 2c 75 29 26 26 58 28 Data Ascii: ),x)(M),M)),D=g(M,D),g(M,y)),g)(M,u),g(M.l,K)),0!==K)&&(D=BC(1,M,D,y,K,u),K.addEventListener(u,D,n),X(M,219,[K,u,D]))}),t),t)),function(M){S8(M,3)}),t),t)),31),t),O(4))),P)(280,function(M){DA(1,M)},t),function(M,K,u){K=x((u=x(M),M)),K=g(M,K),0!=g(M,u)&&X(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50135	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:32 UTC	2203	OUT	POST /s/sfsites/aura?r=11&aura.Label.getLabel=4 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1829 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 123225000004a67e20 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:32 UTC	1829	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 34 35 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 4c 61 62 65 6c 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 4c 61 62 65 6c 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 6d 61 72 6b 75 70 25 33 41 25 32 46 25 32 46 7a 6f 6f 6d 69 6e 5f 61 70 70 25 33 41 53 65 61 72 63 68 53 6f 75 72 63 65 49 74 65 6d 4c 61 62 65 6c 43 6f 6d 70 6f 6e 65 6e 74 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 73 65 63 74 69 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22245%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FLabelController%2FACTION%24getLabel%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fzoomin_app%3ASearchSourceItemLabelComponent%22%2C%22params%22%3A%7B%22secti
2024-04-16 17:43:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:33 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:33 GMT Server-Timing: Total;dur=67 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 123225000004a67e20
2024-04-16 17:43:33 UTC	1880	IN	Data Raw: 37 34 63 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 34 35 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 32 34 38 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 41 72 74 69 63 6c 65 73 22 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 32 35 31 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 44 69 73 63 75 73 73 69 6f 6e 73 22 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 32 35 34 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 Data Ascii: 74c{"actions":[{"id":"245;a","state":"SUCCESS","returnValue":"Documentation","error":[]},{"id":"248;a","state":"SUCCESS","returnValue":"Articles","error":[]},{"id":"251;a","state":"SUCCESS","returnValue":"Discussions","error":[]},{"id":"254;a","state":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50137	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	1820	OUT	POST /_ui/networks/tracking/NetworkTrackingServlet HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 183 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/apex/zoomin_app__ZoominGAPage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:33 UTC	183	OUT	Data Raw: 6c 6f 67 4c 69 6e 65 73 3d 25 35 42 25 37 42 25 32 32 6c 6f 67 4e 61 6d 65 25 32 32 25 32 30 3a 25 32 30 25 32 32 6e 65 74 77 6f 72 6b 25 32 32 2c 25 32 30 25 32 32 6c 6f 67 4c 65 76 65 6c 25 32 32 25 32 30 3a 25 32 30 25 32 32 49 4e 46 4f 25 32 32 2c 25 32 30 25 32 32 6c 6f 67 41 74 74 72 73 25 32 32 25 32 30 3a 25 32 30 25 37 42 25 32 32 70 61 67 65 49 64 25 32 32 3a 25 32 30 25 32 32 30 36 36 38 5a 30 30 30 30 30 30 44 62 57 70 25 32 32 2c 25 32 30 25 32 32 76 69 65 77 49 64 25 32 32 3a 25 32 30 25 32 32 25 32 32 25 37 44 25 37 44 25 35 44 Data Ascii: logLines=%5B%7B%22logName%22%20:%20%22network%22,%20%22logLevel%22%20:%20%22INFO%22,%20%22logAttrs%22%20:%20%7B%22pageId%22:%20%220668Z000000DbWp%22,%20%22viewId%22:%20%22%22%7D%7D%5D
2024-04-16 17:43:33 UTC	517	IN	HTTP/1.1 204 No Content Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: application/json; charset=UTF-8 Connection: close Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Strict-Transport-Security: max-age=63072000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; path=/; expires=Wed, 16-Apr-2025 17:43:33 GMT; Max-Age=31536000; secure; SameSite=None Server: sfdcedge X-SFDC-Request-Id: b850a57e4a3812812262e32dc49ceb66

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50138	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	2279	OUT	POST /s/sfsites/aura?r=12&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 855 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 159328900000c3774f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:33 UTC	855	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 35 38 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 2e 72 75 6e 74 69 6d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 69 74 65 66 6f 72 63 65 2e 71 62 2e 51 75 61 72 74 65 72 62 61 63 6b 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 41 6c 6c 6f 77 65 64 50 6f 73 74 4d 65 73 73 61 67 65 4f 72 69 67 69 6e 73 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22258%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.qb.QuarterbackController%2FACTION%24getAllowedPostMessageOrigins%22%2C%22callingDescriptor%22%3
2024-04-16 17:43:33 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:33 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:33 GMT Server-Timing: Total;dur=13 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 159328900000c3774f
2024-04-16 17:43:33 UTC	1411	IN	Data Raw: 35 37 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 35 38 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 5b 22 22 5d 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f 57 44 64 4c 4f 47 74 58 63 54 5a 71 53 57 5a 69 55 31 39 5a 61 44 4a 46 64 7a 6b 34 62 6b 6b 30 62 56 4a 68 5a 47 4a 43 57 45 39 6d 55 43 31 49 5a 58 5a 52 62 6d 63 79 4e 44 67 75 4d 54 Data Ascii: 577{"actions":[{"id":"258;a","state":"SUCCESS","returnValue":[""],"error":[]}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50139	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	1715	OUT	GET /resource/1710974750000/zoomin_app__Zoomin_FP/fp.min.js HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:33 UTC	454	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: application/x-javascript Content-Length: 29942 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable Expires: Fri, 31 May 2024 17:43:33 GMT P3P: CP="CUR OTR STA" Last-Modified: Wed, 20 Mar 2024 22:45:50 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 6185f87441d3b29ac54adedadbbafd34
2024-04-16 17:43:33 UTC	15930	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 20 76 33 2e 31 2e 32 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 31 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 6a 73 2e 63 6f 6d 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 63 6f 6e 74 61 69 6e 73 20 63 6f 64 65 20 66 72 6f 6d 20 6f 70 65 6e 2d 73 6f 75 72 63 65 20 70 72 6f 6a 65 63 74 73 3a 0a 20 2a 20 4d 75 72 6d 75 72 Data Ascii: /** * FingerprintJS v3.1.2 - Copyright (c) FingerprintJS, Inc, 2021 (https://fingerprintjs.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. * * This software contains code from open-source projects: * Murmur
2024-04-16 17:43:33 UTC	14012	IN	Data Raw: 2e 73 61 6c 69 64 7a 69 6e 69 2e 6c 76 2f 22 5d 5b 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 20 31 32 30 70 78 3b 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 22 5d 27 2c 27 61 5b 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 73 61 6c 69 64 7a 69 6e 69 2e 6c 76 2f 22 5d 5b 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 20 38 38 70 78 3b 20 68 65 69 67 68 74 3a 20 33 31 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 22 5d 27 5d 2c 6c 69 73 74 4b 72 3a 5b 27 61 5b 68 72 65 66 2a 3d 22 Data Ascii: .salidzini.lv/"][style="display: block; width: 120px; height: 40px; overflow: hidden; position: relative;"]','a[href="http://www.salidzini.lv/"][style="display: block; width: 88px; height: 31px; overflow: hidden; position: relative;"]'],listKr:['a[href*="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50140	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	1758	OUT	GET /file-asset/DSHoriz_B_support?v=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:43:33 UTC	545	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:33 GMT Content-Type: image/png Content-Length: 27224 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Mon, 27 May 2024 02:22:47 GMT Content-Disposition: attachment; filename="DSHoriz_B_support.png"; filename=utf-8''DSHoriz_B_support.png Access-Control-Allow-Origin: Last-Modified: Thu, 11 Apr 2024 12:12:06 GMT Server: sfdcedge X-SFDC-Request-Id: d1843ba3a0035437b3674f8c19282996
2024-04-16 17:43:33 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 52 00 00 00 f2 08 06 00 00 00 f7 0b 87 f6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 5f 6c 1c 57 7e 2f f8 ef 71 bc bb 48 16 e8 66 72 17 c9 bd 81 38 ec f1 6c 6e 1e 9a 00 39 1e 7b 16 ea 79 60 5b e3 07 f2 22 d7 a2 44 c0 d4 93 d9 34 20 e5 29 22 65 4b 6f 96 d4 92 fd b2 b0 3c 22 75 f7 25 22 60 36 bd 58 40 34 96 22 e5 05 56 7c b0 e5 e6 83 5b d8 8c ed 21 01 12 8b 4c 92 71 d3 14 ee 75 9c 4d 86 dd 8b dc 2c 2e 70 7d f6 a1 4e 4b 2d 9a 7f ba aa ab ea 77 4e d5 f7 03 08 33 99 90 5d 87 c5 ea ea e2 f9 9e df ef 28 ad 35 12 6f 6c 6c 14 c0 a0 f4 30 1c b5 0b 60 dd fc f7 3a 96 96 ea 82 63 21 22 22 22 22 22 22 22 22 22 22 22 22 8a 85 4a 74 90 3a 36 d6 03 60 05 c0 90 Data Ascii: PNGIHDRRpHYs~ IDATx_lW~/qHfr8ln9{y`["D4 )"eKo<"u%"`6X@4"V\|[!LquM,.p}NK-wN3](5oll0`:c!""""""""""""Jt:6`
2024-04-16 17:43:33 UTC	11385	IN	Data Raw: 78 a9 40 ca b5 f3 5b ab ad e1 d1 a3 6d 5f df 93 c9 64 bb aa 48 0d f2 bb b9 ed d8 e2 85 46 73 37 d0 02 00 d7 16 39 b8 ca e5 fd 8c 5d c5 20 95 c8 4d 52 4f e3 43 4a a9 1e a1 63 c7 ad 24 3d 80 2e 49 4c 2c a7 29 3c 93 9a d0 ac 06 f8 1e a9 fb 45 49 e8 b8 b1 51 4a f5 28 a5 a6 4d 85 b2 6d ec de 90 89 f6 b2 77 96 cd 52 66 9f d5 19 13 aa be 04 c0 86 8d 87 d2 1c 76 f1 b3 26 22 e6 d9 3b cd d7 16 11 51 47 fc 06 1b 41 da da 66 b2 fe 9a 03 ec ec f8 0b 77 e2 72 67 71 c1 77 f0 64 93 da c3 35 a7 f6 77 0d 12 4c e6 f3 03 c8 66 64 a6 df 16 3f fc c0 a9 90 e6 dd 1b d7 7c 7f 4f 37 21 2a e0 b5 14 3f 76 cc 5f e3 af 66 b3 e1 d4 5e a9 b7 6f cf a2 d9 6c f8 fa 9e 7c 7e c0 b9 f6 c5 ae b2 f5 f3 25 c9 18 a4 12 39 48 6b bd 0b af 5d a7 84 92 d0 71 63 23 d8 b6 35 4c 55 a1 e3 96 84 8e 1b 1b Data Ascii: x@[m_dHFs79] MROCJc$=.IL,)<EIQJ(MmwRfv&";QGAfwrgqwd5wLfd?\|O7!*?v_f^ol\|~%9Hk]qc#5LU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50142	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	585	OUT	GET /messenger/newrelic/newrelic-agent.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:34 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:34 GMT Content-Type: text/javascript Content-Length: 17278 Connection: close Server: nginx x-amz-id-2: xj1RMVkRbsId2miz5oAnL968vqOEMawdUEkJ0l3njEUob20vp42H0TreBWn+eFtRGlNL+2EKIN0= x-amz-request-id: DVK2DCJQSKTYN68V Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: NzubLuoKu1Bjg1k1MjanL1tB2.dmTRV_ ETag: "bef52ea8bdb8c39fa5bc9bc09918e7ef" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:34 UTC	15850	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 c5 7d 0b 57 db c6 b6 f0 5f 31 3a 5d 2c e9 30 28 98 47 42 e4 aa be 04 48 c2 69 42 28 90 b6 a7 ae 3f 96 6c 0f a0 c4 96 5c 49 e6 51 e3 fb db bf bd f7 3c f5 30 90 9e de 7b b3 5a 23 8d e6 3d 7b f6 7b f6 dc 44 59 8b 27 d1 60 cc 8f f9 ed 29 1f c7 c3 70 65 a3 13 5f ba e5 44 6f 7e 1b 27 a3 f4 d6 3f 3e 3d fc fc f1 e1 c1 b5 5f c3 f9 c2 63 f4 e4 c7 49 5c 84 f3 69 16 df 44 c3 fb 60 3e 4c d3 af 31 cf 2f 44 65 a3 60 a5 bd 60 d1 97 e8 2e 98 8f 78 72 7f 31 8e f3 22 e8 39 83 68 b2 3e e4 e3 b1 9f 64 eb a3 a8 88 fc 84 17 4e 7f b1 60 ae eb 85 3f cc 9d 59 ce 5b 79 91 c5 c3 c2 e9 dc 60 7f 59 c1 92 70 be f3 ea e5 56 e0 d2 0b 66 4b fc 91 5b b0 f9 c9 45 80 a5 2e d9 c7 82 1e ae d9 fe 0e 3d e4 ec e0 03 3d dc b0 4f 27 f4 70 ce c6 6f e9 e1 80 fd 7b 46 0f Data Ascii: }W_1:],0(GBHiB(?l\IQ<0{Z#={{DY'`)pe_Do~'?>=_cI\iD`>L1/De``.xr1"9h>dN`?Y[y`YpVfK[E.==O'po{F
2024-04-16 17:43:34 UTC	1428	IN	Data Raw: c8 e4 af 84 60 b2 0a 54 5a 18 f1 cb 68 36 2e 54 8e fe 62 e1 96 66 04 f5 8f fc 86 67 f7 74 2e 13 83 12 79 1e c5 58 15 00 6f ce d3 55 0e d3 c5 80 93 84 49 95 62 ea 01 5d c7 03 8f 13 10 ea 00 fa 31 72 09 1e 5d 56 00 d2 ba 8e f2 d6 80 f3 a4 35 8a 73 51 c8 75 3c 55 b5 b2 e0 c7 20 1c 79 f2 40 e5 24 ba 6f 0d a3 19 8c 76 96 a0 72 08 b5 d7 b8 5b 72 54 f3 01 17 93 53 6b 22 74 46 0b 43 d0 88 c0 67 65 dc 52 81 05 42 29 c5 23 e7 0f ab 78 4d a8 02 a1 7b e7 14 c7 eb c9 63 97 39 9e ed 14 5a 2b fb bc 77 0d 69 00 cf d0 c2 33 e0 6a 02 63 c2 e8 88 17 04 b6 87 d1 b9 f2 70 b8 50 da 79 ad 75 0a c4 89 22 92 3c 4e 46 c1 9e ec b6 bd f2 d0 79 bf 76 b6 51 c7 0a a3 11 5d 9e e0 51 34 29 e4 48 0d 4b 56 0f f3 db 6b 1a 75 bf 8b 11 7d d9 b7 97 c2 8b 70 6c 6d 4e 75 c6 19 de 46 64 7c 4c 75 Data Ascii: `TZh6.Tbfgt.yXoUIb]1r]V5sQu<U y@$ovr[rTSk"tFCgeRB)#xM{c9Z+wi3jcpPyu"<NFyvQ]Q4)HKVku}plmNuFd\|Lu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50141	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:33 UTC	576	OUT	GET /cxbus/cxbus.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:34 UTC	533	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:34 GMT Content-Type: text/javascript Content-Length: 8098 Connection: close Server: nginx x-amz-id-2: SuCs11BylI3EVVjSBVU3wuJcZRlm1L9WY3pNFqKL+sl2yQ9gqr/Xb+zvH9uTCR4D4S4O9I1YKjc= x-amz-request-id: CAT42PJJQ49KYD9H Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 12 Sep 2023 08:53:11 GMT x-amz-version-id: Gz6x1Dz1QjVdKSyy.XKzzGvf5X5EX9XE ETag: "db8d92de3c253178a1b250bfc17106e6" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:34 UTC	8098	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 cd 3c 6b 73 db 46 92 df f7 57 80 d8 2c 0d 58 63 58 72 92 ad 3d d0 38 9e 2c c9 8e b2 96 a5 b5 e4 8d b3 8c 4a 05 92 43 12 16 09 d0 c0 50 12 57 e4 7f bf ee 9e 27 40 d2 71 b2 a9 ab 53 1c e2 31 ef 9e 7e 77 0f 9e 3f 6d fd c9 7b ea 0d 1e fa 8b 0a 6f fe e7 8e 97 55 56 e4 b1 f7 22 3a 88 0e e8 d5 34 1b f0 bc e2 b1 f7 86 e7 bc 5a 56 de 15 9f f2 41 31 f3 de a6 7d 6c f4 fc 4f ad d1 22 1f 08 68 16 70 26 c2 47 bf e8 7f e2 03 e1 27 89 58 ce 79 31 f2 f8 c3 bc 28 45 d5 6e 6f 94 cc 8a e1 62 ca bb f2 12 a9 7a 89 08 c2 d8 d7 7d da ca 43 3e ca 72 de 6e cb 6b 94 ce 86 5d 79 1b f8 b4 00 9f f5 ae 61 fc 78 d7 f8 5d 75 8d a8 36 8d c2 ed fd 3a b8 cf f2 61 71 cf 02 b3 9a f0 b1 e4 62 51 e6 9e 5d 5f f8 78 97 96 9e 48 1e d7 1d fd d2 cb 83 32 7c cc 46 81 e8 Data Ascii: <ksFW,XcXr=8,JCPW'@qS1~w?m{oUV":4ZVA1}lO"hp&G'Xy1(Enobz}C>rnk]yax]u6:aqbQ]_xH2\|F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50143	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:34 UTC	2296	OUT	POST /s/sfsites/aura?r=13&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 70012 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 17123500000925c0f9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:34 UTC	16384	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 35 39 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 62 65 61 63 6f 6e 2e 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 42 65 61 63 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 73 65 6e 64 44 61 74 61 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22259%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.instrumentation.components.beacon.InstrumentationBeaconController%2FACTION%24sendData%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22
2024-04-16 17:43:34 UTC	16384	OUT	Data Raw: 43 25 32 32 25 33 41 25 35 43 25 32 32 68 74 74 70 25 32 46 31 2e 31 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 73 65 72 76 65 72 54 69 6d 65 25 35 43 25 32 32 25 33 41 31 30 37 25 32 43 25 35 43 25 32 32 78 68 72 44 65 6c 61 79 25 35 43 25 32 32 25 33 41 33 35 25 37 44 25 32 43 25 35 43 25 32 32 64 75 72 61 74 69 6f 6e 25 35 43 25 32 32 25 33 41 38 32 39 25 37 44 25 32 43 25 37 42 25 35 43 25 32 32 74 73 25 35 43 25 32 32 25 33 41 31 31 32 34 31 25 32 43 25 35 43 25 32 32 63 6f 6e 74 65 78 74 25 35 43 25 32 32 25 33 41 25 37 42 25 35 43 25 32 32 61 75 72 61 58 48 52 49 64 25 35 43 25 32 32 25 33 41 38 25 32 43 25 35 43 25 32 32 72 65 71 75 65 73 74 4c 65 6e 67 74 68 25 35 43 25 32 32 25 33 41 31 33 34 34 25 32 43 25 35 43 25 32 32 62 61 63 6b 67 72 6f Data Ascii: C%22%3A%5C%22http%2F1.1%5C%22%2C%5C%22serverTime%5C%22%3A107%2C%5C%22xhrDelay%5C%22%3A35%7D%2C%5C%22duration%5C%22%3A829%7D%2C%7B%5C%22ts%5C%22%3A11241%2C%5C%22context%5C%22%3A%7B%5C%22auraXHRId%5C%22%3A8%2C%5C%22requestLength%5C%22%3A1344%2C%5C%22backgro
2024-04-16 17:43:34 UTC	16384	OUT	Data Raw: 66 6f 72 63 65 43 6f 6d 6d 75 6e 69 74 79 2e 6e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 2e 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 44 61 74 61 50 72 6f 76 69 64 65 72 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 73 74 61 74 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 53 55 43 43 45 53 53 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 63 61 63 68 65 25 35 43 25 32 32 25 33 41 66 61 6c 73 65 25 37 44 25 32 43 25 35 43 25 32 32 70 61 72 61 6d 73 25 35 43 25 32 32 25 33 41 25 37 42 25 35 43 25 32 32 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 53 65 74 49 64 4f 72 4e 61 6d 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 52 53 43 5f 55 73 65 72 Data Ascii: forceCommunity.navigationMenu.NavigationMenuDataProviderController%2FACTION%24getNavigationMenu%5C%22%2C%5C%22state%5C%22%3A%5C%22SUCCESS%5C%22%2C%5C%22cache%5C%22%3Afalse%7D%2C%5C%22params%5C%22%3A%7B%5C%22navigationLinkSetIdOrName%5C%22%3A%5C%22RSC_User
2024-04-16 17:43:34 UTC	16384	OUT	Data Raw: 25 32 32 66 6f 72 63 65 25 33 41 6c 64 73 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 66 6f 72 63 65 25 33 41 6c 64 73 4e 65 74 77 6f 72 6b 46 65 74 63 68 57 69 74 68 4a 77 74 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 66 6f 72 63 65 25 33 41 6d 65 73 73 61 67 65 53 65 72 76 69 63 65 55 74 69 6c 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 33 41 63 6f 6d 70 6f 6e 65 6e 74 50 72 6f 66 69 6c 65 72 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 33 41 64 61 74 61 43 6f 6d 70 6c 65 78 69 74 79 43 6f 6c 6c 65 63 74 6f 72 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 25 33 41 Data Ascii: %22force%3AldsInstrumentation%5C%22%2C%5C%22force%3AldsNetworkFetchWithJwt%5C%22%2C%5C%22force%3AmessageServiceUtils%5C%22%2C%5C%22instrumentation%3AcomponentProfiler%5C%22%2C%5C%22instrumentation%3AdataComplexityCollector%5C%22%2C%5C%22instrumentation%3A
2024-04-16 17:43:34 UTC	4476	OUT	Data Raw: 5a 32 56 51 59 58 6c 73 62 32 46 6b 45 6b 67 49 41 43 4a 45 61 48 52 30 63 48 4d 36 4c 79 39 7a 64 58 42 77 62 33 4a 30 4c 6d 52 76 59 33 56 7a 61 57 64 75 4c 6d 4e 76 62 53 39 7a 4c 32 4e 76 62 6e 52 68 59 33 52 54 64 58 42 77 62 33 4a 30 50 32 78 68 62 6d 64 31 59 57 64 6c 50 57 56 75 58 31 56 54 4a 6e 4a 7a 59 31 38 7a 4d 44 46 43 46 6e 4e 70 64 47 56 6d 62 33 4a 6a 5a 54 70 6a 62 32 31 74 64 57 35 70 64 48 6c 42 63 48 42 4b 41 6a 52 6e 55 68 55 4b 45 58 4e 6d 4c 6d 78 6c 65 43 35 42 63 48 42 51 59 58 6c 73 62 32 46 6b 45 67 42 59 41 57 49 51 5a 6a 67 32 5a 6d 4d 34 4d 54 59 33 5a 6a 67 35 5a 54 4e 69 59 78 4b 42 41 67 6b 7a 79 35 30 61 67 4f 35 34 51 68 49 58 43 67 4e 44 54 46 4d 52 51 63 75 25 32 46 54 50 59 72 73 54 38 5a 51 63 75 25 32 46 54 50 59 Data Ascii: Z2VQYXlsb2FkEkgIACJEaHR0cHM6Ly9zdXBwb3J0LmRvY3VzaWduLmNvbS9zL2NvbnRhY3RTdXBwb3J0P2xhbmd1YWdlPWVuX1VTJnJzY18zMDFCFnNpdGVmb3JjZTpjb21tdW5pdHlBcHBKAjRnUhUKEXNmLmxleC5BcHBQYXlsb2FkEgBYAWIQZjg2ZmM4MTY3Zjg5ZTNiYxKBAgkzy50agO54QhIXCgNDTFMRQcu%2FTPYrsT8ZQcu%2FTPY
2024-04-16 17:43:35 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:34 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:34 GMT Server-Timing: Total;dur=340 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 17123500000925c0f9
2024-04-16 17:43:35 UTC	1951	IN	Data Raw: 37 39 33 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 35 39 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 52 65 73 75 6c 74 20 3a 20 20 28 20 52 45 43 45 49 56 45 44 20 3d 20 31 33 20 2c 20 53 55 43 43 45 53 53 20 2d 3e 20 55 45 20 3d 20 31 20 2c 20 53 55 43 43 45 53 53 20 2d 3e 20 4c 4f 47 20 3d 20 31 33 20 2c 20 54 6f 70 69 63 20 3d 20 41 49 4c 54 4e 20 29 20 20 2c 20 54 72 61 63 69 6e 67 52 65 73 70 6f 6e 73 65 20 3a 20 28 20 41 73 79 6e 63 52 65 73 75 6c 74 73 20 29 20 2c 20 54 65 6c 65 6d 65 74 72 79 52 65 73 70 6f 6e 73 65 20 3a 20 28 20 41 73 79 6e 63 52 65 73 75 6c 74 73 20 29 4f 31 31 79 49 6e 73 74 72 75 6d 65 6e Data Ascii: 793{"actions":[{"id":"259;a","state":"SUCCESS","returnValue":{"InstrumentationResult : ( RECEIVED = 13 , SUCCESS -> UE = 1 , SUCCESS -> LOG = 13 , Topic = AILTN ) , TracingResponse : ( AsyncResults ) , TelemetryResponse : ( AsyncResults )O11yInstrumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50144	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:34 UTC	2329	OUT	POST /s/sfsites/aura?r=14&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 8dc20acb-bf4c-4de1-b38b-05b55c393549 X-SFDC-Request-Id: 17261390000faa732b User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: d5b14152447ba219 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:34 UTC	1015	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 36 31 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 2e 72 75 6e 74 69 6d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 69 74 65 66 6f 72 63 65 2e 6e 65 74 77 6f 72 6b 2e 74 72 61 63 6b 69 6e 67 2e 4e 65 74 77 6f 72 6b 54 72 61 63 6b 69 6e 67 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 63 72 65 61 74 65 4c 6f 67 52 65 63 6f 72 64 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22261%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.network.tracking.NetworkTrackingController%2FACTION%24createLogRecord%22%2C%22callingDescriptor
2024-04-16 17:43:35 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:34 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:34 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:34 GMT Server-Timing: Total;dur=57 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 17261390000faa732b
2024-04-16 17:43:35 UTC	1411	IN	Data Raw: 35 37 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 36 31 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f 57 44 64 4c 4f 47 74 58 63 54 5a 71 53 57 5a 69 55 31 39 5a 61 44 4a 46 64 7a 6b 34 62 6b 6b 30 62 56 4a 68 5a 47 4a 43 57 45 39 6d 55 43 31 49 5a 58 5a 52 62 6d 63 79 4e 44 67 75 4d 54 Data Ascii: 577{"actions":[{"id":"261;a","state":"SUCCESS","returnValue":true,"error":[]}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50145	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:34 UTC	1344	OUT	POST /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/beacons?data=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%3D&type=pageview HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:34 UTC	853	IN	HTTP/1.1 204 No Content Connection: close Date: Tue, 16 Apr 2024 17:43:34 GMT ININ-Correlation-Id: 612df921-f219-45b3-9649-5e691a0c9ded Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: https://support.docusign.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 57e6ef65d699199d9881c4002445b1b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: D2T1TFRrpEte6m_bXzusQzxjAoWu1Jou5bCuELnSY00KPmUbdtD-NQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50146	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:34 UTC	1774	OUT	GET /img/s.gif HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:35 UTC	389	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Fri, 09 Aug 2024 23:43:34 GMT Last-Modified: Wed, 25 Jan 2006 02:03:00 GMT Server: sfdcedge X-SFDC-Request-Id: 0e1b2478d66bb8f726b1fac1282b136b
2024-04-16 17:43:35 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50152	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: XqukjGxMCFdiuIp3irDBGg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:43:35 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50154	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289414000&PageStart=1713289396931&PrevBundleTime=1713289411710&LastActivity=3581&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 783 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	783	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 96 5d 6f d3 30 14 86 ff 4a f0 45 05 92 93 fa 3b 76 47 41 5b a9 00 6d b0 8a 6e 9a 10 da 45 3e dc d6 5a 9a 74 71 da d2 21 fe 3b 4e d9 da 66 2b 03 71 01 12 c4 71 95 1c bf 3e 3e 3e 8f ed f4 0b 18 ea 6b d0 09 21 b8 98 e8 1c 74 14 46 ee b9 bf a8 2c e8 7c fa 02 8e 4d 9e 82 0e 77 a6 c3 72 5c 9b 08 04 93 aa 9a d9 4e bb 5d da 60 34 cf 32 5b 15 e5 2a 48 8a 69 bb d4 49 3b 9e e7 69 a6 db 0b f2 f2 b4 1c bf 4d bb 98 1c 0d 58 bf 75 6e 75 e9 de 74 1c e1 44 84 cc 8f 14 e2 3e 63 32 f1 e3 08 31 9f c7 2c 16 18 2b 4c 15 6f 0d b5 b5 a6 c8 9d 1c a5 5a 4a c6 46 3e 12 34 74 72 12 fb 52 85 a1 9f 52 4a c9 08 31 8d 48 d4 1a 44 63 5d 0f 94 2a a2 08 55 3e 47 a3 da 35 65 7e ac 62 e2 73 aa 22 3e 0a 15 93 69 e8 5c 5f 77 49 ab 97 19 9d 57 67 66 aa bb 38 c4 Data Ascii: ]o0JE;vGA[mnE>Ztq!;Nf+qq>>>k!tF,\|Mwr\N]`42[HiI;iMXunutD>c21,+LoZJF>4trRRJ1HDc]U>G5e~bs">i\_wIWgf8
2024-04-16 17:43:35 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:35 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 35 31 31 32 7d 0a Data Ascii: {"BundleTime":1713289415112}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50157	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1847	OUT	GET /s/sfsites/aura?r=12&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:35 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: b72fc509acf6ae3a1e9ed97b14a069e9
2024-04-16 17:43:35 UTC	1737	IN	Data Raw: 36 62 64 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 6bd<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50155	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1522	OUT	GET /file-asset/DSHoriz_B_support?v=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:35 UTC	545	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: image/png Content-Length: 27224 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 P3P: CP="CUR OTR STA" Expires: Sun, 26 May 2024 23:44:04 GMT Content-Disposition: attachment; filename="DSHoriz_B_support.png"; filename=utf-8''DSHoriz_B_support.png Access-Control-Allow-Origin: Last-Modified: Thu, 11 Apr 2024 12:12:06 GMT Server: sfdcedge X-SFDC-Request-Id: 7aa9c0ca2e88325a92f17455c14f89d9
2024-04-16 17:43:35 UTC	15839	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 52 00 00 00 f2 08 06 00 00 00 f7 0b 87 f6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec dd 5f 6c 1c 57 7e 2f f8 ef 71 bc bb 48 16 e8 66 72 17 c9 bd 81 38 ec f1 6c 6e 1e 9a 00 39 1e 7b 16 ea 79 60 5b e3 07 f2 22 d7 a2 44 c0 d4 93 d9 34 20 e5 29 22 65 4b 6f 96 d4 92 fd b2 b0 3c 22 75 f7 25 22 60 36 bd 58 40 34 96 22 e5 05 56 7c b0 e5 e6 83 5b d8 8c ed 21 01 12 8b 4c 92 71 d3 14 ee 75 9c 4d 86 dd 8b dc 2c 2e 70 7d f6 a1 4e 4b 2d 9a 7f ba aa ab ea 77 4e d5 f7 03 08 33 99 90 5d 87 c5 ea ea e2 f9 9e df ef 28 ad 35 12 6f 6c 6c 14 c0 a0 f4 30 1c b5 0b 60 dd fc f7 3a 96 96 ea 82 63 21 22 22 22 22 22 22 22 22 22 22 22 22 8a 85 4a 74 90 3a 36 d6 03 60 05 c0 90 Data Ascii: PNGIHDRRpHYs~ IDATx_lW~/qHfr8ln9{y`["D4 )"eKo<"u%"`6X@4"V\|[!LquM,.p}NK-wN3](5oll0`:c!""""""""""""Jt:6`
2024-04-16 17:43:35 UTC	11385	IN	Data Raw: 78 a9 40 ca b5 f3 5b ab ad e1 d1 a3 6d 5f df 93 c9 64 bb aa 48 0d f2 bb b9 ed d8 e2 85 46 73 37 d0 02 00 d7 16 39 b8 ca e5 fd 8c 5d c5 20 95 c8 4d 52 4f e3 43 4a a9 1e a1 63 c7 ad 24 3d 80 2e 49 4c 2c a7 29 3c 93 9a d0 ac 06 f8 1e a9 fb 45 49 e8 b8 b1 51 4a f5 28 a5 a6 4d 85 b2 6d ec de 90 89 f6 b2 77 96 cd 52 66 9f d5 19 13 aa be 04 c0 86 8d 87 d2 1c 76 f1 b3 26 22 e6 d9 3b cd d7 16 11 51 47 fc 06 1b 41 da da 66 b2 fe 9a 03 ec ec f8 0b 77 e2 72 67 71 c1 77 f0 64 93 da c3 35 a7 f6 77 0d 12 4c e6 f3 03 c8 66 64 a6 df 16 3f fc c0 a9 90 e6 dd 1b d7 7c 7f 4f 37 21 2a e0 b5 14 3f 76 cc 5f e3 af 66 b3 e1 d4 5e a9 b7 6f cf a2 d9 6c f8 fa 9e 7c 7e c0 b9 f6 c5 ae b2 f5 f3 25 c9 18 a4 12 39 48 6b bd 0b af 5d a7 84 92 d0 71 63 23 d8 b6 35 4c 55 a1 e3 96 84 8e 1b 1b Data Ascii: x@[m_dHFs79] MROCJc$=.IL,)<EIQJ(MmwRfv&";QGAfwrgqwd5wLfd?\|O7!*?v_f^ol\|~%9Hk]qc#5LU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50156	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1770	OUT	GET /s/sfsites/aura?r=11&aura.Label.getLabel=4 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:35 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 2854003c47d3b99927ccf88960dbec30
2024-04-16 17:43:35 UTC	1506	IN	Data Raw: 35 64 36 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 5d6<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50148	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	594	OUT	GET /messenger/messagingMiddleware.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	533	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/javascript Content-Length: 3702 Connection: close Server: nginx x-amz-id-2: kpLn9bK/yfmscayzkifrXfKTIHQDDWRu1qXSxzaaoF1gqk0WN3+anlxcIeAFaS4G6oG/kltzmf4= x-amz-request-id: DVKFRGE3GTFPHPD6 Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 82d3Gc.Qzs5.mCvabKm1QvqiKFWbLulV ETag: "020a1227b513dcb833482e5f322a09b1" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:35 UTC	3702	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 cd 5b 6d 6f da c8 16 fe 7e 7f 05 41 2b 64 56 5e b6 ad ae ae 56 46 de 5e 02 26 b0 e5 ad d8 24 cd 56 55 e4 c0 40 dc 1a 9b da 43 12 96 f0 df ef bc 78 cc cc 78 c6 ce ae 56 da 2b 55 65 c2 3c e7 9c 67 ce 9c 79 3f fc fc e3 c5 bf 6a 3f d6 b6 20 4d 41 b4 01 09 fe e3 bf 8f 20 49 83 38 b2 6a ef 5a bf b4 de 92 af c2 60 09 a2 14 58 b5 2b 10 81 f4 90 d6 3c 10 82 65 bc ad 8d fc fb 14 21 7e fe d7 c5 7a 1f 2d 21 12 33 80 09 9b c7 7a 7c ff 15 2c 61 dd b6 e1 61 07 e2 75 0d 3c ef e2 04 a6 8d 46 a1 66 1b af f6 21 78 4f 3f 5a 19 ce 86 46 d3 aa 33 9d 67 f0 0a ac 83 08 34 1a f4 b3 e5 6f 57 ef 69 d1 f8 fc 05 d9 b5 74 76 df 67 9f 2d dc 54 7f 13 44 9b 71 b0 5a 85 e0 c9 4f 00 b1 05 74 35 27 e3 29 88 56 f1 93 69 e4 2d 6c 1e 13 00 f7 49 54 3b b7 b9 79 7c Data Ascii: [mo~A+dV^VF^&$VU@CxxV+Ue<gy?j? MA I8jZ`X+<e!~z-!3z\|,aau<Ff!xO?ZF3g4oWitvg-TDqZOt5')Vi-lIT;y\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50149	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	589	OUT	GET /messenger/defaultVendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	535	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/javascript Content-Length: 136387 Connection: close Server: nginx x-amz-id-2: FNrgWXyugiJSaribL1HbfKIcT0a1NvFMujVI+dUDXtbLRogT7x9jFuvuWi0GErOmIB9tjS/G1aE= x-amz-request-id: DVK12NG6PQ0SFPR2 Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: W1TMtBBx4kZ_cpFkD5SoYEiYHCTzxLbY ETag: "10f8d6d1314d8f24ce392dcfaabc242f" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:35 UTC	15849	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd 6b 63 db 36 d2 28 fc fd fc 0a 5b 9b 75 c5 04 56 24 df 4d 2f d7 eb dc 9a 34 49 9d c4 6e d2 d6 d5 89 29 12 92 e8 50 a4 42 52 8e 1d 59 ff fd 9d c1 8d 00 6f 92 db 9e f3 ec 79 f7 12 8b e4 0c 30 03 0c 06 33 83 01 f0 f8 e1 fa ff 5a 7b b8 36 a1 69 4a a3 11 4d f0 e1 3f d7 34 49 83 38 b2 d7 b6 3a 07 9d 1e 7b 15 06 1e 8d 52 6a af fd 48 23 9a de a6 6b e7 34 a4 5e 3c 59 7b e3 0e 52 80 78 fc bf da ed d6 2c f2 e9 30 88 a8 df 5a 77 b2 db 29 8d 87 6b 29 0d 87 c7 f8 8f 9d 8d 83 d4 ea 7c a3 83 a9 eb 7d f9 29 8d a3 e9 e7 b7 b2 56 e7 2f e0 de dd 5d f4 ad ce 74 96 8e db 17 17 dd 3e b9 20 f0 9f e1 2c f2 32 60 a1 4d 49 46 12 6b de 9a a5 74 2d cd 92 c0 cb 5a 47 49 c7 6f 67 a4 35 68 91 b6 82 b3 e6 09 cd 66 49 b4 e6 2e 2c 8b 08 08 af 12 22 00 88 Data Ascii: kc6([uV$M/4In)PBRYoy03Z{6iJM?4I8:{RjH#k4^<Y{Rx,0Zw)k)\|})V/]t> ,2`MIFkt-ZGIog5hfI.,"
2024-04-16 17:43:35 UTC	16379	IN	Data Raw: 75 12 96 bc 94 96 e7 66 f7 20 0e 1f ce 27 30 2a aa e7 8a 32 5d 39 46 e3 8c 51 49 61 8e bb 7c de a8 a3 b5 1a fc 59 1d a1 8d da e1 53 03 95 cb f5 c3 a7 32 89 e2 46 e8 4a f0 97 15 7d cc c1 9b 48 fc 58 49 a2 40 5c 4a e2 c7 32 89 2f 41 01 d6 c4 f5 7e cf 0a f4 71 d8 26 f2 7e cc ca c4 71 ac a5 b4 fd 52 1c 19 ec 32 98 6a 87 b7 dc 74 0c b8 d1 bb ae 6c 38 86 b6 94 b4 f7 85 66 1b 53 ef cb a0 66 12 1b eb 21 02 4f 40 36 11 36 2b ae 1a 0a 9c a5 54 85 89 41 53 50 ad e0 ae 13 b3 ad 00 ae 89 9a 51 52 6a 26 c0 58 4a 0b a0 19 2d 14 24 de 2c c4 3b fc e2 51 52 b7 9a 73 5a a0 ac 80 d3 38 8d 97 a9 2c 60 2f a5 f8 aa 40 31 1e 1e 76 f2 cd bd c5 24 6c 1a d5 8c 88 5b b3 de a7 71 18 ba d3 9a e9 f6 ab ce 9b 00 6c 54 3e c5 c5 63 8e b2 94 91 67 06 41 2a e9 be ca 2b 2f 34 b8 04 6e a2 ea Data Ascii: uf '02]9FQIa\|YS2FJ}HXI@\J2/A~q&~qR2jtl8fSf!O@66+TASPQRj&XJ-$,;QRsZ8,`/@1v$l[qlT>cgA+/4n
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: 31 b3 2e 2f 33 29 79 bc 8e fd 0b 35 a1 f9 72 d7 44 77 75 38 c8 c0 60 23 6d 03 4b 3e 98 b2 43 31 96 61 34 32 46 9d d1 cf ce 18 fe d0 b3 a7 99 06 75 13 b0 9f 18 9b 96 b1 99 b5 5d 18 a0 09 51 43 0e 4c a0 40 d9 a4 da 2f 73 b6 7a 4a a5 7d 60 54 b3 7f d8 a5 bf 4b 8c 4b 56 c9 db aa 26 32 b7 89 44 34 51 eb 96 ab f1 7f 33 42 44 a7 04 52 f6 8b c9 b8 a9 ac b2 ab 63 67 05 ec 24 e1 8c e9 8c c3 cc 89 1b 65 e3 e4 f2 f2 a4 1c 65 e3 e4 ca 28 1b 0d 0e bd c7 12 f1 a7 86 6d b0 c1 5d 9c 54 c5 ca 38 5f 89 23 3b ae 32 2b 9b 49 26 66 61 1a 7b 3b 0e 0e 01 1b 03 c4 8f dc 34 90 07 57 b1 24 76 70 fa d3 6a 5e c4 0d 4d 0f e8 d9 60 1b a4 63 42 e2 98 38 62 a9 11 fb 92 34 9a 5d 19 cd df a4 e1 15 f4 8d fa 61 f8 23 49 6c e3 25 fa 6a aa 40 27 2f 0c 7a 26 50 3f 15 d4 ab a5 90 f6 9f 37 85 b4 Data Ascii: 1./3)y5rDwu8`#mK>C1a42Fu]QCL@/szJ}`TKKV&2D4Q3BDRcg$ee(m]T8_#;2+I&fa{;4W$vpj^M`cB8b4]a#Il%j@'/z&P?7
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: d3 de 4f 43 14 63 7c 20 a4 68 ac 36 1a ea 86 fc 16 fa c6 b7 46 9f 3c 69 e1 0b ab da 6e 23 9f 2a f6 35 cc fd 8b e3 34 8b bf e1 c4 a6 7d 49 aa 48 b9 4b 7a 2a ba 38 fa cf 4f 80 03 a6 51 30 e7 1f b8 14 aa be 00 17 a9 9b 58 cf 22 20 f3 40 d8 ed b6 b8 ee 6b a5 c6 24 df 60 37 20 0c 5c aa 5a 10 56 b7 ba 89 25 cb 73 54 69 47 a4 d5 9a e6 1a 71 e3 12 c8 33 ab cc fc a7 20 0f 74 a6 b9 df 42 7d c6 a1 88 24 27 62 f1 ef 1d 1c 5c 5e b6 64 fd d6 2d e3 7d 37 5f cc e7 00 92 f9 e5 a5 f9 ab d3 2a 10 2d ad 73 fb 0a b4 26 44 f3 0d e0 e3 a6 b9 58 f3 49 8e 06 f2 5a b3 24 68 21 1d 0f 11 68 5e 7f 05 fe 6a 7c 5e 0a 95 61 44 ff 56 d9 8e 04 3b 76 70 8a e6 c2 4e c0 0c 33 58 86 f8 49 27 50 98 4b 22 4f 95 2b f3 47 a0 50 8d 46 90 7b e9 6c 16 17 9c 93 83 7d 87 71 04 32 f5 26 5a 4e 88 14 9c Data Ascii: OCc\| h6F<in#54}IHKz8OQ0X" @k$`7 \ZV%sTiGq3 tB}$'b\^d-}7_*-s&DXIZ$h!h^j\|^aDV;vpN3XI'PK"O+GPF{l}q2&ZN
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: 13 e3 7c 62 8d 93 5c 62 4e d6 d7 7b cf b8 bf a4 5e 30 1c 55 26 4f 63 a7 da 58 3a 7a dc e5 f6 c8 65 0a 90 5f 4b 46 7d 85 e3 ba 2a 18 97 7b 80 5f 0f 0a e6 04 47 3d 5b 6d 7f 2a 2f bc 75 96 1e 9d 63 ce 42 de e8 d3 a3 e5 a1 7c cc d1 aa 94 85 23 fd 8e 63 f9 5e b0 51 dd 0f f8 f5 43 c1 26 d7 e1 53 15 11 7b b8 94 07 03 40 32 9c 08 a7 cc 82 98 dd f7 d9 8f 02 66 cc cc ad e8 da 44 52 97 68 47 d6 e3 f7 b6 a4 f0 26 c1 32 7f fb 20 14 b3 e8 45 3d 08 e3 0f e9 6d 62 1c 4c 66 08 1e 39 b9 8b 74 5f e0 7f 00 90 27 42 0a 02 7c d5 c4 f2 6f 88 23 f6 79 aa 19 f8 a8 00 6d d8 be 2a 8e c9 e4 2d 15 77 a3 10 b1 d0 ba be 48 75 88 12 3f 58 68 64 25 04 14 4e 8c 42 8b d1 92 f1 76 14 f1 e1 b3 f2 31 4d 9c 72 b7 bd 14 73 b1 97 36 77 f0 65 96 66 85 cd 65 bd 1f 43 9c b6 f8 d3 06 10 dc 81 fc 8a Data Ascii: \|b\bN{^0U&OcX:ze_KF}{_G=[m/ucB\|#c^QC&S{@2fDRhG&2 E=mbLf9t_'B\|o#ym*-wHu?Xhd%NBv1Mrs6wefeC
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 00 0f c7 84 fa d0 83 7b 95 96 ae 39 d7 61 38 39 42 d0 36 ce 85 0e c6 89 6c 22 fe 26 98 05 34 d2 22 08 f0 7e 35 c8 da 24 c1 3d cd b4 49 3a c2 a0 d7 5f 13 02 7c 4d da 17 45 d5 90 00 57 d1 d2 88 03 3c 3e 0a 84 5b 5b 94 75 b8 30 5e 60 3e 8a c0 d5 08 b4 5c e5 49 55 0a dc 9d 07 81 e4 d8 90 1c bf 28 65 6b 89 b2 7b 92 ed 7a 20 f1 64 7f 80 b0 81 12 83 92 3c 21 6f ac 21 9b 20 d6 48 f1 80 e9 69 59 80 44 71 29 32 21 1a 85 e8 c4 7a 3d 75 97 e0 50 e3 36 8a 58 9f 4d d9 84 0d 59 57 2c fd 63 cb 51 34 d7 2a 01 5b 80 08 05 b9 0d e2 5d f9 37 cc da 22 de 3d 2b da 22 1c 47 5a 99 19 9d 1a 6e 8c b7 fa 77 ec 1d 10 04 9d bd 51 bc 6b 4c cc ee 15 ef c4 c0 32 30 b7 8b 77 64 be 30 77 8c f7 c4 78 c3 37 8d 77 66 82 24 18 fb c6 7b 63 bc d0 5b c7 7b 87 c9 e6 ee f1 0e 31 c5 d8 40 de 3e 26 Data Ascii: {9a89B6l"&4"~5$=I:_\|MEW<>[[u0^`>\IU(ek{z d<!o! HiYDq)2!z=uP6XMYW,cQ4*[]7"=+"GZnwQkL20wd0wx7wf${c[{1@>&
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 0b bd 33 55 22 aa bd dc b5 76 ef 90 94 e4 d8 c2 d0 68 4d b9 fc 33 77 ff 0f 43 3e 4f b6 1a eb b0 da 8f a1 a5 47 38 44 f8 ad 2b e0 17 92 d0 6e 37 1e b9 aa 42 58 3c 28 c3 78 89 e6 23 15 b7 09 15 78 26 18 8a 1e e6 df c9 c4 18 cd bc 0a aa 86 41 15 56 0e d8 e6 df 49 57 73 c8 7e bf 28 40 38 a0 ec 91 d0 e7 44 a1 84 87 b0 d4 3d 2f 9b 7f 87 76 fc 56 2e df c1 22 10 59 5f 42 d5 ec 37 76 c7 fe ae 54 40 a3 d0 cf f9 92 3f 2c 23 3b 05 b4 a5 98 b0 cc a1 2a 59 92 52 4c 4f 8a 88 09 e3 b0 3a de 87 0c 49 b1 e9 09 f4 75 1c 9a 76 ef 44 28 12 f9 f1 92 b8 d5 6b a8 10 28 97 25 54 4f ce 30 7d ca 63 50 77 64 0c ea 11 62 30 8a 0b e2 7b 2d 0a 80 6b 63 5f a7 4a 9d 1a 81 37 d1 7c b0 16 5e 55 34 0a da 95 d8 e8 92 85 22 f9 82 7a f2 9d f5 3a 5c a5 7f e3 a9 82 ce 59 6e 0d 41 c8 64 11 e2 35 Data Ascii: 3U"vhM3wC>OG8D+n7BX<(x#x&AVIWs~(@8D=/vV."Y_B7vT@?,#;*YRLO:IuvD(k(%TO0}cPwdb0{-kc_J7\|^U4"z:\YnAd5
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 76 e2 10 07 55 95 a7 0e 29 27 11 11 fa cc b5 ef 63 f9 c9 23 ce 3f 24 d4 ab 7c f0 bb 3e f4 34 ce a1 65 fe 68 96 79 15 92 81 67 4b 94 fd b7 7c fe 6f 2c 7d 2f c2 20 cf b0 d7 6a f6 45 2e 03 c8 18 17 49 bb 67 84 ca ab 92 e7 1a e5 5b 6b e0 c7 73 a8 6f 11 5a f2 a2 21 17 e0 83 72 b8 29 bb ec 31 a7 48 9f 98 84 98 81 9d ee 04 f8 e9 b0 53 c4 80 6f 9c 57 38 42 d8 b6 9c 34 e9 eb d7 2a 2e 08 7f cb 59 8e f5 9a 3f 5a 12 b3 7a 64 85 d1 a8 b1 94 90 8e 2c 31 d8 71 62 34 12 c8 c0 1e 2c 69 4c 6b 50 66 98 49 99 19 91 43 0d a8 61 2b be 47 5d 04 f8 90 24 9a 96 f1 52 34 65 10 2b 1e b6 63 1c cb 50 0d 07 59 7a a6 c6 17 91 e5 df 4d 78 e9 a9 5f c0 06 82 66 8f 85 00 0c 92 fb 36 09 49 90 ae 68 bf 23 31 6a 52 be 9b b0 7a bd ee b8 17 e8 c7 91 fa 3e 8a bf c1 5c 41 56 e4 86 16 83 72 93 13 Data Ascii: vU)'c#?$\|>4ehygK\|o,}/ jE.Ig[ksoZ!r)1HSoW8B4*.Y?Zzd,1qb4,iLkPfICa+G]$R4e+cPYzMx_f6Ih#1jRz>\AVr
2024-04-16 17:43:36 UTC	5855	IN	Data Raw: af c5 a6 6c cc 2e 71 df 22 2a 7f 42 26 a8 42 72 31 d8 85 66 1d 1e 16 d0 6f 82 44 28 e3 54 1e a5 6d c8 4c 59 7e 92 b1 cd 38 b3 05 7e e1 5f a6 96 e5 4b 90 8f 4a 55 a5 b7 3c 21 95 e0 80 14 ef cd 12 46 38 ed b5 f3 2e c8 c3 c3 b0 37 f4 fb 14 69 0e f1 23 12 9b 17 da 9c de ab 7c 7e ac 81 ac 63 a4 e3 0c e3 85 b2 4b 55 21 22 a9 a4 17 b0 af 0e 44 cc c4 ef 68 69 37 ab a5 a4 fb a1 f8 3a 3f 62 a6 8a aa d2 96 dc 75 90 62 b4 b2 29 70 ab d1 f2 7f 2a 95 a7 6d 73 23 32 86 8d 88 11 15 26 2d a0 8c 34 2d e5 91 5e ce 5f 58 fe 4e 5a ff a2 a5 f7 b3 f0 1c e5 f4 c7 c7 4a 24 5d f2 1f 4c 13 af 79 11 d7 93 b8 38 32 6c 15 c3 88 58 15 1e 06 ab 62 46 2a a7 4b 1c de 3f a1 27 f2 c6 91 cd c0 d8 89 72 fa f0 93 6e 09 be 74 4b 88 a4 b6 6b a1 cd eb 83 0a ff 10 a8 28 12 5d 15 45 62 e6 55 85 c1 Data Ascii: l.q"B&Br1foD(TmLY~8~_KJU<!F8.7i#\|~cKU!"Dhi7:?bub)pms#2&-4-^_XNZJ$]Ly82lXbF*K?'rntKk(]EbU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50151	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	582	OUT	GET /messenger/vendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/javascript Content-Length: 49904 Connection: close Server: nginx x-amz-id-2: Uk2C0CSjjMGU3E8yavWiu3gY4XDQdK+7qDcE5xZewRS0p1jQKgr9cx7Fec6vwyocBuWSQK8hxf0= x-amz-request-id: YNVAZZNNGJ7EJW9V Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: illAxlFITPjW5xShztSlJcO1d8iuDa3E ETag: "d3b727da8b0bbff49f1983a706c13dc9" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:35 UTC	15845	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ec bd fb 57 db c8 b2 28 fc fb f9 2b 8c 4e 2e 57 da 08 63 43 92 49 ec 68 7c 08 8f 09 13 5e 03 64 32 19 c2 61 c9 76 db d6 20 4b 8e 24 03 0e f8 fc ed b7 1e fd 92 6c 98 ec bd ef 5a df b7 be f5 65 11 ab df cf ea ea ea ea aa ea 8d 7f ac fc 47 ed 1f b5 b1 c8 73 91 0c 45 86 9e ff ba 15 59 1e a5 49 ab b6 59 7f 53 6f 52 50 1c f5 44 92 8b 56 ed 17 91 88 7c 96 d7 2e 44 2c 7a e9 b8 76 18 76 73 48 b1 f1 1f ae eb 4c 93 be 18 44 89 e8 3b 2b 41 31 9b 88 74 50 cb 45 3c e8 e0 4f ab 18 45 b9 57 bf 13 dd 49 d8 bb f9 35 4f 93 c9 f5 91 aa 35 f8 37 f2 3e 3e 5e 5e 79 f5 c9 34 1f b9 97 97 cd 2b ff a1 d1 1a 4c 93 5e 01 1d 70 85 5f f8 89 f7 e0 4c 73 51 cb 8b 2c ea 15 4e 5b d4 c5 fd 24 cd 8a 3c 48 dc 57 af de 7a 73 7f f3 9f c8 f0 7a 0b 33 34 5e 2e 64 f9 Data Ascii: W(+N.WcCIh\|^d2av K$lZeGsEYIYSoRPDV\|.D,zvvsHLD;+A1tPE<OEWI5O57>>^^y4+L^p_LsQ,N[$<HWzsz34^.d
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: d4 bc 9f 84 a5 d0 84 34 5f 36 20 c1 2e 0c 7a 8f f6 85 db cb 2f 01 df a3 94 13 da c4 81 91 a5 2b 3f fb ba 8e 1e b5 c7 0b 44 a9 0e 1c f6 fb 7b 28 34 8e 12 05 02 f6 0d d7 41 2d 0e c7 87 42 de 0b 9d 4a ea 73 3e 9d 50 5e 59 c1 a1 86 6a 68 1a 90 fe 4b 94 75 58 fd c8 9f aa 77 40 98 21 64 59 98 c4 13 85 34 1a ae 14 c6 fd 2d f5 d4 1e 1b e8 49 fc 9e 75 13 4f da a6 69 b2 a7 ad 0e 63 c1 f4 a0 32 be 9f 4c 08 e2 05 f9 7e 93 be 6f 30 70 32 7d e9 9a 13 f3 34 30 8f 98 5b 4c 89 8f 4b 1b 5f 2e ff 2f 21 5b f6 4d d8 86 83 cc b5 bc cd b5 f1 61 55 b7 e9 24 1e c6 a4 02 59 b0 b5 f4 36 1a b2 21 06 be 57 04 da 4d 07 6f 38 be b5 fb e9 43 63 25 70 9b 8d cd d7 f4 8a 13 50 79 71 38 cc 59 75 47 25 47 d0 54 6e 29 d7 24 f4 3b 00 5b 7c 85 15 0e 3b 49 45 7c f0 8b da 15 9a bc c5 90 30 92 c2 Data Ascii: 4_6 .z/+?D{(4A-BJs>P^YjhKuXw@!dY4-IuOic2L~o0p2}40[LK_./![MaU$Y6!WMo8Cc%pPyq8YuG%GTn)$;[\|;IE\|0
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: 8a 30 cd 5d 7b 56 c4 87 c3 43 e1 22 58 a9 a2 95 d5 e0 45 b5 ba ea 82 8d 87 dc f4 b3 15 d2 ea 5d 20 c9 eb 90 31 80 4c 77 8a 36 7e 09 4c 1b 58 0d 16 15 4c d0 59 b7 9c 65 fe 8e ef cd b5 2b 99 0a 78 11 06 ea 10 3f 1a 2f 7c 0f ca dd 2d 5b df de 2d 5b df 95 0b a5 e3 5e b7 74 fc d6 5e 6f 3e d8 f5 e6 a3 b3 de 8c cd 7a 73 c9 66 62 db c6 31 2e 83 a6 94 1c f1 97 27 a8 7c b7 7b 86 ee fd 5f 9d a1 b2 65 76 76 1e e2 16 d0 e2 7b 77 4d c7 f3 f2 7b b3 c2 a1 18 d4 fd 9d e1 ff f3 ff e6 f0 cf ee 39 fc b3 7f 63 f8 67 ff bf 1d fe d9 7f e3 f0 cf ee 39 fc cf 4a cf 23 61 1f e3 bb c5 63 d7 d1 e0 15 b3 09 28 4f 39 73 1e 3b 7a 4a e1 ba 32 b9 4f 15 46 df 12 f2 88 a1 42 1e 6e f7 f3 92 87 83 c9 04 2c b8 92 1b cb 37 ac 1c 06 f6 1b ab 41 80 ec 98 b9 14 24 74 b0 6f 1c 01 1e 97 26 d2 f7 36 Data Ascii: 0]{VC"XE] 1Lw6~LXLYe+x?/\|-[-[^t^o>zsfb1.'\|{_evv{wM{9cg9J#ac(O9s;zJ2OFBn,7A$to&6
2024-04-16 17:43:35 UTC	1291	IN	Data Raw: c1 5a 59 9c cb 22 dd 82 ea 3a 5c 24 a5 ae e2 74 f5 98 f4 c6 6b 29 af 46 7b 50 e5 ac 56 5f 54 40 4b 01 1b bd d0 17 65 1d 2f 08 7d 1c 81 ef cd 85 2b d8 ae 41 78 9d dc de 62 9d 7d d1 f1 b2 2f c9 d0 c7 2c be 70 34 b3 34 f0 3b 02 6a 16 29 89 8e 80 3b 0f 2e 43 62 36 e6 9d fc c1 8d fe d3 2e b7 ca a7 35 64 89 92 95 a1 ea c1 e0 c7 1f 7f 1c 20 ae df 61 45 26 ab e5 c0 7a 99 f4 7a fd 47 4f c9 99 db 26 84 c7 72 08 4b 89 59 25 40 79 8c 79 4a 89 23 b6 73 b5 00 45 29 d4 dd ff ac b7 04 0c 46 9e c1 9f 42 01 bb 63 91 99 14 75 1f 2e ca 8b 40 6a 5e 2a c3 22 94 8d 75 ca 67 0b 3b 6a 3a 5b 3d ca 87 da 66 b5 fe 8f a0 5a 1d 84 30 1f 4b f8 46 82 c0 02 c9 ea 00 83 de 0f 33 f7 83 25 f4 f5 c7 a7 41 89 be 62 e6 66 23 6f 36 a2 44 03 37 76 bc 11 f8 26 c1 01 66 c0 38 74 af 14 58 35 dd 4b Data Ascii: ZY":\$tk)F{PV_T@Ke/}+Axb}/,p44;j);.Cb6.5d aE&zzGO&rKY%@yyJ#sE)FBcu.@j^*"ug;j:[=fZ0KF3%Abf#o6D7v&f8tX5K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50153	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	630	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 66 62 31 38 33 35 61 32 2d 61 33 31 30 2d 34 39 36 39 2d 62 38 63 38 2d 36 38 35 65 30 65 30 31 33 63 61 65 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 34 37 36 31 36 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 63 63 38 63 33 32 34 30 2d 39 33 65 31 2d 34 39 33 34 2d 38 34 Data Ascii: metric_payload=%7B%22id%22%3A%22fb1835a2-a310-4969-b8c8-685e0e013cae%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A47616%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%22cc8c3240-93e1-4934-84
2024-04-16 17:43:35 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:35 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: f2ddc247a3378950 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 11 server: istio-envoy connection: close
2024-04-16 17:43:35 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50147	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	592	OUT	GET /messenger/messengerrenderer.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/javascript Content-Length: 84531 Connection: close Server: nginx x-amz-id-2: +SIGAWtjnRHUa366bJLjJnEqjMgXBVGBNv2sm3yUDC9nCjQ/AY7nOpvMv5cHE1mRZZlKIuS+Rtw= x-amz-request-id: DVK3J2BDFD859E9W Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: aAmKzFp5e.hwPTYaUYpYtFig0FRCmHsD ETag: "813595c713c9bbfa2821b3169e3b8523" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:35 UTC	15845	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 e4 bd 6d 63 9b 48 d2 28 fa 7d 7f 85 cc c9 e8 c0 18 61 49 7e c7 c3 e3 c7 96 e4 49 76 e3 38 1b 7b 26 3b eb f8 e4 20 68 49 c4 08 34 80 6c 2b 46 ff fd 56 55 37 d0 48 60 7b 32 39 67 e7 de 9b 17 01 dd d5 d5 d5 d5 d5 d5 d5 6f d5 5b 3f 6e fc ad f1 63 63 ca e2 98 05 63 16 e1 c7 7f df b1 28 f6 c2 c0 6c 74 8d 03 a3 43 41 be e7 b0 20 66 66 e3 67 16 b0 78 11 37 ae 98 cf 9c 70 da 78 6b 0f 63 80 d8 fa db c6 68 1e 38 09 24 53 99 9e 68 8f 4a 38 fc c2 9c 44 b1 ac 64 31 63 e1 a8 c1 1e 66 61 94 c4 cd e6 5a cc 34 74 e7 3e 3b e6 0f 43 c0 59 89 aa 99 4a 86 b3 00 76 d9 c8 0b 58 b3 c9 9f 86 3d 75 8f f9 ab aa 7c fe 7c 9e 15 43 d1 af 6f 80 0a b3 8e 8a 63 f1 34 a4 34 94 23 5b 0d 59 aa ca 3c e0 39 b8 ca 46 86 26 66 fe e8 18 7f cc 64 e2 c5 ba 9a 97 5d 7b Data Ascii: mcH(}aI~Iv8{&; hI4l+FVU7H`{29go[?nccc(ltCA ffgx7pxkch8$ShJ8Dd1cfaZ4t>;CYJvX=u\|\|Coc44#[Y<9F&fd]{
2024-04-16 17:43:35 UTC	16384	IN	Data Raw: 5f 3e 7f 7c f3 f6 ed e7 d3 c1 e7 b3 37 1f 06 7d 05 50 af bb d7 af 14 d3 b5 76 c0 c8 65 49 62 ed b1 1d 18 4b 6f ef b1 5d 1d 4c ef a9 e7 e3 dd 5b 60 0d c2 d8 38 b4 94 ec d5 c3 a8 60 8e 77 92 da 96 32 01 bb 1d 6a dc 52 5c 7b a1 80 b5 ab dc 33 76 ab 80 3d ab 4c a1 f3 99 28 60 b2 2a bf cf ed 88 a6 ce 5c 4b 59 30 f4 a0 31 43 78 c4 30 e2 22 84 d7 70 f7 29 60 6c e1 81 77 f7 71 67 a9 5d b7 b6 6e 8e f1 bd a3 77 97 da 71 fe d9 c6 cf eb ab e4 53 7c f3 63 11 6d 1e 57 bf 5f 1b 26 25 db d4 8e 5f 6d 81 c9 b9 f5 e9 5a bd fe 5f 9f 6e 6e 36 b5 9b f4 37 00 da 59 a6 e7 fc d1 a7 24 a9 cb bf 5e f3 af 09 7f d8 e9 49 3a e5 af 31 7f fc 9b 3f 2e 2f 2f b7 c6 60 9e 72 e7 ca e4 ef 04 59 00 ec 88 4d e5 12 ad c6 c5 e7 f3 90 1e 57 73 16 e3 f3 23 73 03 fe 76 35 99 47 f4 72 16 79 f8 b8 b4 Data Ascii: _>\|7}PveIbKo]L[`8`w2jR\{3v=L(`*\KY01Cx0"p)`lwqg]nwqS\|cmW_&%_mZ_nn67Y$^I:1?.//`rYMWs#sv5Gry
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 84 06 6b 6c 83 8a 48 e8 5b b3 28 5e e0 fa ce fd 47 a7 1b 9b 67 1f 46 1f 46 76 df f3 fa f8 e0 f4 1f 8d 81 1b 7d 64 e3 97 82 52 1e 8d 6b 9c 99 d0 86 66 4a 63 4a e0 a6 a8 bd c8 87 26 1d 72 d4 d5 49 ec 5b bc 05 f1 42 17 80 d0 bc 16 18 bb cc 93 dc 1d 86 a5 09 f4 fc 52 af 28 62 7a 35 79 b2 87 aa e1 8e 7b 4b c7 5d 3c 9e dc 83 57 bc c0 65 a9 6e dd 8f d1 c1 3f cb 05 1f d9 11 05 64 44 46 04 ab a1 fc 06 7b eb 7b 55 04 42 d2 92 3b 93 0c d0 85 49 16 f6 f8 af af 47 fc 01 68 a1 12 f4 60 81 46 ff 2e 7f ce 81 42 da 4e 7b 61 87 ed 07 ec 9c c2 41 67 21 f4 91 bd fb e5 17 37 d3 35 27 b8 65 59 40 f7 c8 3d f6 53 51 b4 e1 d5 68 b1 17 1e 8c 58 2c 88 07 37 50 36 30 e5 ef 4f 76 f1 d6 f4 57 c0 71 11 5f e4 c1 91 fc 74 04 3c e0 44 a6 ef c9 74 3e 2e 2c f9 67 25 f9 46 a6 be 94 a9 2f 81 Data Ascii: klH[(^GgFFv}dRkfJcJ&rI[BR(bz5y{K]<Wen?dDF{{UB;IGh`F.BN{aAg!75'eY@=SQhX,7P60OvWq_t<Dt>.,g%F/
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 28 10 0b 23 c4 9e 02 71 69 84 c8 43 05 e4 ca 08 f2 42 81 b8 36 42 bc 53 20 6e 8c 10 27 0a c4 67 23 c4 40 81 d8 69 08 ba a2 80 bc 30 82 fc a6 40 ec 1a 21 5e 2b 10 7b 46 88 50 ad 66 df 08 72 a5 40 1c 18 21 3e 0a 52 9b fa d6 e6 2c db b4 60 27 81 87 e4 33 3c 45 f0 74 15 0e 2e a2 1c 5e 02 1f af 24 00 9b 33 df 4a 61 23 b1 dc 85 6f a1 2e 38 ec b2 be f5 5f 18 28 1a 48 d0 14 1e 59 8c 3f cb 1d c1 33 77 7a 0f 88 33 87 37 20 aa 8c 4a 5b ee b9 7f 14 e4 93 76 30 c8 dc b1 cf ec ba 80 82 27 b3 dd 09 c6 67 1c 85 ee 44 37 4e 2b 29 f0 8c db b8 b3 f6 6f 3f f9 d7 35 24 74 9c be 6d db f9 b7 df 6e f1 57 47 3c 76 cb c7 ad f2 f1 b1 e3 75 ca 78 55 97 8a 22 69 d8 86 c6 cc 6c a7 fc ba a7 56 68 87 a4 ad 11 0e 31 8c 5b 3f 3c ed 9c 79 4a e0 ab 81 a0 d0 4a bc be f9 34 18 86 a4 89 5a c2 Data Ascii: (#qiCB6BS n'g#@i0@!^+{FPfr@!>R,`'3<Et.^$3Ja#o.8_(HY?3wz37 J[v0'gD7N+)o?5$tmnWG<vuxU"ilVh1[?<yJJ4Z
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 79 13 86 22 6e c8 32 47 d1 64 e2 c2 40 8c 08 00 50 c8 7e 8b aa de c5 02 c3 0b 36 d9 ad 2a 72 0e 39 65 31 af c2 93 36 b6 b0 2c 70 46 9e c6 6f 5b b3 8a d6 65 d4 d0 1c ac 88 7a 92 59 3f 19 00 1b f5 30 b4 69 5f 8d 8c c3 2f 7f ec 89 ec 5f d4 97 cb aa 55 2e 02 03 14 3b 2d 4d 04 db 30 e4 db 2c 3f 3a cd 0d 1b 81 1b 8e 29 4c 57 c8 14 d2 14 82 e3 15 16 31 2c 61 b0 51 c3 ed c6 54 ba 67 31 11 02 c8 8d 31 e8 4b 3c 80 bf c3 6b dc 17 b9 f0 e7 92 fe a0 37 bb ab 4b 54 55 5c e1 fa 77 35 43 a5 05 3e cd b0 cc 9d 9f 0b 13 84 b5 c2 4e fc 81 fd 19 fa 58 05 fa fa 43 e0 2b 20 29 08 7d eb 05 e4 90 c0 4b 8f a5 03 40 83 65 9e 0e 62 e5 50 0f cd b7 cd fe 62 71 d7 79 54 cb 41 0a f2 ba bd b2 48 f1 5e 3e 95 fa fc 9e 02 03 82 19 e0 f3 d7 db dc 44 aa 0d 22 58 ef 3d 53 4b 57 1c 68 8c d1 b7 Data Ascii: y"n2Gd@P~6*r9e16,pFo[ezY?0i_/_U.;-M0,?:)LW1,aQTg11K<k7KTU\w5C>NXC+ )}K@ebPbqyTAH^>D"X=SKWh
2024-04-16 17:43:36 UTC	3150	IN	Data Raw: 7c 03 e5 86 8d 82 c6 40 9d f8 c9 93 20 a4 25 a0 3d 88 56 74 3c c6 75 4d 45 c3 83 95 a2 5f 9f 55 4a 3c 90 42 af d1 0e 89 f7 56 8e 03 3d 4b 2f d0 85 bb 4a 37 53 d7 95 20 bb 61 4c 85 42 83 82 4e 42 50 32 26 86 ce 61 8c b0 b3 61 c5 68 43 db 3b 9f dc 20 7d ba b1 d7 4d da ed 64 23 08 86 ed 36 16 4d 50 f9 87 6f c3 60 8c 6f 07 ed b6 1b 22 37 c8 bc dd 00 d5 61 5e 57 6b 01 d1 55 5f 8e 9e 76 66 a8 bd 9b 04 9b dd c9 83 50 eb 02 7f f8 61 c2 1f 3a 0b c2 e3 c9 09 aa 40 37 dc e8 f8 0c a6 0f 43 88 d2 8f 51 bb 3d a2 1f 68 fc 86 1f ca c0 be 1b 4c dd 58 9c 79 14 cc bc 0f cd 3a 13 bb 56 a8 22 8c d6 a9 2d c8 0b d8 cd 3f af b7 9b ef df c7 cd 8c 97 42 52 a8 b9 13 06 b5 fe 52 13 56 35 e2 1d 9f 9f 7f 6a ba be e4 de b9 7b c7 03 81 b9 98 80 94 da 9a 4a 8c 00 9b e2 85 b3 43 60 55 a2 Data Ascii: \|@ %=Vt<uME_UJ<BV=K/J7S aLBNBP2&aahC; }Md#6MPo`o"7a^WkU_vfPa:@7CQ=hLXy:V"-?BRRV5j{JC`U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50150	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	668	OUT	GET /cxbus/cxbus.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "db8d92de3c253178a1b250bfc17106e6" If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:35 GMT Connection: close Server: nginx x-amz-id-2: QxWt8gY46vhG2aTqrbbxDGFwxQGCPkPmPXnfUpJ3qO74hpr/vXlaMwgZg17cUS0fkaIfPPHNP40= x-amz-request-id: NRK8DG8ZQCW8ENNP Cache-Control: max-age=0, no-cache Last-Modified: Tue, 12 Sep 2023 08:53:11 GMT x-amz-version-id: Gz6x1Dz1QjVdKSyy.XKzzGvf5X5EX9XE ETag: "db8d92de3c253178a1b250bfc17106e6" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50158	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1852	OUT	GET /s/sfsites/aura?r=14&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:35 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 956885d4ae61aed7e087b2ce5cb6bc86
2024-04-16 17:43:35 UTC	1752	IN	Data Raw: 36 63 63 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 6cc<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50159	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	892	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=4&ClientTime=1713289414714&PageStart=1713289404678&PrevBundleTime=1713289410675&LastActivity=4539&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 962 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:35 UTC	962	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a a5 55 09 6f a4 36 14 fe 2b 14 69 d0 ae 04 8c 0d b6 81 6c dd 28 d7 a6 db 1c bb ab 49 1a 6d ab d5 c8 18 0f c3 c6 03 14 c3 e4 58 ed 7f ef 63 ae 4c 3a 51 2a b5 98 b1 cd e3 7b 97 79 df 9b ef f6 48 fd 65 ef 11 d7 be 99 aa d2 de 63 61 1c ba f6 c9 bc 35 f6 de 9f df ed b3 a2 cc ec 3d 1a b9 f6 41 93 f7 a2 c0 b5 a7 6d 5b 9b bd e1 70 62 bc 2a 9d 74 46 8a 56 65 7e 51 ce 85 2e b2 fd ae d1 5e 91 f1 00 db 2e 0e 28 8b 7d 96 ac 2f b0 8c 29 65 7e b8 91 24 04 ec 15 b3 dc 76 11 8c 17 f0 e8 d9 c0 04 20 3e da 00 a2 68 f9 e2 eb 76 f4 3f dc ff 13 76 b0 0c 3b f1 f1 f3 b0 e3 d7 c3 fe 07 7e 27 6c 4a 7d fa 4a d8 90 d7 bf 85 2d 4a a1 1f da 42 1a 3f af aa 5c 2b 5f 56 b3 61 3e 94 95 d6 4a b6 fb 73 1e 38 2d 24 70 ea e1 ab 3f a2 51 72 cc 0e 3f 3b 79 3b e3 84 Data Ascii: Uo6+il(ImXcL:Q{yHeca5=Am[pbtFVe~Q.^.(}/)e~$v >hv?v;~'lJ}J-JB?\+_Va>Js8-$p?Qr?;y;
2024-04-16 17:43:35 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:35 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:35 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 35 37 38 32 7d 0a Data Ascii: {"BundleTime":1713289415782}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50163	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289414000&PageStart=1713289396931&PrevBundleTime=1713289411710&LastActivity=3581&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:36 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50161	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1818	OUT	GET /s/sfsites/aura?r=13&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:36 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: ad1cd32fe72c12c15fe5bf54ecdb369c
2024-04-16 17:43:36 UTC	1650	IN	Data Raw: 36 36 36 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 666<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50162	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:35 UTC	1499	OUT	GET /img/s.gif HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae
2024-04-16 17:43:36 UTC	389	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=10368000 Expires: Sat, 10 Aug 2024 02:03:08 GMT Last-Modified: Wed, 25 Jan 2006 02:03:00 GMT Server: sfdcedge X-SFDC-Request-Id: 83826fc1f995d297f7bc33d3180f8e53
2024-04-16 17:43:36 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50169	142.250.105.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	875	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6Ld5tx8UAAAAAHuGEKGNwoShxuDkEQ_YLvEK3OBJ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-qRcumfsCCDxF0wKKxpegaw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:36 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-16 17:43:36 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-16 17:43:36 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-16 17:43:36 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-16 17:43:36 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-16 17:43:36 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-16 17:43:36 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 52 63 75 6d 66 73 43 43 44 78 46 30 77 4b 4b 78 70 65 67 61 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="qRcumfsCCDxF0wKKxpegaw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-16 17:43:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50166	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	686	OUT	GET /messenger/messagingMiddleware.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "020a1227b513dcb833482e5f322a09b1" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:36 GMT Connection: close Server: nginx x-amz-id-2: ZeaIGG0eq6OooLHEoYoOr7ggEwprus50f49K95mSyG8HpTPgowmp0oNi6yWKayQbmePC4YGGvFQ= x-amz-request-id: DVKBREFQZV64HVB5 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 82d3Gc.Qzs5.mCvabKm1QvqiKFWbLulV ETag: "020a1227b513dcb833482e5f322a09b1" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50165	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	681	OUT	GET /messenger/defaultVendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:36 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:36 GMT Connection: close Server: nginx x-amz-id-2: cChmRPluutEjS73sjACwP1d87knJt00Wuo5GJZqd6/fomdMG/wNk2fmuN6CZhN6n9pGKchRML2w= x-amz-request-id: YNV401XKD3Z59Y9A Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: W1TMtBBx4kZ_cpFkD5SoYEiYHCTzxLbY ETag: "10f8d6d1314d8f24ce392dcfaabc242f" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50164	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftdb25ceb47b2ad091b1757489f89 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:35 GMT server: istio-envoy connection: close
2024-04-16 17:43:36 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50167	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	570	OUT	GET /messenger/main.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Type: text/javascript Content-Length: 86174 Connection: close Server: nginx x-amz-id-2: 40pBUl6Oc6lRxOxeJfv0pTbY4LpfHUnpZmtfj50XWMFHRzN66TImQkPSYFoKKwWeyrGMLzBUyB8= x-amz-request-id: DVK9YB2FHKSVDXQA Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: rbUuzdI752EACo98HjCpTo90eLZ7rVQz ETag: "59acf392aa2c87d95d6ef613d1006f16" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:36 UTC	15850	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 e4 bd 6d 63 9b 48 d2 28 fa 7d 7f 85 cc c9 e8 c0 18 61 49 7e c7 c3 e3 c7 96 e4 49 76 e3 38 1b 7b 26 3b eb f8 e4 20 68 49 c4 08 34 80 6c 2b 46 ff fd 56 55 37 d0 48 60 7b 32 39 67 e7 de 9b 17 01 dd d5 d5 d5 d5 d5 d5 d5 6f d5 5b 3f 6e fc ad f1 63 63 ca e2 98 05 63 16 e1 c7 7f df b1 28 f6 c2 c0 6c 74 8d 03 a3 43 41 be e7 b0 20 66 66 e3 67 16 b0 78 11 37 ae 98 cf 9c 70 da 78 6b 0f 63 80 d8 fa db c6 68 1e 38 09 24 53 99 9e 68 8f 4a 38 fc c2 9c 44 b1 ac 64 31 63 e1 a8 c1 1e 66 61 94 c4 cd e6 5a cc 34 74 e7 3e 3b e6 0f 43 c0 59 89 aa 99 4a 86 b3 00 76 d9 c8 0b 58 b3 c9 9f 86 3d 75 8f f9 ab aa 7c fe 7c 9e 15 43 d1 af 6f 80 0a b3 8e 8a 63 f1 34 a4 34 94 23 5b 0d 59 aa ca 3c e0 39 b8 ca 46 86 26 66 fe e8 18 7f cc 64 e2 c5 ba 9a 97 5d 7b Data Ascii: mcH(}aI~Iv8{&; hI4l+FVU7H`{29go[?nccc(ltCA ffgx7pxkch8$ShJ8Dd1cfaZ4t>;CYJvX=u\|\|Coc44#[Y<9F&fd]{
2024-04-16 17:43:36 UTC	16379	IN	Data Raw: bc 7d fb f9 74 f0 f9 ec cd 87 41 5f 01 d4 eb ee f5 2b c5 74 ad 1d 30 72 59 92 58 7b 6c 07 c6 d2 db 7b 6c 57 07 d3 7b ea f9 78 f7 16 58 83 30 36 0e 2d 25 7b f5 30 2a 98 e3 9d a4 b6 a5 4c c0 6e 87 1a b7 14 d7 5e 28 60 ed 2a f7 8c dd 2a 60 cf 2a 53 e8 7c 26 0a 98 ac ca ef 73 3b a2 a9 33 d7 52 16 0c 3d 68 cc 10 1e 31 8c b8 08 e1 35 dc 7d 0a 18 5b 78 e0 dd 7d dc 59 6a d7 ad ad 9b 63 7c ef e8 dd a5 76 9c 7f b6 f1 f3 fa 2a f9 14 df fc 58 44 9b c7 d5 ef d7 86 49 c9 36 b5 e3 57 5b 60 72 6e 7d ba 56 af ff d7 a7 9b 9b 4d ed 26 fd 0d 80 76 96 e9 39 7f f4 29 49 ea f2 af d7 fc 6b c2 1f 76 7a 92 4e f9 6b cc 1f ff e6 8f cb cb cb ad 31 98 a7 dc b9 32 f9 3b 41 16 00 3b 62 53 b9 44 ab 71 f1 f9 3c a4 c7 d5 9c c5 f8 fc c8 dc 80 bf 5d 4d e6 11 bd 9c 45 1e 3e 2e 6d 10 1b e4 64 Data Ascii: }tA_+t0rYX{l{lW{xX06-%{0Ln^(``S\|&s;3R=h15}[x}Yjc\|v*XDI6W[`rn}VM&v9)IkvzNk12;A;bSDq<]ME>.md
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: 79 ed 8a d0 60 8d 6d 50 11 09 7d 6b 16 c5 0b 5c df b9 ff e8 74 63 f3 ec c3 e8 c3 c8 ee 7b 5e 1f 1f 9c fe a3 31 70 a3 8f 6c fc 52 50 ca a3 71 8d 33 13 da d0 4c 69 4c 09 dc 14 b5 17 f9 d0 a4 43 8e ba 3a 89 7d 8b b7 20 5e e8 02 10 9a d7 02 63 97 79 92 bb c3 b0 34 81 9e 5f ea 15 45 4c af 26 4f f6 50 35 dc 71 6f e9 b8 8b c7 93 7b f0 8a 17 b8 2c d5 ad fb 31 3a f8 67 b9 e0 23 3b a2 80 8c c8 88 60 35 94 df 60 6f 7d af 8a 40 48 5a 72 67 92 01 ba 30 c9 c2 1e ff f5 f5 88 3f 00 2d 54 82 1e 2c d0 e8 df e5 cf 39 50 48 db 69 2f ec b0 fd 80 9d 53 38 e8 2c 84 3e b2 77 bf fc e2 66 ba e6 04 b7 2c 0b e8 1e b9 c7 7e 2a 8a 36 bc 1a 2d f6 c2 83 11 8b 05 f1 e0 06 ca 06 a6 fc fd c9 2e de 9a fe 0a 38 2e e2 8b 3c 38 92 9f 8e 80 07 9c c8 f4 3d 99 ce c7 85 25 ff ac 24 df c8 d4 97 32 Data Ascii: y`mP}k\tc{^1plRPq3LiLC:} ^cy4_EL&OP5qo{,1:g#;`5`o}@HZrg0?-T,9PHi/S8,>wf,~*6-.8.<8=%$2
2024-04-16 17:43:36 UTC	16384	IN	Data Raw: e4 46 88 1b 05 62 61 84 d8 53 20 2e 8d 10 79 a8 80 5c 19 41 5e 28 10 d7 46 88 57 0a c4 8d 11 e2 42 81 f8 6c 84 18 28 10 3b 0d 41 57 14 90 17 46 90 df 14 88 5d 23 c4 6b 05 62 cf 08 11 aa d5 ec 1b 41 76 15 88 03 23 c4 47 41 6a 53 df da 9c 65 9b 16 ec 24 f0 90 7c 86 a7 08 9e ae c2 c1 45 94 c3 4b e0 e3 95 04 60 73 e6 5b 29 6c 24 96 bb f0 2d d4 05 87 5d d6 b7 fe 0b 03 45 03 09 9a c2 23 8b f1 67 b9 23 78 e6 4e ef 01 71 e6 f0 06 44 95 51 69 cb 3d f7 8f 82 7c d2 0e 06 99 3b f6 99 5d 17 50 f0 64 b6 3b c1 f8 8c a3 d0 9d e8 c6 69 25 05 9e 71 1b 77 d6 fe ed 27 ff ba 86 84 8e d3 b7 6d 3b ff f6 db 2d fe ea 88 c7 6e f9 b8 55 3e 3e 76 bc 4e 19 af ea 52 51 24 0d db d0 98 99 ed 94 5f f7 d4 0a ed 90 b4 35 c2 21 86 71 eb 87 a7 9d 33 4f 09 7c 35 10 14 5a 89 d7 37 9f 06 c3 90 Data Ascii: FbaS .y\A^(FWBl(;AWF]#kbAv#GAjSe$\|EK`s[)l$-]E#g#xNqDQi=\|;]Pd;i%qw'm;-nU>>vNRQ$_5!q3O\|5Z7
2024-04-16 17:43:37 UTC	16384	IN	Data Raw: e6 67 73 d5 1c e3 4e 55 38 4f df 8b 15 f3 bd ba 2a 2a 1b 6d 6d 54 2b 86 b4 2a 5e 68 72 57 07 f8 56 98 1f 1b 39 26 f0 4c 52 bd 17 0d df 32 ad 06 b7 94 88 30 84 1e 3b 2e e4 85 31 25 9f 3b 1b e6 c6 19 fc 3c a7 60 8c a8 7c 3d b3 d8 47 c7 f0 cf ce f1 e8 3d 66 2f 57 5e 5e 0d fd 2b 38 54 87 7a d8 ab dc a9 f7 92 ef bd 43 27 f3 25 b0 20 cd 0c 8f a5 c1 fd 22 c7 fe d0 3b 07 39 da b3 77 e4 8b 0b fe d9 da 49 d9 c4 0d c6 e8 22 b4 3e 87 93 72 04 c8 70 0e 43 f0 c8 52 45 76 fb 42 7a f2 b3 8d 49 12 19 2a 50 c6 34 1c 7a 68 8a 08 c9 64 19 9e 32 18 1a a4 03 91 c5 60 96 e2 b5 e2 42 b3 9c 95 a6 3b 5a 62 2b 65 7a f9 17 7e 0c 9f 01 1a 22 6b 65 58 42 dd 18 40 c7 3e 05 e1 35 24 8e bd 5c 1b 38 0f 6e 45 26 ac 6e 16 57 99 c1 91 01 e7 24 50 dd d6 d3 00 a9 ef 60 1e 03 00 5e bb 7d 6f 12 Data Ascii: gsNU8O*mmT+^hrWV9&LR20;.1%;<`\|=G=f/W^^+8TzC'% ";9wI">rpCREvBzI*P4zhd2`B;Zb+ez~"keXB@>5$\8nE&nW$P`^}o
2024-04-16 17:43:37 UTC	4793	IN	Data Raw: fb af 98 33 d7 49 ad 1f 34 42 1e de c0 16 94 f8 0a bd 29 d0 39 c7 86 3e 8c ae a8 5c 11 4d d0 c5 8c dc 72 4c 50 ac 5c 39 1a 0e c8 cf 47 39 1a 4e 82 98 3a 3e 0b 26 65 23 ff d0 14 b0 55 71 bc c8 51 ff 82 8c f5 63 34 d6 6f 06 17 68 ac 3f 81 3f 6b c7 77 31 a7 9d b5 db 43 6d 42 4b c8 bc 73 60 8d e1 0e 76 9d b3 c5 76 1d 1a 36 d6 19 7a dd 13 ce 6d 2e 8e 62 31 3c be 53 d8 25 34 b9 29 9b c8 99 56 f8 9b 8f e9 18 77 79 e9 34 eb 44 cd 32 38 c3 78 4c fa 8d 9d 91 59 ea ae 24 9d 7c 3b 06 99 36 e9 64 ed 76 d6 69 b4 e9 01 ad 41 7b cf 42 8b 1f 9a 36 d2 5b 71 49 5e c7 25 bc 34 67 4b 72 82 2c d4 ad 98 c3 55 e2 07 c8 db ef 6a 89 a1 ba 6c fc c3 84 52 a5 17 da e2 d7 58 ba 0c 1c 72 bd 43 6c c5 b3 b5 ba c3 b2 53 d1 d9 dc a8 2a 78 dd 31 66 ae 6a dd 5b 84 62 c4 0c 78 b9 8c 8c ab 22 Data Ascii: 3I4B)9>\MrLP\9G9N:>&e#UqQc4oh??kw1CmBKs`vv6zm.b1<S%4)Vwy4D28xLY$\|;6dviA{B6[qI^%4gKr,UjlRXrClS*x1fj[bx"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50171	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	840	OUT	GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289415128&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&dt=Get%20Support HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 14 Connection: close Date: Tue, 16 Apr 2024 17:43:36 GMT ININ-Correlation-Id: d4467a31-4760-48fc-941c-67513d9c86a3 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: https://support.docusign.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 e265f20f047ccdd0006f2da8a274008c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: Ye5Uav-9kE05F_T_rDrzrV4RVIAtWE0j5GM1mg31YlprscTs5XYJWg==
2024-04-16 17:43:36 UTC	14	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 7d Data Ascii: {"actions":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50172	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=4&ClientTime=1713289414714&PageStart=1713289404678&PrevBundleTime=1713289410675&LastActivity=4539&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:36 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50170	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	674	OUT	GET /messenger/vendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:37 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:37 GMT Connection: close Server: nginx x-amz-id-2: X98kQ2xUrYxpovwU7VLr9KwiMbPR5GYdVh5gI30GDT2CcpoRA4FpHhsFFLKwa0/4LDoUmdVZkRs= x-amz-request-id: NRKDNRXM26MSN2AX Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: illAxlFITPjW5xShztSlJcO1d8iuDa3E ETag: "d3b727da8b0bbff49f1983a706c13dc9" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50173	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:36 UTC	572	OUT	GET /messenger/engage.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:36 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:36 GMT Content-Type: text/javascript Content-Length: 28488 Connection: close Server: nginx x-amz-id-2: wZI2gNLl738tA2O9GKm9vYkxEOQ/K5RIDWfEIyZq4u/HJPNaYKJcefXYWtuJ3zPNLy9smG2rseA= x-amz-request-id: YNV7XYSD9E266YJJ Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: xx0U2QJPfS_GLP.J024uNcMeCQmpzThK ETag: "71718bec692e211bc3ea5fc2d18f4284" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:36 UTC	15850	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd 69 63 e3 36 b2 28 fa 7d 7e 85 cc 9b e3 21 63 4a d6 62 79 91 9b f1 d8 5a 12 cf 74 b7 fb b6 9d 6d d4 1a 5f 8a 84 24 b6 29 52 e1 62 5b 6d ea bf df aa 02 48 82 12 65 3b 9d dc 73 f2 5e d2 16 b1 14 81 42 a1 50 55 00 81 c2 fe b7 3b 7f ab 7c 5b 99 b3 30 64 de 94 05 18 f9 c7 3d 0b 42 c7 f7 3a 95 66 ed b8 d6 a0 24 d7 b1 98 17 b2 4e e5 7b e6 b1 70 19 56 6e 98 cb 2c 7f 5e 79 6b 8e 43 80 d8 ff db ce 24 f6 ac 08 5e 53 99 1e 69 4f 8a 3f fe cc ac 48 31 8c 68 b9 60 fe a4 c2 1e 17 7e 10 85 bb bb 1b 39 73 df 8e 5d 76 c6 1f 35 01 67 44 aa d6 51 d2 32 73 60 9b 4d 1c 8f ed ee f2 67 cd 9c db 67 3c a8 2a b7 b7 ef d2 66 28 fa 70 04 58 74 b6 61 71 26 9e 35 e9 1d aa 91 ad a7 ac 54 25 f6 78 0d b6 b2 93 16 13 32 77 72 86 3f 9d 68 e6 84 ba 9a b5 5d Data Ascii: ic6(}~!cJbyZtm_$)Rb[mHe;s^BPU;\|[0d=B:f$N{pVn,^ykC$^SiO?H1h`~9s]v5gDQ2s`Mgg<*f(pXtaq&5T%x2wr?h]
2024-04-16 17:43:36 UTC	12638	IN	Data Raw: a0 53 a0 d6 c7 64 b2 4c a6 8d 64 da 4c a6 ee 72 31 23 06 a4 10 e8 bb f4 8a aa 1f 32 87 7a 1b 59 3f 09 ef 7b 3c 03 87 d6 14 e5 23 3a 92 46 d9 41 ba 2b 4d e1 6d c6 93 ea c8 07 e4 a5 ef dc be ff 85 87 b8 7a fd 25 c1 9b d0 e0 85 c5 0c 86 0c 5d ec 94 73 0e 70 b1 e3 35 49 f5 04 64 c0 dc 25 77 8d e4 ae 99 dc b5 92 bb 03 d0 3d 81 c7 dc 77 26 0c 9e 47 11 c1 1a 85 7a c0 04 2c 04 75 15 ba 70 25 5d 75 bd 40 96 e0 6a 0b d4 79 98 f0 cd fa 82 b0 e4 9f 34 48 6d 10 17 e9 87 9e ab a9 bb 5c 67 ee f0 98 c7 ce bd 29 10 dc c5 5b 08 51 8b 41 4d 7d e0 1a 1e 7a e7 a4 a1 6b 12 bd 3c 9c ab bc bb 94 15 78 38 55 7f e1 1d fd 08 3b 2f 85 08 ef d2 10 6e 81 35 39 e1 49 00 7b f1 fc 0a 44 d6 3d 34 c1 9f 4c d0 9c f3 05 2b a1 d8 45 27 e9 09 17 48 3e 75 9d 78 70 9e f7 b9 61 93 7a e1 a5 00 92 Data Ascii: SdLdLr1#2zY?{<#:FA+Mmz%]sp5Id%w=w&Gz,up%]u@jy4Hm\g)[QAM}zk<x8U;/n59I{D=4L+E'H>uxpaz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50174	3.161.150.72	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:37 UTC	626	OUT	GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289415128&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&dt=Get%20Support HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:37 UTC	870	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 14 Connection: close Date: Tue, 16 Apr 2024 17:43:37 GMT ININ-Correlation-Id: d24caac7-3fbe-4aba-b591-414af1331dd8 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 73e7048a510ad164cffbfc6851460ebe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: WTbuu4zX4SsI-xMHn1XgCksi6KWKOSAyLiWrt39eFO_yTFtjTclHug==
2024-04-16 17:43:37 UTC	14	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 7d Data Ascii: {"actions":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50160	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:37 UTC	1807	OUT	GET /resource/1712837356000/DSicon_favicon HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/s/contactSupport?language=en_US&rsc_301 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:37 UTC	414	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:37 GMT Content-Type: image/png Content-Length: 664 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable P3P: CP="CUR OTR STA" Expires: Sun, 26 May 2024 23:33:36 GMT Last-Modified: Thu, 11 Apr 2024 12:09:16 GMT Server: sfdcedge X-SFDC-Request-Id: 2d61869072720ef595fd14e4d7dc670c
2024-04-16 17:43:37 UTC	664	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 4a 49 44 41 54 78 9c ed 9a 31 72 da 40 14 86 bf 65 4c 1b ab a0 4b e3 1b 44 b9 80 47 a4 a6 20 7b 81 e0 1b c4 27 b0 73 02 0f 27 80 13 6c f0 4c 7a cb 34 29 2d 9f c0 34 e9 9c 19 39 2d c5 a6 50 98 10 82 41 0c 2b ad a4 a7 af 82 d5 ea f1 f3 09 3d 31 3b ab 70 84 d5 fa 01 08 5d d5 cb 49 0c 24 c0 3d 10 2b 63 d2 43 0b 28 17 29 ac d6 11 70 e7 a2 d6 11 a4 c0 0c f8 a2 8c 59 e4 3d a9 53 58 9c f2 09 80 11 f0 64 b5 9e 58 ad 83 3c 27 35 49 c0 3a 23 32 11 c3 7d 13 9b 2a 00 b2 5f c4 57 ab f5 f5 ae 49 4d 16 b0 e2 ca 6a 3d 79 ed a0 04 01 00 23 ab f5 cd b6 03 52 04 00 7c de d6 13 24 09 00 98 58 ad cf d6 07 a4 Data Ascii: PNGIHDR@@iqpHYs~JIDATx1r@eLKDG {'s'lLz4)-49-PA+=1;p]I$=+cC()pY=SXdX<'5I:#2}*_WIMj=y#R\|$X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50178	162.247.243.39	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:37 UTC	555	OUT	GET /nr-spa.1097a448-1.238.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78073 x-amz-id-2: ogJ8rsdKhlzD69Jf1J3keEzCYAz+vgY8Jm/jjSXzXtzQkU1OfgM4Gs38jdLWGA3BsDiTvF4ATkdlaH7RCRyzHQ== x-amz-request-id: PGY639JCSQ7Q55DR Last-Modified: Wed, 18 Oct 2023 21:33:59 GMT ETag: "50ff460817c14cc3cdb0112cf58f1456" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: ZfRfy6em3EAfDVPw1grXaqAz_X9vGX8v Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Tue, 16 Apr 2024 17:43:38 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130028-PDK X-Cache: MISS X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2e 31 30 39 37 61 34 34 38 2d 31 2e 32 33 38 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 33 38 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 33 38 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 31 5d 2c 7b 31 31 39 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 52 3a 28 29 3d 3e 73 2c 7a 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 69 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 Data Ascii: /! For license information please see nr-spa.1097a448-1.238.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.238.0.PROD"]=self["webpackChunk:NRBA-1.238.0.PROD"]\|\|[]).push([[111],{1199:(e,t,n)=>{n.d(t,{R:()=>s,z:()=>r});var i=[];function r(
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 48 61 72 76 65 73 74 28 7b 66 6f 72 63 65 4e 6f 52 65 74 72 79 3a 21 30 7d 29 29 29 7d 75 6e 6c 6f 61 64 28 29 7b 74 68 69 73 2e 61 62 6f 72 74 65 64 7c 7c 28 74 68 69 73 2e 6f 70 74 73 2e 6f 6e 55 6e 6c 6f 61 64 26 26 74 68 69 73 2e 6f 70 74 73 2e 6f 6e 55 6e 6c 6f 61 64 28 29 2c 74 68 69 73 2e 72 75 6e 48 61 72 76 65 73 74 28 7b 75 6e 6c 6f 61 64 3a 21 30 7d 29 29 7d 73 74 61 72 74 54 69 6d 65 72 28 65 2c 74 29 7b 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 65 2c 74 68 69 73 2e 73 74 61 72 74 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 75 6c 6c 21 3d 74 3f 74 3a 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 29 7d 73 74 6f 70 54 69 6d 65 72 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 Data Ascii: Harvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 2c 65 29 29 3a 21 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 6e 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 6e 2c 65 29 7d 7d 7d 7d 2c 38 36 37 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 4d 3a 28 29 3d 3e 45 7d 29 3b 76 61 72 20 69 3d 6e 28 31 32 38 34 29 2c 72 3d 6e 28 34 33 35 31 29 2c 73 3d 7b 22 25 32 43 22 3a 22 2c 22 2c 22 25 33 41 22 3a 22 3a 22 2c 22 25 32 46 22 3a 22 2f 22 2c 22 25 34 30 22 3a 22 40 22 2c 22 25 32 34 22 3a 22 24 22 2c 22 25 33 42 22 3a 22 3b 22 7d 2c 61 3d 28 30 2c 69 2e 44 29 28 73 2c 28 66 75 6e 63 74 Data Ascii: is.timeoutHandle),this.timeoutHandle=null,this.scheduleHarvest(n,e)):!this.started&&n&&this.scheduleHarvest(n,e)}}}},8673:(e,t,n)=>{n.d(t,{M:()=>E});var i=n(1284),r=n(4351),s={"%2C":",","%3A":":","%2F":"/","%40":"@","%24":"$","%3B":";"},a=(0,i.D)(s,(funct
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 22 29 7c 7c 36 30 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 3d 6e 65 77 20 79 2e 52 52 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 67 65 74 53 63 68 65 6d 65 3d 28 29 3d 3e 21 31 3d 3d 3d 28 30 2c 70 2e 4d 74 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 73 73 6c 22 29 3f 22 68 74 74 70 22 3a 22 68 74 74 70 73 22 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 Data Ascii: .tooManyRequestsDelay")\|\|60,this.obfuscator=new y.RR(this.sharedContext),this.getScheme=()=>!1===(0,p.Mt)(this.sharedContext.agentIdentifier,"ssl")?"http":"https",this._events={}}sendX(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};cons
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 21 3d 3d 74 3f 22 2f 22 2e 63 6f 6e 63 61 74 28 74 29 3a 22 22 2c 22 2f 31 2f 22 29 2e 63 6f 6e 63 61 74 28 64 2e 6c 69 63 65 6e 73 65 4b 65 79 29 3b 6f 26 26 28 79 3d 6f 29 2c 63 26 26 28 79 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 67 65 74 53 63 68 65 6d 65 28 29 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 64 2e 65 72 72 6f 72 42 65 61 63 6f 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 3b 63 6f 6e 73 74 20 62 3d 21 63 26 26 68 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 29 3a 22 22 3b 6c 65 74 20 53 3d 75 28 67 2c 66 2e 6d 61 78 42 79 74 65 73 29 3b 73 7c 7c 28 73 3d 6c 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 69 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 62 26 26 53 2e 73 74 61 72 74 73 57 69 Data Ascii: !==t?"/".concat(t):"","/1/").concat(d.licenseKey);o&&(y=o),c&&(y="".concat(this.getScheme(),"://").concat(d.errorBeacon,"/").concat(t));const b=!c&&h?this.baseQueryString():"";let S=u(g,f.maxBytes);s\|\|(s=l.qD({isFinalHarvest:i.unload})),""===b&&S.startsWi
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 3d 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 2e 73 68 6f 75 6c 64 4f 62 66 75 73 63 61 74 65 28 29 3f 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 6e 29 3a 6e 3b 72 65 74 75 72 6e 5b 22 61 3d 22 2b 74 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 2c 64 28 22 73 61 22 2c 74 2e 73 61 3f 22 22 2b 74 2e 73 61 3a 22 22 29 2c 64 28 22 76 22 2c 54 2e 71 34 29 2c 52 28 74 29 2c 64 28 22 63 74 22 2c 65 2e 63 75 73 74 6f 6d 54 72 61 6e 73 61 63 74 69 6f 6e 29 2c 22 26 72 73 74 3d 22 2b 28 30 2c 67 2e 7a 29 28 29 2c 22 26 63 6b 3d 30 22 2c 22 26 73 3d 22 2b 28 65 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 76 61 6c 75 65 7c 7c 22 30 22 29 2c 64 28 22 72 65 66 22 2c 69 29 2c 64 28 22 70 74 69 64 22 2c 65 2e 70 74 Data Ascii: =this.obfuscator.shouldObfuscate()?this.obfuscator.obfuscateString(n):n;return["a="+t.applicationID,d("sa",t.sa?""+t.sa:""),d("v",T.q4),R(t),d("ct",e.customTransaction),"&rst="+(0,g.z)(),"&ck=0","&s="+(e.session?.state.value\|\|"0"),d("ref",i),d("ptid",e.pt
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 6f 53 74 72 69 6e 67 28 33 36 29 3a 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 30 3d 3d 3d 65 3f 22 22 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 6e 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 22 22 3d 3d 3d 69 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 72 3d 6e 65 77 20 73 2e 52 52 28 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 65 7d 29 3b 69 3d 53 74 72 69 6e 67 28 69 29 2c 72 2e 73 68 6f 75 6c 64 4f 62 66 75 73 63 61 74 65 28 Data Ascii: oString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function u(e){var t=Object.hasOwnProperty("create")?Object.create(null):{},n=0;return function(i){if(void 0===i\|\|""===i)return"";var r=new s.RR({agentIdentifier:e});i=String(i),r.shouldObfuscate(
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 6f 6e 50 61 75 73 65 3f 65 2e 6f 6e 50 61 75 73 65 3a 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 6f 6e 52 65 66 72 65 73 68 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 6e 52 65 66 72 65 73 68 3f 65 2e 6f 6e 52 65 66 72 65 73 68 3a 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 6f 6e 52 65 73 75 6d 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 6e 52 65 73 75 6d 65 3f 65 2e 6f 6e 52 65 73 75 6d 65 3a 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 72 65 6d 61 69 6e 69 6e 67 4d 73 3d 76 6f 69 64 20 30 2c 65 2e 72 65 66 72 65 73 68 45 76 65 6e 74 73 7c 7c 28 65 2e 72 65 66 72 65 73 68 45 76 65 6e 74 73 3d 5b 22 63 6c 69 63 6b 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 73 63 72 6f 6c 6c 22 5d 29 3b 74 72 79 7b 74 68 69 73 2e 61 62 6f 72 74 43 Data Ascii: onPause?e.onPause:()=>{},this.onRefresh="function"==typeof e.onRefresh?e.onRefresh:()=>{},this.onResume="function"==typeof e.onResume?e.onResume:()=>{},this.remainingMs=void 0,e.refreshEvents\|\|(e.refreshEvents=["click","keydown","scroll"]);try{this.abortC
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 74 6f 72 61 67 65 22 29 29 3b 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3d 74 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 3d 72 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b 7d 2c 74 68 69 73 2e 73 79 6e 63 28 62 29 2c 74 68 69 73 2e 6b 65 79 3d 6e 2c 74 68 69 73 2e 73 74 61 74 65 2e 76 61 6c 75 65 3d 73 2c 74 68 69 73 2e 65 78 70 69 72 65 73 4d 73 3d 63 2c 74 68 69 73 2e 69 6e 61 63 74 69 76 65 4d 73 3d 75 2c 74 68 69 73 2e 65 65 3d 61 2e 65 65 2e 67 65 74 28 74 29 2c 28 30 2c 66 2e 65 6d 29 28 74 68 69 73 2e 65 65 29 3b 63 6f 6e 73 74 20 64 3d 74 68 69 73 2e 72 65 61 64 28 29 3b 63 3f 28 74 68 69 73 2e 73 74 61 74 65 2e 65 78 70 69 72 65 73 41 74 3d 64 3f 2e 65 78 70 69 72 65 73 41 74 7c 7c 74 68 69 73 2e 67 65 74 46 75 74 75 72 65 54 69 6d 65 73 Data Ascii: torage"));this.agentIdentifier=t,this.storage=r,this.state={},this.sync(b),this.key=n,this.state.value=s,this.expiresMs=c,this.inactiveMs=u,this.ee=a.ee.get(t),(0,f.em)(this.ee);const d=this.read();c?(this.state.expiresAt=d?.expiresAt\|\|this.getFutureTimes
2024-04-16 17:43:38 UTC	1378	IN	Data Raw: 45 78 70 69 72 65 64 28 74 2e 69 6e 61 63 74 69 76 65 41 74 29 3f 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 4d 28 22 69 6e 61 63 74 69 76 65 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 4d 28 22 64 75 72 61 74 69 6f 6e 22 2c 74 2c 21 30 29 2c 74 68 69 73 2e 72 65 73 65 74 28 29 29 3a 74 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 5a 29 28 22 46 61 69 6c 65 64 20 74 6f 20 72 65 61 64 20 66 72 6f 6d 20 73 74 6f 72 61 67 65 20 41 50 49 22 2c 65 29 2c 7b 7d 7d 7d 77 72 69 74 65 28 65 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 65 2e 75 70 64 61 74 65 64 41 74 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 73 79 6e 63 28 65 29 Data Ascii: Expired(t.inactiveAt)?(this.collectSM("inactive",this),this.collectSM("duration",t,!0),this.reset()):t}catch(e){return(0,r.Z)("Failed to read from storage API",e),{}}}write(e){try{if(!e\|\|"object"!=typeof e)return;return e.updatedAt=Date.now(),this.sync(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50179	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:37 UTC	1527	OUT	GET /resource/1712837356000/DSicon_favicon HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:38 UTC	414	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:38 GMT Content-Type: image/png Content-Length: 664 Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000,immutable P3P: CP="CUR OTR STA" Expires: Mon, 27 May 2024 02:23:23 GMT Last-Modified: Thu, 11 Apr 2024 12:09:16 GMT Server: sfdcedge X-SFDC-Request-Id: 6b8dbc50dbc286a83914429cbe64383b
2024-04-16 17:43:38 UTC	664	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 02 4a 49 44 41 54 78 9c ed 9a 31 72 da 40 14 86 bf 65 4c 1b ab a0 4b e3 1b 44 b9 80 47 a4 a6 20 7b 81 e0 1b c4 27 b0 73 02 0f 27 80 13 6c f0 4c 7a cb 34 29 2d 9f c0 34 e9 9c 19 39 2d c5 a6 50 98 10 82 41 0c 2b ad a4 a7 af 82 d5 ea f1 f3 09 3d 31 3b ab 70 84 d5 fa 01 08 5d d5 cb 49 0c 24 c0 3d 10 2b 63 d2 43 0b 28 17 29 ac d6 11 70 e7 a2 d6 11 a4 c0 0c f8 a2 8c 59 e4 3d a9 53 58 9c f2 09 80 11 f0 64 b5 9e 58 ad 83 3c 27 35 49 c0 3a 23 32 11 c3 7d 13 9b 2a 00 b2 5f c4 57 ab f5 f5 ae 49 4d 16 b0 e2 ca 6a 3d 79 ed a0 04 01 00 23 ab f5 cd b6 03 52 04 00 7c de d6 13 24 09 00 98 58 ad cf d6 07 a4 Data Ascii: PNGIHDR@@iqpHYs~JIDATx1r@eLKDG {'s'lLz4)-49-PA+=1;p]I$=+cC()pY=SXdX<'5I:#2}*_WIMj=y#R\|$X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50181	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:37 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: hEBTa8xsvkDBPcNiMVbcMg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:43:38 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:43:38 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50180	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	336	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 31 31 31 39 2e 38 39 39 39 39 39 39 39 39 39 39 34 32 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 Data Ascii: metrics=%5B%7B%22value%22%3A1119.8999999999942%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C
2024-04-16 17:43:38 UTC	690	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:43:38 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: cd50770850f1f765 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-04-16 17:43:38 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50182	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	501	OUT	OPTIONS /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	377	IN	HTTP/1.1 200 OK access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 1209600 access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:37 GMT server: istio-envoy connection: close transfer-encoding: chunked
2024-04-16 17:43:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50183	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	570	OUT	GET /messenger/i18n/en-us.json HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:38 GMT Content-Type: application/json Content-Length: 2477 Connection: close Server: nginx x-amz-id-2: zG8DnQVbbl9y7GAPpVm5BOedKVS/qqsfYh/Xo0CC+yJoLZbEC1tXNiiSmCPwqR92qExv2iyOMu4= x-amz-request-id: PGY9N6DSJYVRATW8 Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 5VxhXH0bSZ0fp1CH2FPkZtKFcDQTAhP_ ETag: "c7a28573ad8e4e0572990059d433fae2" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:38 UTC	2477	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ad 19 cb 6e 1c b9 f1 ee af 60 04 08 9b 20 f2 20 97 e4 b0 30 d6 90 47 16 ac ac 2d 6b 35 72 0c e7 c6 e9 ae 99 e1 aa 9b ec 90 6c 8d 26 8b 05 f6 be a7 1c 73 ca bf e5 0b f2 09 a9 2a b2 d9 ec c7 68 95 45 00 41 d3 64 3d 58 ac 17 8b c5 1f 5e 08 71 52 49 bd 6d e5 16 4e be 16 27 a0 5f b6 ee e4 8c a6 77 a6 a6 a9 1f f0 9b 46 20 4b b0 77 ca 57 8c f7 19 aa 82 e0 67 39 74 d5 ae 33 84 af 2c 88 1d e0 3f 6f f0 b7 6a 3a 5c 69 95 7c 87 b4 ab c2 02 e8 8f 0d e8 95 97 1e 57 45 aa 7e 5e 28 27 0c c2 a0 3c 41 b2 1f 59 a2 c2 e8 07 b0 4e 7a 65 b4 3b 2a da 07 70 0e 77 23 3e b9 6e 45 a5 9b d6 c7 e9 9b 4a 16 b0 33 15 52 10 f2 0a 74 29 a4 a8 03 70 b1 58 74 34 ce 4b eb 97 d9 82 91 9e 88 ee 76 28 1c fe f9 1d 88 35 6c 95 d6 4a 6f 85 d9 88 83 69 ad c8 a5 14 7b Data Ascii: n` 0G-k5rl&shEAd=X^qRImN'_wF KwWg9t3,?oj:\i\|WE~^('<AYNze;pw#>nEJ3Rt)pXt4Kv(5lJoi{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50187	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	1786	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&ref2=elqNone&tzo=-60&ms=260&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:38 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:37 GMT Connection: close Content-Length: 49
2024-04-16 17:43:38 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50186	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	1602	OUT	GET /visitor/v200/svrGP?pps=70&siteid=566810826&ms=260&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:38 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: application/javascript; charset=utf-8 Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:38 GMT Connection: close Content-Length: 79
2024-04-16 17:43:38 UTC	79	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 71 43 75 73 74 6f 6d 65 72 47 55 49 44 28 29 7b 20 72 65 74 75 72 6e 20 27 36 34 30 30 61 31 33 38 2d 32 33 32 63 2d 34 32 38 65 2d 38 37 38 36 2d 36 61 66 33 38 33 32 31 35 63 36 65 27 3b 20 7d Data Ascii: function GetElqCustomerGUID(){ return '6400a138-232c-428e-8786-6af383215c6e'; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50189	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	1068	OUT	POST /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6134&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=912&fe=4463&dc=1762&perf=%7B%22timing%22:%7B%22of%22:1713289411306,%22n%22:0,%22f%22:3,%22dn%22:78,%22dne%22:200,%22c%22:200,%22s%22:202,%22ce%22:737,%22rq%22:737,%22rp%22:912,%22rpe%22:913,%22di%22:2674,%22ds%22:2674,%22de%22:2674,%22dc%22:5373,%22l%22:5373,%22le%22:5375%7D,%22navigation%22:%7B%7D%7D HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	452	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Tue, 16 Apr 2024 17:43:38 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud access-control-expose-headers: Date timing-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130071-PDK
2024-04-16 17:43:38 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 31 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4f 44 45 78 4e 44 55 33 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4d 54 4d 34 4e 6a 45 30 4e 44 45 7a 4f 41 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":1,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"ODExNDU3fEJST1dTRVJ8QVBQTElDQVRJT058MTM4NjE0NDEzOA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50188	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	658	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 31 31 36 38 32 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289411682,"level":"INFO","message":"WS Reconnec
2024-04-16 17:43:38 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:43:38 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50190	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift2b6a0304876babca2d1e63d686a cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:43:38 GMT server: istio-envoy connection: close
2024-04-16 17:43:38 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50191	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	1547	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguage%3Den_US%26rsc_301&ref2=elqNone&tzo=-60&ms=260&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:39 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:38 GMT Connection: close Content-Length: 49
2024-04-16 17:43:39 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50192	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:38 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289417907&PageStart=1713289396931&PrevBundleTime=1713289415112&LastActivity=7494&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 490 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:38 UTC	490	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 97 5d 6b db 30 14 86 ff 8a a6 ab 16 34 59 b2 6c 59 72 cb a0 74 65 83 ac db 20 19 a1 94 5e b8 b1 da 88 2a 96 e7 af 6c 2b fd ef 53 da 25 b1 59 e9 d7 c5 58 41 b6 31 e6 f8 3d ef 73 2c d0 e1 f8 1a 8e d5 77 98 0a 04 a7 73 55 c0 54 8a 98 23 78 d4 35 35 4c 4f af e1 48 17 39 4c 29 21 08 1e 54 97 ab 18 ec 74 ad cf 8d 82 67 fd 94 1b b4 d6 c6 c9 46 4a 43 04 4b ab 8b 46 55 b6 53 15 44 94 73 49 71 8c 22 e1 1e 13 26 b0 20 eb 83 26 b7 21 89 48 cf 37 89 1f f3 55 ab db 5f c6 d2 7b 79 2f ef f5 98 d7 c2 b6 b5 ba 77 67 be ac 28 db 36 6b 27 b9 d9 d8 21 db 98 e2 70 bb dd ef 89 3c 0f 66 54 d6 29 8f f3 38 8f f3 b8 57 87 bb 6b bd ff b2 5f de c1 12 11 c6 c3 a9 cb 8d 7b 2e 2a 08 4e fa b0 db c8 40 f7 b2 75 7c 80 37 9c fd 3c d0 03 3d d0 03 ff 63 60 af Data Ascii: ]k04YlYrte ^l+S%YXA1=s,wsUT#x55LOH9L)!TtgFJCKFUSDsIq"& &!H7U_{y/wg(6k'!p<fT)8Wk_{.N@u\|7<=c`
2024-04-16 17:43:39 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:39 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:39 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 38 39 37 36 7d 0a Data Ascii: {"BundleTime":1713289418976}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50194	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	748	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6773&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 275 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	275	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 31 2c 2c 35 38 33 2c 34 71 66 2c 35 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 6e 67 65 72 2f 6d 65 73 73 65 6e 67 65 72 2e 68 74 6d 6c 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 61 65 62 65 65 38 62 39 2d 31 63 62 31 2d 34 31 39 36 2d 62 38 61 61 2d 37 66 38 39 66 31 30 39 33 37 66 31 2c 27 31 2c 21 21 3b 32 2c 2c 34 67 37 2c 70 77 2c 32 2c 32 2c 27 47 45 54 2c 35 6b 2c 27 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 3a 34 34 33 2c 27 2f 6d 65 73 73 65 6e 67 65 72 2f 69 31 38 6e 2f 65 6e 2d 75 73 2e 6a 73 6f 6e 2c 2c 36 39 6a 2c 2c 27 32 2c 21 21 21 3b 62 2c 2c 2c 2c 2c 33 2c 32 33 2c 33 65 2c 2c 32 2c 65 76 Data Ascii: bel.7;1,1,,583,4qf,5,'initialPageLoad,'https://apps.usw2.pure.cloud/messenger/messenger.html,1,1,,,!!!!'aebee8b9-1cb1-4196-b8aa-7f89f10937f1,'1,!!;2,,4g7,pw,2,2,'GET,5k,'apps.usw2.pure.cloud:443,'/messenger/i18n/en-us.json,,69j,,'2,!!!;b,,,,,3,23,3e,,2,ev
2024-04-16 17:43:39 UTC	318	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif access-control-allow-origin: https://apps.usw2.pure.cloud access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130063-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50168	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	2030	OUT	GET /s/ HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:39 UTC	431	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 16 Apr 2024 17:43:39 GMT Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Location: https://support.docusign.com/s/?language=en_US Server: sfdcedge X-SFDC-Request-Id: 984fdd60b0f9326c46389d65be1672ed
2024-04-16 17:43:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50196	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	808	OUT	GET /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6134&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=912&fe=4463&dc=1762&perf=%7B%22timing%22:%7B%22of%22:1713289411306,%22n%22:0,%22f%22:3,%22dn%22:78,%22dne%22:200,%22c%22:200,%22s%22:202,%22ce%22:737,%22rq%22:737,%22rp%22:912,%22rpe%22:913,%22di%22:2674,%22ds%22:2674,%22de%22:2674,%22dc%22:5373,%22l%22:5373,%22le%22:5375%7D,%22navigation%22:%7B%7D%7D HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-pdk-kfty2130091-PDK
2024-04-16 17:43:39 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50197	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	660	OUT	POST /track/?verbose=1&ip=1&_=1713289418312 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 2055 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	2055	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 53 63 72 6f 6c 6c 25 32 30 44 65 70 74 68 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 25 33 46 6c 61 6e 67 75 61 67 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Scroll%20Depth%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguag
2024-04-16 17:43:39 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:39 GMT Content-Length: 25 x-envoy-upstream-service-time: 17 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:39 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50200	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289418381&PageStart=1713289404678&PrevBundleTime=1713289415782&LastActivity=1132&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	4359	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 3c 8b 52 db 48 b6 bf a2 75 55 a8 64 4a b2 d5 0f b5 24 67 d9 dc 04 92 40 06 43 12 60 18 60 53 94 2c b5 ed 06 3d 3c 92 8c 31 53 f9 b6 fd a4 fb 0b f7 b4 e4 87 24 cb d8 90 50 bb 77 6b c2 94 30 ad d3 a7 cf fb d1 dd 9e 3f 1b c7 fc 8f 46 db 50 1b 67 03 1e 36 da cc 30 b1 da 78 7f 9b 26 8d f6 e5 9f 8d 5f 45 e8 35 da 48 d7 d5 c6 db b8 2f c7 1a b7 22 11 5d 9f 37 be 15 a7 7c 57 67 b0 86 39 07 05 44 83 34 1d 26 ed 56 cb 19 0a ed 3a 69 06 e2 6e e8 84 dc 6f ba 51 d0 4a 63 c7 bd 69 bd b9 e5 71 37 4a f8 36 da 12 43 78 5c 6d 23 13 11 6c d9 54 b7 09 66 0d 15 11 6a e2 26 b2 67 ff 2c a2 9a 30 c0 f4 f9 3f c3 52 1b 77 81 2f d7 8a f9 1f 23 9e a4 0d 55 87 9f 9a 99 7a e9 07 51 4c 69 d3 5c 00 58 f9 8b 02 6b 96 b1 8e b5 38 69 f6 46 be 9f a4 51 3c c9 Data Ascii: <RHuUdJ$g@C``S,=<1S$Pwk0?FPg60x&_E5H/"]7\|Wg9D4&V:inoQJciq7J6Cx\m#lTfj&g,0?Rw/#UzQLi\Xk8iFQ<
2024-04-16 17:43:39 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:39 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:39 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 31 39 34 34 34 7d 0a Data Ascii: {"BundleTime":1713289419444}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50202	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289417907&PageStart=1713289396931&PrevBundleTime=1713289415112&LastActivity=7494&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:39 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:39 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50203	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	764	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=7068&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	35	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 6c 6f 61 64 2c 34 35 62 2c 3b 65 2c 27 70 61 67 65 48 69 64 65 2c 35 67 63 2c Data Ascii: bel.6;e,'load,45b,;e,'pageHide,5gc,
2024-04-16 17:43:39 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130091-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50205	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	768	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=7074&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1096 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	1096	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 56 65 72 73 69 6f 6e 2f 31 2e 32 33 38 2e 30 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 73 70 61 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 Data Ascii: {"sm":[{"params":{"name":"Generic/Version/1.238.0/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/LoaderType/spa/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Ajax/Events/Exclud
2024-04-16 17:43:39 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130020-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50201	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289418377&PageStart=1713289404678&PrevBundleTime=1713289415782&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 17813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 35 37 32 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 35 37 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 74 72 61 63 6b 2f 3f 76 65 72 62 6f 73 65 3d 31 26 69 70 3d 31 26 5f 3d 31 37 31 33 32 38 39 34 30 39 33 32 36 22 2c 31 33 34 37 32 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 37 37 32 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 2c 30 2c 30 2c 31 33 34 37 32 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 34 Data Ascii: {"Seq":5,"When":6572,"Evts":[{"Kind":100,"Args":["visible"],"When":6572},{"Kind":57,"Args":[2,"https://api-js.mixpanel.com/track/?verbose=1&ip=1&_=1713289409326",13472.199999999983,772.6000000000058,"xmlhttprequest",0,0,13472.199999999983,0,0,0,0,0,0,0,14
2024-04-16 17:43:39 UTC	1429	OUT	Data Raw: 22 2c 30 2c 30 2c 31 37 32 36 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 39 35 33 2e 37 39 39 39 39 39 39 39 39 39 39 2c 31 37 32 36 36 2c 31 37 39 35 39 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 31 38 33 39 32 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 38 33 39 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 31 33 39 39 2c 31 33 39 39 2c 31 36 39 39 5d 2c 22 57 68 65 6e 22 3a 31 30 36 34 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 73 66 73 69 74 65 73 2f 61 Data Ascii: ",0,0,17261.899999999994,17263.099999999977,17263.099999999977,17263.099999999977,17953.79999999999,17266,17959.599999999977,18392.099999999977,18393.399999999994,1399,1399,1699],"When":10646},{"Kind":57,"Args":[2,"https://support.docusign.com/s/sfsites/a
2024-04-16 17:43:39 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:39 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50206	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	767	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=7075&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 544 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	544	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 6d 65 73 73 65 6e 67 65 72 2f 69 31 38 6e 2f 65 6e 2d 75 73 2e 6a 73 6f 6e 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 38 31 31 39 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 39 33 34 7d 2c 22 63 62 54 69 Data Ascii: {"xhr":[{"params":{"method":"GET","hostname":"apps.usw2.pure.cloud","port":"443","protocol":"https","host":"apps.usw2.pure.cloud:443","pathname":"/messenger/i18n/en-us.json","status":200},"metrics":{"count":1,"rxSize":{"t":8119},"duration":{"t":934},"cbTi
2024-04-16 17:43:39 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kpdk1780097-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50204	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	764	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=7076&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 92 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	92	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 2c 34 67 37 2c 70 77 2c 2c 2c 27 47 45 54 2c 35 6b 2c 27 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 3a 34 34 33 2c 27 2f 6d 65 73 73 65 6e 67 65 72 2f 69 31 38 6e 2f 65 6e 2d 75 73 2e 6a 73 6f 6e 2c 2c 36 39 6a 2c 2c 27 30 2c 21 21 21 Data Ascii: bel.7;2,,4g7,pw,,,'GET,5k,'apps.usw2.pure.cloud:443,'/messenger/i18n/en-us.json,,69j,,'0,!!!
2024-04-16 17:43:39 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130047-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50198	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	2045	OUT	GET /s/?language=en_US HTTP/1.1 Host: support.docusign.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:39 UTC	1577	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:39 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Set-Cookie: PicassoLanguage6f1e035b-4cd4-472e-b1c8-7d57e0e99336Published=; path=/; expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 Set-Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; path=/s; secure; SameSite=None Expires: Mon, 17 Apr 2023 17:43:39 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:39 GMT Link: </s/sfsites/auraFW/javascript/ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA/aura_prod.js>;rel=preload;as=script;nopush,</s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-248.10.5-5.0.10-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=>;rel=preload;as=script;nopush X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Server: sfdcedge X-SFDC-Request-Id: 4bdcfce6adda104a7d43352a9689da62
2024-04-16 17:43:39 UTC	14807	IN	Data Raw: 62 66 66 38 0d 0a 0a 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 53 69 67 6e 20 53 75 70 70 6f 72 74 20 43 65 6e 74 65 72 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 2f 2f 73 65 72 76 69 63 65 2e 66 6f 72 63 65 2e 63 6f 6d 2f 65 6d 62 65 64 64 65 64 73 65 Data Ascii: bff8 <!DOCTYPE html><html lang="en-US" dir="ltr"><head><title>DocuSign Support Center</title><meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://service.force.com/embeddedse
2024-04-16 17:43:39 UTC	16384	IN	Data Raw: 28 27 63 68 61 74 62 6f 74 41 63 74 69 76 65 50 61 67 65 27 2c 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 40 40 44 53 4f 6e 65 74 72 75 73 74 57 72 61 70 70 65 72 3a 73 74 61 72 74 69 6e 67 20 74 68 65 20 63 61 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 63 68 65 63 6b 4f 6e 65 54 72 75 73 74 57 72 61 70 70 65 72 28 30 29 3b 0a 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 0a 3c 2f 73 63 72 69 70 74 3e 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 6f 66 20 63 68 65 63 6b 20 66 6f 72 20 44 53 5f 6f 6e 73 74 72 75 73 74 57 72 61 70 70 65 72 20 2d 2d 3e 0a 3c 21 2d 2d 20 53 68 61 64 6f 77 20 44 4f 4d 20 41 6e 61 6c 79 74 69 63 73 20 73 6f 6c 75 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 Data Ascii: ('chatbotActivePage',()=>{ // console.log('@@DSOnetrustWrapper:starting the call'); checkOneTrustWrapper(0); }); </script>-->... end of check for DS_onstrustWrapper -->... Shadow DOM Analytics solution -->... in order to
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 49 6e 70 75 74 49 63 6f 6e 3a 72 67 62 28 31 37 34 2c 20 31 37 34 2c 20 31 37 34 29 3b 2d 2d 66 66 62 61 6e 2d 73 6c 69 64 65 72 48 61 6e 64 6c 65 53 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 36 29 20 30 20 32 70 78 20 33 70 78 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 59 65 6c 6c 6f 77 37 30 3a 72 67 62 28 32 32 38 2c 20 31 36 32 2c 20 31 29 3b 2d 2d 66 66 62 61 6e 2d 66 6f 6e 74 57 65 69 67 68 74 4c 69 67 68 74 3a 33 30 30 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 45 72 72 6f 72 3a 72 67 62 28 32 33 34 2c 20 30 2c 20 33 30 29 3b 2d 2d 66 66 62 61 6e 2d 76 61 72 53 70 61 63 69 6e 67 58 78 53 6d 61 6c 6c 3a 30 2e 32 35 72 65 6d 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c Data Ascii: -ffban-colorTextInputIcon:rgb(174, 174, 174);--ffban-sliderHandleShadow:rgba(0, 0, 0, 0.16) 0 2px 3px;--ffban-paletteYellow70:rgb(228, 162, 1);--ffban-fontWeightLight:300;--ffban-colorTextError:rgb(234, 0, 30);--ffban-varSpacingXxSmall:0.25rem;--ffban-col
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 29 3b 2d 2d 66 66 62 61 6e 2d 63 6f 6c 6f 72 54 65 78 74 57 61 72 6e 69 6e 67 3a 72 67 62 28 32 35 34 2c 20 31 34 37 2c 20 35 37 29 3b 2d 2d 66 66 62 61 6e 2d 73 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 52 65 67 75 6c 61 72 57 6f 66 66 3a 75 72 6c 28 2f 5f 73 6c 64 73 2f 66 6f 6e 74 73 2f 76 32 2e 33 2e 30 2f 53 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 48 6f 74 4f 72 61 6e 67 65 34 30 3a 72 67 62 28 31 37 30 2c 20 34 38 2c 20 31 29 3b 2d 2d 66 66 62 61 6e 2d 63 61 72 64 53 70 61 63 69 6e 67 4c 61 72 67 65 3a 31 2e 35 72 65 6d 3b 2d 2d 66 66 62 61 6e 2d 70 61 6c 65 74 74 65 52 65 64 33 30 3a 72 67 62 28 31 34 32 2c 20 33 2c 20 31 35 29 3b 2d 2d 66 66 62 61 6e 2d 66 6f 6e Data Ascii: );--ffban-colorTextWarning:rgb(254, 147, 57);--ffban-salesforceSansRegularWoff:url(/_slds/fonts/v2.3.0/SalesforceSans-Regular.woff);--ffban-paletteHotOrange40:rgb(170, 48, 1);--ffban-cardSpacingLarge:1.5rem;--ffban-paletteRed30:rgb(142, 3, 15);--ffban-fon
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 6c 74 44 69 73 61 62 6c 65 64 3a 72 67 62 28 32 30 31 2c 20 32 30 31 2c 20 32 30 31 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 42 72 61 6e 64 3a 72 67 62 28 32 37 2c 20 31 35 30 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 64 75 72 61 74 69 6f 6e 54 6f 61 73 74 4d 65 64 69 75 6d 3a 39 2e 36 73 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 75 74 74 6f 6e 49 63 6f 6e 41 63 74 69 76 65 3a 72 67 62 28 32 34 33 2c 20 32 34 33 2c 20 32 34 33 29 3b 2d 2d 70 73 65 2d 62 72 61 6e 64 48 65 61 64 65 72 43 6f 6e 74 72 61 73 74 57 65 61 6b 3a 72 67 62 28 31 34 35 2c 20 31 34 35 2c 20 31 34 35 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4e 65 77 3a 72 67 62 28 32 34 33 2c 20 32 34 33 Data Ascii: ltDisabled:rgb(201, 201, 201);--pse-colorTextBrand:rgb(27, 150, 255);--pse-durationToastMedium:9.6s;--pse-colorBackgroundButtonIconActive:rgb(243, 243, 243);--pse-brandHeaderContrastWeak:rgb(145, 145, 145);--pse-colorBackgroundNotificationNew:rgb(243, 243
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 6c 69 6e 65 48 65 69 67 68 74 54 65 78 74 3a 31 2e 35 3b 2d 2d 70 73 65 2d 77 69 64 74 68 53 74 61 67 65 4c 65 66 74 45 78 70 61 6e 64 65 64 3a 31 35 72 65 6d 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 45 72 72 6f 72 3a 72 67 62 28 32 35 34 2c 20 39 32 2c 20 37 36 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 42 75 74 74 6f 6e 42 72 61 6e 64 41 63 74 69 76 65 3a 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 66 6f 6e 74 46 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: (255, 255, 255);--pse-lineHeightText:1.5;--pse-widthStageLeftExpanded:15rem;--pse-colorBackgroundError:rgb(254, 92, 76);--pse-colorTextButtonBrandActive:rgb(255, 255, 255);--pse-fontFamily:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica,
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 4c 69 6e 6b 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 70 73 65 2d 70 61 67 65 48 65 61 64 65 72 54 69 74 6c 65 46 6f 6e 74 53 69 7a 65 3a 31 2e 31 32 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 33 3a 30 2e 38 31 32 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 32 3a 30 2e 37 35 72 65 6d 3b 2d 2d 70 73 65 2d 63 6f 6c 6f 72 54 65 78 74 4c 69 6e 6b 49 6e 76 65 72 73 65 44 69 73 61 62 6c 65 64 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 35 3a 31 72 65 6d 3b 2d 2d 70 73 65 2d 66 6f 6e 74 53 69 7a 65 34 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 70 73 65 2d 66 Data Ascii: 255, 255, 255);--pse-colorTextLink:rgb(1, 118, 211);--pse-pageHeaderTitleFontSize:1.125rem;--pse-fontSize3:0.8125rem;--pse-fontSize2:0.75rem;--pse-colorTextLinkInverseDisabled:rgba(255, 255, 255, 0.15);--pse-fontSize5:1rem;--pse-fontSize4:0.875rem;--pse-f
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 20 39 36 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 64 61 74 65 70 69 63 6b 65 72 43 6f 6c 6f 72 54 65 78 74 44 61 79 41 64 6a 61 63 65 6e 74 4d 6f 6e 74 68 3a 72 67 62 28 31 31 36 2c 20 31 31 36 2c 20 31 31 36 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 45 72 72 6f 72 41 6c 74 3a 72 67 62 28 32 35 34 2c 20 31 34 33 2c 20 31 32 35 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 73 68 61 64 6f 77 52 65 6d 69 6e 64 65 72 3a 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 30 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 72 61 6e 64 54 65 78 74 4c 69 6e 6b 41 63 74 69 76 65 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 70 61 67 65 48 65 61 64 65 72 43 6f 6c Data Ascii: 96);--qualtrics-datepickerColorTextDayAdjacentMonth:rgb(116, 116, 116);--qualtrics-colorBorderErrorAlt:rgb(254, 143, 125);--qualtrics-shadowReminder:0 2px 3px 0 rgba(0, 0, 0, 0.20);--qualtrics-brandTextLinkActive:rgb(1, 68, 134);--qualtrics-pageHeaderCol
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 69 63 73 2d 62 75 74 74 6f 6e 43 6f 6c 6f 72 42 6f 72 64 65 72 42 72 61 6e 64 50 72 69 6d 61 72 79 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 75 74 74 6f 6e 49 63 6f 6e 42 6f 75 6e 64 61 72 79 54 6f 75 63 68 3a 32 2e 37 35 72 65 6d 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 62 72 61 6e 64 42 61 63 6b 67 72 6f 75 6e 64 50 72 69 6d 61 72 79 54 72 61 6e 73 70 61 72 65 6e 74 3a 72 67 62 61 28 31 37 36 2c 20 31 39 36 2c 20 32 32 33 2c 20 30 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 66 69 6c 6c 48 65 61 64 65 72 42 75 74 74 6f 6e 46 6f 63 75 73 3a 72 67 62 28 31 2c 20 31 31 38 2c 20 32 31 31 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 45 72 72 6f 72 3a 72 67 62 28 32 33 34 2c 20 30 2c Data Ascii: ics-buttonColorBorderBrandPrimary:rgb(1, 118, 211);--qualtrics-buttonIconBoundaryTouch:2.75rem;--qualtrics-brandBackgroundPrimaryTransparent:rgba(176, 196, 223, 0);--qualtrics-fillHeaderButtonFocus:rgb(1, 118, 211);--qualtrics-colorBorderError:rgb(234, 0,
2024-04-16 17:43:40 UTC	16384	IN	Data Raw: 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 61 72 64 53 70 61 63 69 6e 67 4d 61 72 67 69 6e 3a 31 72 65 6d 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 54 65 78 74 42 72 6f 77 73 65 72 41 63 74 69 76 65 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 75 74 74 6f 6e 42 72 61 6e 64 48 6f 76 65 72 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 68 61 74 4d 65 73 73 61 67 65 43 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 4f 75 74 62 6f 75 6e 64 3a 72 67 62 28 31 2c 20 36 38 2c 20 31 33 34 29 3b 2d 2d 71 75 61 6c 74 72 69 63 73 2d 63 6f 6c 6f 72 54 65 78 74 49 63 6f 6e 44 65 66 61 75 6c 74 41 63 74 69 76 65 3a 72 Data Ascii: 4);--qualtrics-cardSpacingMargin:1rem;--qualtrics-colorTextBrowserActive:rgba(0, 0, 0, 0.4);--qualtrics-colorBackgroundButtonBrandHover:rgb(1, 68, 134);--qualtrics-chatMessageColorBackgroundOutbound:rgb(1, 68, 134);--qualtrics-colorTextIconDefaultActive:r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50207	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	486	OUT	GET /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6773&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:39 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:39 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130023-PDK
2024-04-16 17:43:39 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50208	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:39 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289418381&PageStart=1713289404678&PrevBundleTime=1713289415782&LastActivity=1132&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:40 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:40 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:40 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50193	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	586	OUT	GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	508	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Type: text/javascript Content-Length: 576 Connection: close Server: nginx x-amz-id-2: rvO0d/C2uDE+AtcGo5x0N+eUQhC0/dPt1/M1NHTFLSE5PsUKRiRpfruYZYArirv7G46y+tatoyw= x-amz-request-id: RM71BWMV2BSF9F2M Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Do6GzKcbdBLZHu8HmZ2SrItvQGsI2UND ETag: "5f4f7675750c433cd6fac71ba12dba62" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:41 UTC	576	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6d 65 73 73 65 6e 67 65 72 0a 20 2a 20 40 76 65 72 73 69 6f 6e 3a 20 32 2e 38 2e 31 0a 20 2a 20 40 6c 69 63 65 6e 73 65 3a 20 47 65 6e 65 73 79 73 20 54 65 6c 65 63 6f 6d 20 4c 61 62 73 0a 20 2a 2f 0a 28 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 5f 4d 65 73 73 65 6e 67 65 72 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 5f 4d 65 73 73 65 6e 67 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 5d 2c 7b 34 36 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 73 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 Data Ascii: /! messenger * @version: 2.8.1 * @license: Genesys Telecom Labs */(("undefined"!=typeof self?self:this).webpackJsonp_Messenger=("undefined"!=typeof self?self:this).webpackJsonp_Messenger\|\|[]).push([[10],{466:function(e,n,s){e.exports=function(){"u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50195	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	369	OUT	GET /messenger/i18n/en-us.json HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	534	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: application/json Content-Length: 2477 Connection: close Server: nginx x-amz-id-2: 9kAGlgLJ+Jos5g+NL1tBpDI6a51j+BtYqCvsgBy/vKxqKzC7G08rLPEydDtNupUmKIxSS8q4qqU= x-amz-request-id: B7SDZJEE6AW56PBR Cache-Control: max-age=0, no-cache Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 5VxhXH0bSZ0fp1CH2FPkZtKFcDQTAhP_ ETag: "c7a28573ad8e4e0572990059d433fae2" Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-16 17:43:46 UTC	2477	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ad 19 cb 6e 1c b9 f1 ee af 60 04 08 9b 20 f2 20 97 e4 b0 30 d6 90 47 16 ac ac 2d 6b 35 72 0c e7 c6 e9 ae 99 e1 aa 9b ec 90 6c 8d 26 8b 05 f6 be a7 1c 73 ca bf e5 0b f2 09 a9 2a b2 d9 ec c7 68 95 45 00 41 d3 64 3d 58 ac 17 8b c5 1f 5e 08 71 52 49 bd 6d e5 16 4e be 16 27 a0 5f b6 ee e4 8c a6 77 a6 a6 a9 1f f0 9b 46 20 4b b0 77 ca 57 8c f7 19 aa 82 e0 67 39 74 d5 ae 33 84 af 2c 88 1d e0 3f 6f f0 b7 6a 3a 5c 69 95 7c 87 b4 ab c2 02 e8 8f 0d e8 95 97 1e 57 45 aa 7e 5e 28 27 0c c2 a0 3c 41 b2 1f 59 a2 c2 e8 07 b0 4e 7a 65 b4 3b 2a da 07 70 0e 77 23 3e b9 6e 45 a5 9b d6 c7 e9 9b 4a 16 b0 33 15 52 10 f2 0a 74 29 a4 a8 03 70 b1 58 74 34 ce 4b eb 97 d9 82 91 9e 88 ee 76 28 1c fe f9 1d 88 35 6c 95 d6 4a 6f 85 d9 88 83 69 ad c8 a5 14 7b Data Ascii: n` 0G-k5rl&shEAd=X^qRImN'_wF KwWg9t3,?oj:\i\|WE~^('<AYNze;pw#>nEJ3Rt)pXt4Kv(5lJoi{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50209	172.64.155.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	607	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:40 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:40 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fa9e9af553f4-ATL
2024-04-16 17:43:40 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50210	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	3203	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%22NtKkCHTe6UlMnHtRcr0xKA%22%2C%22cuid%22%3A-1447585690%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:41 UTC	427	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=31536000,immutable Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:41 GMT Server: sfdcedge X-SFDC-Request-Id: a952fc8ebfc33525acc4bcffc1ebd6d4
2024-04-16 17:43:41 UTC	15957	IN	Data Raw: 33 65 61 39 0d 0a 3a 72 6f 6f 74 7b 2d 2d 6c 77 63 2d 6d 71 4c 61 72 67 65 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 2e 30 36 32 35 65 6d 29 3b 2d 2d 6c 77 63 2d 6d 71 53 69 6e 67 6c 65 43 6f 6c 75 6d 6e 52 65 63 6f 72 64 4c 61 79 6f 75 74 3a 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 39 39 70 78 29 3b 2d 2d 6c 77 63 2d 6d 71 4d 65 64 69 75 6d 4c 61 6e 64 73 63 61 70 65 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 20 61 6e 64 20 28 6d 69 6e 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3a 20 34 2f 33 29 3b 2d 2d 6c 77 63 2d 6d 71 4d 65 64 69 75 6d 3a 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 65 6d 29 3b 2d 2d 6c Data Ascii: 3ea9:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--l
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 2d 6c 77 63 2d 63 6f 6c 6f 72 47 72 61 79 32 3a 72 67 62 28 32 35 30 2c 20 32 35 30 2c 20 32 34 39 29 3b 2d 2d 6c 77 63 2d 6f 70 61 63 69 74 79 38 3a 30 2e 38 3b 2d 2d 6c 77 63 2d 73 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 42 6f 6c 64 49 74 61 6c 69 63 57 6f 66 66 32 3a 0d 0a 38 30 30 30 0d 0a 75 72 6c 28 2f 5f 73 6c 64 73 2f 66 6f 6e 74 73 2f 76 32 2e 33 2e 30 2f 53 61 6c 65 73 66 6f 72 63 65 53 61 6e 73 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 77 6f 66 66 32 29 3b 2d 2d 6c 77 63 2d 6f 70 61 63 69 74 79 35 3a 30 2e 35 3b 2d 2d 6c 77 63 2d 73 71 75 61 72 65 49 63 6f 6e 47 6c 6f 62 61 6c 49 64 65 6e 74 69 74 79 49 63 6f 6e 3a 31 2e 32 35 72 65 6d 3b 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 42 72 6f 77 73 65 72 3a 72 67 62 28 31 31 36 2c 20 Data Ascii: -lwc-colorGray2:rgb(250, 250, 249);--lwc-opacity8:0.8;--lwc-salesforceSansBoldItalicWoff2:8000url(/_slds/fonts/v2.3.0/SalesforceSans-BoldItalic.woff2);--lwc-opacity5:0.5;--lwc-squareIconGlobalIdentityIcon:1.25rem;--lwc-colorBackgroundBrowser:rgb(116,
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 6c 77 63 2d 70 61 6c 65 74 74 65 56 69 6f 6c 65 74 32 30 3a 72 67 62 28 37 32 2c 20 32 36 2c 20 38 34 29 3b 2d 2d 6c 77 63 2d 66 6f 6e 74 53 69 7a 65 48 65 61 64 69 6e 67 53 6d 61 6c 6c 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 50 69 63 6b 65 72 52 61 6e 67 65 49 6e 64 69 63 61 74 6f 72 53 69 7a 65 3a 30 2e 37 35 72 65 6d 3b 2d 2d 6c 77 63 2d 70 61 6c 65 74 74 65 4f 72 61 6e 67 65 31 35 3a 72 67 62 28 35 35 2c 20 33 30 2c 20 33 29 3b 2d 2d 6c 77 63 2d 73 6c 69 64 65 72 48 61 6e 64 6c 65 53 69 7a 65 3a 31 72 65 6d 3b 2d 2d 6c 77 63 2d 74 61 62 6c 65 42 6f 72 64 65 72 52 61 64 69 75 73 3a 30 3b 2d 2d 6c 77 63 2d 70 61 6c 65 74 74 65 54 65 61 6c 36 30 3a 72 67 62 28 36 2c 20 31 36 35 2c 20 31 35 34 29 3b 2d 2d 6c 77 63 2d 75 73 65 72 44 Data Ascii: lwc-paletteViolet20:rgb(72, 26, 84);--lwc-fontSizeHeadingSmall:0.875rem;--lwc-colorPickerRangeIndicatorSize:0.75rem;--lwc-paletteOrange15:rgb(55, 30, 3);--lwc-sliderHandleSize:1rem;--lwc-tableBorderRadius:0;--lwc-paletteTeal60:rgb(6, 165, 154);--lwc-userD
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 70 6c 69 74 5f 76 69 65 77 5f 68 65 61 64 65 72 20 2e 61 6e 63 68 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 62 61 73 65 2d 39 35 2c 20 76 61 72 28 2d 2d 6c 77 63 2d 73 70 6c 69 74 56 69 65 77 43 0d 0a 31 34 66 0d 0a 6f 6c 6f 72 42 61 63 6b 67 72 6f 75 6e 64 2c 72 67 62 28 32 34 33 2c 20 32 34 33 2c 20 32 34 33 29 29 29 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 6c 69 73 74 5f 76 69 65 77 5f 68 65 61 64 65 72 20 2e 61 6e 63 68 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 62 61 73 65 2d 39 35 2c 20 76 61 72 28 2d Data Ascii: plit_view_header .anchor{background-color:var(--slds-g-color-neutral-base-95, var(--lwc-splitViewC14folorBackground,rgb(243, 243, 243)))}.forcePlaceholder .placeholder.list_view_header .anchor{background-color:var(--slds-g-color-neutral-base-95, var(-
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 72 61 64 69 75 73 3a 31 36 70 78 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 42 75 74 74 6f 6e 7b 77 69 64 74 68 3a 32 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 6c 77 63 2d 73 70 61 63 69 6e 67 53 6d 61 6c 6c 2c 30 2e 37 35 72 65 6d 29 7d 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 53 74 65 70 3a 62 65 66 6f 72 65 2c 2e 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 20 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2e 70 61 74 68 20 2e 63 68 65 76 72 6f 6e 53 74 65 70 3a 61 66 74 65 72 7b 68 Data Ascii: radius:16px}.forcePlaceholder .placeholder.path .chevronButton{width:20%;margin:0;max-width:300px;padding-left:var(--lwc-spacingSmall,0.75rem)}.forcePlaceholder .placeholder.path .chevronStep:before,.forcePlaceholder .placeholder.path .chevronStep:after{h
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 67 65 74 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 75 69 50 6f 70 75 70 54 72 69 67 67 65 72 20 61 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 66 6f 72 63 65 41 63 74 69 6f 6e 4c 69 6e 6b 20 2e 5f 66 6f 63 75 73 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 66 6f 72 63 65 41 63 74 69 6f 6e 4c 69 6e 6b 20 2e 5f 75 6e 66 6f 63 75 73 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 66 6f 72 63 65 44 6f 74 73 53 70 69 6e 6e 65 72 20 2e 73 6c 64 73 2d 73 70 69 6e 6e 65 72 2e 73 6c 64 73 2d Data Ascii: get ul{list-style:none;margin:0;padding:0}.uiPopupTrigger a[aria-disabled=true]{pointer-events:none;cursor:default}.forceActionLink ._focused{text-decoration:underline}.forceActionLink ._unfocused{text-decoration:none}.forceDotsSpinner .slds-spinner.slds-
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 69 6f 6e 42 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 6c 77 63 2d 73 70 61 63 69 6e 67 58 53 6d 61 6c 6c 2c 30 2e 35 72 65 6d 29 7d 2e 66 6f 72 63 65 4d 6f 62 69 6c 65 41 63 74 69 6f 6e 4d 6f 64 61 6c 20 2e 66 6f 72 63 65 41 63 74 69 6f 6e 42 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 74 68 69 6e 7d 2e 66 6f 72 63 65 4d 6f 62 69 6c 65 4f 76 65 72 6c 61 79 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 76 61 72 28 2d 2d 6c 77 63 2d 64 75 72 61 74 69 6f 6e 51 75 69 63 6b 6c 79 2c 30 2e 31 73 29 20 6c 69 6e 65 61 72 2c 6f 70 61 63 69 74 79 20 76 61 72 28 2d 2d 6c 77 63 2d 64 75 72 61 74 Data Ascii: ionButton{width:100%;margin-bottom:var(--lwc-spacingXSmall,0.5rem)}.forceMobileActionModal .forceActionButton:last-child{-webkit-text-stroke-width:thin}.forceMobileOverlay{transition:transform var(--lwc-durationQuickly,0.1s) linear,opacity var(--lwc-durat
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 65 6c 6c 6f 77 2d 31 30 3a 23 32 38 31 32 30 32 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 31 35 3a 23 32 65 32 32 30 34 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 32 30 3a 23 34 66 32 31 30 30 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 33 30 3a 23 36 66 33 34 30 30 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 34 30 3a 23 38 63 34 62 30 32 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 35 30 3a 23 61 38 36 34 30 33 3b 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 70 61 6c 65 74 74 65 2d 79 65 6c 6c 6f 77 2d 36 30 3a Data Ascii: ellow-10:#281202;--slds-g-color-palette-yellow-15:#2e2204;--slds-g-color-palette-yellow-20:#4f2100;--slds-g-color-palette-yellow-30:#6f3400;--slds-g-color-palette-yellow-40:#8c4b02;--slds-g-color-palette-yellow-50:#a86403;--slds-g-color-palette-yellow-60:
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 6c 61 73 74 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 6c 69 73 74 20 6c 69 2b 6c 69 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 7d 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 62 72 61 6e 64 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 6c 61 73 74 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 69 63 6f 6e 2d 62 72 61 6e 64 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 62 72 61 6e 64 2b 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d Data Ascii: slds-button-group .slds-button+.slds-button--last .slds-button,.slds-button-group-list li+li .slds-button{margin-left:-1px}.slds-button-group .slds-button_brand+.slds-button_last .slds-button_icon-brand,.slds-button-group .slds-button_brand+.slds-button--
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 64 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 2d 2d 69 6e 76 65 72 73 65 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 6c 64 73 2d 67 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 2d 6f 70 61 63 69 74 79 2d 31 30 2c 20 76 61 72 28 2d 2d 6c 77 63 2d 63 6f 6c 6f 72 42 6f 72 64 65 72 42 75 74 74 6f 6e 49 6e 76 65 72 73 65 44 69 73 61 62 6c 65 64 2c 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 29 29 7d 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f 69 6e 76 65 72 73 65 2c 2e 73 6c 64 73 2d 62 75 74 74 6f 6e 5f Data Ascii: d,.slds-button--inverse[disabled],.slds-button--inverse:disabled{background-color:transparent;border-color:var(--slds-g-color-neutral-100-opacity-10, var(--lwc-colorBorderButtonInverseDisabled,rgba(255, 255, 255, 0.15)))}.slds-button_inverse,.slds-button_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50211	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	2920	OUT	GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22publishedChangelistNum%22%3A%22193%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A23+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289404.51.0.0; fs_lua=1.1713289404675; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:41 UTC	419	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=900 Access-Control-Allow-Origin: * Vary: Accept-Encoding Last-Modified: Mon, 15 Apr 2024 17:43:41 GMT Server: sfdcedge X-SFDC-Request-Id: 0261b92ae2f056495336cd06d652d828
2024-04-16 17:43:41 UTC	15965	IN	Data Raw: 38 30 30 30 0d 0a 77 69 6e 64 6f 77 2e 41 75 72 61 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 41 75 72 61 20 3d 20 7b 7d 29 3b 0a 77 69 6e 64 6f 77 2e 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 20 7c 7c 20 28 77 69 6e 64 6f 77 2e 41 75 72 61 2e 62 6f 6f 74 73 74 72 61 70 20 3d 20 7b 7d 29 3b 0a 77 69 6e 64 6f 77 2e 41 75 72 61 2e 61 70 70 42 6f 6f 74 73 74 72 61 70 20 3d 20 7b 22 64 61 74 61 22 3a 7b 22 61 70 70 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 7d 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 73 63 68 65 Data Ascii: 8000window.Aura \|\| (window.Aura = {});window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/*[0]","attributes":{"values":{"sche
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 69 64 22 3a 22 31 31 66 66 30 61 39 31 2d 39 30 61 35 2d 34 66 62 32 2d 39 35 38 36 2d 38 31 39 31 66 34 38 34 34 64 35 30 22 2c 22 73 65 6f 5f 74 69 74 6c 65 22 3a 22 51 75 65 73 74 69 6f 6e 20 44 65 74 61 69 6c 22 2c 22 70 61 67 65 5f 74 79 70 65 5f 69 6e 66 6f 22 3a 22 7b 5c 22 61 6c 77 61 79 73 5f 70 75 62 6c 69 63 5c 22 3a 5c 22 44 45 46 41 55 4c 54 5c 22 2c 5c 22 73 65 6f 5f 69 6e 64 65 78 5c 22 3a 5c 22 49 4e 44 45 58 5c 22 2c 5c 22 64 79 6e 61 6d 69 63 5c 22 3a 66 61 6c 73 65 2c 5c 22 66 6c 65 78 69 70 61 67 65 5f 74 79 70 65 5c 22 3a 5c 22 43 4f 4d 4d 5f 52 45 43 4f 52 44 5f 50 41 47 45 5c 22 2c 5c 22 70 61 67 65 5f 72 65 66 65 72 65 6e 63 65 5f 74 79 70 65 5c 22 3a 5c 22 73 74 61 6e 64 61 72 64 5f 5f 72 65 63 6f 72 64 50 61 67 65 5c 22 2c 5c 22 Data Ascii: id":"11ff0a91-90a5-4fb2-9586-8191f4844d50","seo_title":"Question Detail","page_type_info":"{\"always_public\":\"DEFAULT\",\"seo_index\":\"INDEX\",\"dynamic\":false,\"flexipage_type\":\"COMM_RECORD_PAGE\",\"page_reference_type\":\"standard__recordPage\",\"
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 73 22 3a 22 49 22 2c 22 61 22 3a 7b 22 63 6f 6d 6d 54 68 65 6d 65 47 72 6f 75 70 49 64 22 3a 5b 22 63 6f 6d 6d 54 68 65 6d 65 47 72 6f 75 70 49 64 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 22 63 6d 70 49 64 22 3a 5b 22 63 6d 70 49 64 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 22 64 61 74 61 22 3a 5b 22 64 61 74 61 22 2c 22 61 75 72 61 3a 2f 2f 4f 62 6a 65 63 74 22 2c 22 49 22 2c 66 61 6c 73 65 2c 6e 75 6c 6c 5d 7d 7d 2c 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 6c 74 6e 67 3a 62 65 66 6f 72 65 4c 6f 61 64 69 6e 67 52 65 73 6f 75 72 63 65 73 22 2c 22 74 22 3a 22 43 4f 4d 50 4f 4e 45 4e 54 22 2c 22 78 73 22 3a 22 47 22 7d 2c 7b 22 64 65 73 Data Ascii: s":"I","a":{"commThemeGroupId":["commThemeGroupId","aura://String","I",false],"cmpId":["cmpId","aura://String","I",false],"data":["data","aura://Object","I",false,null]}},{"descriptor":"markup://ltng:beforeLoadingResources","t":"COMPONENT","xs":"G"},{"des
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 61 72 67 65 74 3a 5c 22 73 74 61 6e 64 61 72 64 5f 5f 4f 70 74 69 6d 69 7a 65 72 5c 22 2c 73 75 62 4e 6f 64 65 49 64 3a 5c 22 68 6f 6d 65 5c 22 7d 7d 2c 67 28 61 2c 62 29 3b 63 61 73 65 20 5c 22 64 69 73 63 6f 76 65 72 79 5f 6d 6f 64 65 6c 5f 6d 65 74 72 69 63 73 5c 22 3a 72 65 74 75 72 6e 20 62 3d 24 41 2e 67 65 74 45 76 74 28 5c 22 66 6f 72 63 65 3a 6e 61 76 69 67 61 74 65 54 6f 55 52 4c 5c 22 29 2c 62 2e 73 65 74 50 61 72 61 6d 73 28 7b 75 72 6c 3a 5c 22 2f 61 6e 61 6c 79 74 69 63 73 2f 67 6f 61 6c 2f 5c 22 2b 61 2e 74 61 72 67 65 74 7d 29 2c 62 3b 63 61 73 65 20 5c 22 6e 65 77 5f 67 75 69 64 61 6e 63 65 5f 63 65 6e 74 65 72 5f 73 63 65 6e 61 72 69 6f 5c 22 3a 76 61 72 20 62 3d 24 41 2e 67 65 74 45 76 74 28 5c 22 6d 61 72 6b 75 70 3a 2f 2f 61 64 6d 69 Data Ascii: arget:\"standard__Optimizer\",subNodeId:\"home\"}},g(a,b);case \"discovery_model_metrics\":return b=$A.getEvt(\"force:navigateToURL\"),b.setParams({url:\"/analytics/goal/\"+a.target}),b;case \"new_guidance_center_scenario\":var b=$A.getEvt(\"markup://admi
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 74 72 61 69 6e 74 73 5b 62 2b 5c 22 5f 70 6f 69 6e 74 65 72 5c 22 5d 2e 65 6e 61 62 6c 65 28 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 50 6f 69 6e 74 65 72 4f 76 65 72 6c 61 70 5c 22 5d 26 26 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 50 6f 69 6e 74 65 72 4f 76 65 72 6c 61 70 5c 22 5d 2e 65 6e 61 62 6c 65 28 29 3b 61 2e 63 6f 6e 73 74 72 61 69 6e 74 73 5b 62 2b 5c 22 70 6f 69 6e 74 65 72 42 6f 78 5c 22 5d 2e 65 6e 61 62 6c 65 28 29 3b 74 68 69 73 2e 6c 69 62 2e 70 61 6e 65 6c 50 6f 73 69 74 69 6f 6e 69 6e 67 2e 72 65 70 6f 73 69 74 69 6f 6e 28 29 7d 7d 2c 72 65 6e 64 65 72 65 72 3a 7b 72 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 2e 69 6e 69 74 53 74 79 6c 65 28 61 29 3b 72 65 74 75 72 6e 20 61 2e 73 75 70 Data Ascii: traints[b+\"_pointer\"].enable();a.constraints[b+\"PointerOverlap\"]&&a.constraints[b+\"PointerOverlap\"].enable();a.constraints[b+\"pointerBox\"].enable();this.lib.panelPositioning.reposition()}},renderer:{render:function(a,b){b.initStyle(a);return a.sup
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 69 66 28 21 62 2e 73 75 63 63 65 73 73 66 75 6c 26 26 28 66 7c 7c 63 29 29 7b 74 72 79 7b 74 68 69 73 2e 73 74 6f 70 53 74 72 65 61 6d 69 6e 67 28 61 29 7d 63 61 74 63 68 28 6c 29 7b 24 41 2e 6c 6f 67 28 6c 29 7d 74 68 69 73 2e 69 73 50 6f 6c 6c 69 6e 67 28 61 29 7c 7c 74 68 69 73 2e 69 6e 69 74 50 6f 6c 6c 69 6e 67 28 61 29 7d 7d 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 29 3b 63 3d 5c 22 2f 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5c 22 2b 28 61 2e 67 65 74 28 5c 22 76 2e 69 73 43 6f 6d 6d 75 6e 69 74 79 5c 22 29 3f 5c 22 2f 5c 22 2b 24 41 2e 67 65 74 28 5c 22 24 53 69 74 65 2e 6e 65 74 77 6f 72 6b 49 64 5c 22 29 3a 5c 22 5c 22 29 3b 63 3d 62 2e 73 75 62 73 63 72 69 62 65 28 63 2c 5c 6e 2d 31 2c 24 41 2e 67 65 74 Data Ascii: if(!b.successful&&(f\|\|c)){try{this.stopStreaming(a)}catch(l){$A.log(l)}this.isPolling(a)\|\|this.initPolling(a)}}}.bind(this)));c=\"/s/notifications/notification\"+(a.get(\"v.isCommunity\")?\"/\"+$A.get(\"$Site.networkId\"):\"\");c=b.subscribe(c,\n-1,$A.get
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 65 73 63 72 69 70 74 6f 72 22 3a 22 75 73 65 53 74 72 65 61 6d 69 6e 67 22 2c 22 76 61 6c 75 65 22 3a 7b 22 65 78 70 72 54 79 70 65 22 3a 22 46 55 4e 43 54 49 4f 4e 22 2c 22 63 6f 64 65 22 3a 22 66 75 6e 63 74 69 6f 6e 28 63 6d 70 2c 66 6e 29 7b 72 65 74 75 72 6e 20 28 21 28 63 6d 70 2e 67 65 74 28 5c 22 76 2e 5f 69 73 43 6f 6d 6d 75 6e 69 74 79 49 6e 48 79 62 72 69 64 41 70 70 5c 22 29 29 26 26 66 6e 2e 6e 65 28 24 41 2e 67 65 74 28 5c 22 24 53 69 74 65 2e 63 6f 6e 74 65 78 74 2e 73 63 68 65 6d 61 5c 22 29 2c 5c 22 44 65 76 65 6c 6f 70 6d 65 6e 74 5c 22 29 29 3b 7d 22 2c 22 61 72 67 73 22 3a 5b 7b 22 65 78 70 72 54 79 70 65 22 3a 22 50 52 4f 50 45 52 54 59 22 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 66 6f 72 63 65 Data Ascii: escriptor":"useStreaming","value":{"exprType":"FUNCTION","code":"function(cmp,fn){return (!(cmp.get(\"v._isCommunityInHybridApp\"))&&fn.ne($A.get(\"$Site.context.schema\"),\"Development\"));}","args":[{"exprType":"PROPERTY","byValue":false,"target":"force
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 22 3a 22 73 61 6c 65 73 66 6f 72 63 65 49 64 65 6e 74 69 74 79 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d 2c 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 66 6f 72 63 65 63 68 61 74 74 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d 2c 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6c 69 65 6e 74 73 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d 2c 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 63 6f 6d 6d 65 72 63 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d 2c 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 61 75 72 61 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d 2c 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 66 6f 72 63 65 44 69 73 63 6f 76 65 72 79 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 36 30 2e 30 22 7d Data Ascii: ":"salesforceIdentity","version":"60.0"},{"namespace":"forcechatter","version":"60.0"},{"namespace":"clients","version":"60.0"},{"namespace":"commerce","version":"60.0"},{"namespace":"aura","version":"60.0"},{"namespace":"forceDiscovery","version":"60.0"}
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 61 75 72 61 3a 65 78 70 72 65 73 73 69 6f 6e 22 7d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 76 61 6c 75 65 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 76 61 6c 75 65 22 2c 22 76 61 6c 75 65 22 3a 7b 22 65 78 70 72 54 79 70 65 22 3a 22 50 52 4f 50 45 52 54 59 22 2c 22 62 79 56 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 74 61 72 67 65 74 22 3a 22 66 6c 65 78 69 70 61 67 65 3a 70 61 67 65 22 2c 22 70 61 74 68 22 3a 22 76 2e 62 6f 64 79 22 7d 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 5d 2c 22 63 63 22 3a 22 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 43 6f 6d 70 6f 6e 65 6e 74 43 6c 61 73 73 28 5c 22 6d 61 72 6b 75 70 3a 2f 2f 66 6c 65 78 69 70 Data Ascii: scriptor":"markup://aura:expression"},"attributes":{"values":{"value":{"descriptor":"value","value":{"exprType":"PROPERTY","byValue":false,"target":"flexipage:page","path":"v.body"}}}}}]}}}}]}],"cc":"$A.componentService.addComponentClass(\"markup://flexip
2024-04-16 17:43:41 UTC	16384	IN	Data Raw: 3a 22 74 61 67 22 2c 22 76 61 6c 75 65 22 3a 22 6c 69 22 7d 2c 22 62 6f 64 79 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 62 6f 64 79 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 61 75 72 61 3a 68 74 6d 6c 22 7d 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 48 54 4d 4c 41 74 74 72 69 62 75 74 65 73 22 2c 22 76 61 6c 75 65 22 3a 7b 22 72 6f 6c 65 22 3a 22 6f 70 74 69 6f 6e 22 2c 22 69 64 22 3a 22 6f 70 74 69 6f 6e 31 22 2c 22 63 6c 61 73 73 22 3a 22 73 6c 64 73 2d 6d 65 64 69 61 20 73 6c 64 73 2d 6c 69 73 74 62 6f 78 5f Data Ascii: :"tag","value":"li"},"body":{"descriptor":"body","value":[{"componentDef":{"descriptor":"markup://aura:html"},"attributes":{"values":{"HTMLAttributes":{"descriptor":"HTMLAttributes","value":{"role":"option","id":"option1","class":"slds-media slds-listbox_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50212	104.18.32.137	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755faa1a9bd6757-ATL
2024-04-16 17:43:41 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50213	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:40 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289419943&PageStart=1713289404678&PrevBundleTime=1713289419444&LastActivity=2695&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 10389 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:40 UTC	10389	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5d 8b 92 db 36 96 fd 15 8d 52 71 25 55 52 0b 6f 90 ed 78 53 7e 66 52 e3 24 de 71 67 52 b3 4e ca 45 49 54 b7 62 b5 a4 11 d5 7e cc d4 7c db 7e d2 fe c2 5e 80 54 8b b8 a0 48 aa 9b b4 33 6e fa 21 89 57 b8 78 1c 00 17 17 c0 01 f4 af fe cb f8 1f fd 53 35 e8 ff 72 11 2f fb a7 94 12 0a 0f 4f df 6e 93 fe e9 ab 7f f5 ff 32 5f 4e fb a7 4c 0e fa 0f 37 e7 46 d4 bf d8 6e d7 c9 e9 68 94 5c ad d7 ab cd f6 64 ba 9a 5c 25 f3 f3 e5 c9 64 75 39 8a d6 f1 fb d1 3f 57 ab cb f9 f2 75 b4 5e bf 7e fd 3f f6 f3 b3 f9 f2 3c de bc d8 cc 97 db fe a0 ff cd 9f 9e fc f4 f8 ec ef 2f 9e f6 2e b6 97 8b de 8b 9f 1f 3d ff fe 71 ef d7 fe 70 34 fa 85 3f 1e 8d 9e 9c 3d e9 fd f9 ec 87 e7 3d 71 42 68 ef 6c 13 2d 93 f9 76 be 5a 46 8b d1 e8 e9 8f bf f6 21 a8 c9 04 e4 Data Ascii: ]6Rq%URoxS~fR$qgRNEITb~\|~^TH3n!WxS5r/On2_NL7Fnh\d\%du9?Wu^~?</.=qp4?==qBhl-vZF!
2024-04-16 17:43:41 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:41 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 31 30 32 36 7d 0a Data Ascii: {"BundleTime":1713289421026}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50216	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	855	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289420072&PageStart=1713289404678&PrevBundleTime=1713289415782 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 17813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 35 37 32 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 35 37 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 74 72 61 63 6b 2f 3f 76 65 72 62 6f 73 65 3d 31 26 69 70 3d 31 26 5f 3d 31 37 31 33 32 38 39 34 30 39 33 32 36 22 2c 31 33 34 37 32 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 37 37 32 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 2c 30 2c 30 2c 31 33 34 37 32 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 34 Data Ascii: {"Seq":5,"When":6572,"Evts":[{"Kind":100,"Args":["visible"],"When":6572},{"Kind":57,"Args":[2,"https://api-js.mixpanel.com/track/?verbose=1&ip=1&_=1713289409326",13472.199999999983,772.6000000000058,"xmlhttprequest",0,0,13472.199999999983,0,0,0,0,0,0,0,14
2024-04-16 17:43:41 UTC	1429	OUT	Data Raw: 22 2c 30 2c 30 2c 31 37 32 36 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 32 36 33 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 37 39 35 33 2e 37 39 39 39 39 39 39 39 39 39 39 2c 31 37 32 36 36 2c 31 37 39 35 39 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 31 38 33 39 32 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 38 33 39 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 31 33 39 39 2c 31 33 39 39 2c 31 36 39 39 5d 2c 22 57 68 65 6e 22 3a 31 30 36 34 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 73 66 73 69 74 65 73 2f 61 Data Ascii: ",0,0,17261.899999999994,17263.099999999977,17263.099999999977,17263.099999999977,17953.79999999999,17266,17959.599999999977,18392.099999999977,18393.399999999994,1399,1399,1699],"When":10646},{"Kind":57,"Args":[2,"https://support.docusign.com/s/sfsites/a
2024-04-16 17:43:41 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:41 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 31 31 36 30 7d 0a Data Ascii: {"BundleTime":1713289421160}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50217	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	610	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 417 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	417	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 6f 2d 31 39 44 46 42 4d 2d 6e 61 31 22 2c 22 55 73 65 72 49 64 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 3f 6c 61 6e 67 75 61 67 65 3d 65 6e 5f 55 53 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 3f 6c 61 6e 67 75 61 67 65 3d 2d 2d 62 6c 6f 63 6b 65 64 2d 2d 22 2c 22 57 69 64 74 68 22 3a 31 32 38 30 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 33 2e 30 22 2c 22 52 65 66 65 72 72 65 72 22 3a 22 Data Ascii: {"OrgId":"o-19DFBM-na1","UserId":"","Url":"https://support.docusign.com/s/?language=en_US","Base":"https://support.docusign.com/s/?language=--blocked--","Width":1280,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion":"1.3.0","Referrer":"
2024-04-16 17:43:41 UTC	323	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:43:41 UTC	932	IN	Data Raw: 32 30 37 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 207b{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-16 17:43:41 UTC	1255	IN	Data Raw: 63 6f 6d 6d 2d 74 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 2d 68 6f 73 74 20 61 2e 63 6f 6d 6d 2d 74 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 6c 69 6e 6b 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 5b 68 72 65 66 5d 20 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 2d 6d 65 6e 75 2d 69 74 65 6d 2d 75 6e 69 66 69 65 64 2d 6c 61 79 6f 75 74 2e 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e 69 66 69 65 64 4c 61 79 6f 75 74 5f 74 69 6c Data Ascii: comm-tile-menu__item.community_navigation-tileMenuItem_tileMenuItem-host a.comm-tile-menu__item-link.community_navigation-tileMenuItem_tileMenuItem[href] community_navigation-tile-menu-item-unified-layout.community_navigation-tileMenuItemUnifiedLayout_til
2024-04-16 17:43:41 UTC	1255	IN	Data Raw: 65 6d 65 4e 61 76 2d 61 6c 69 67 6e 2d 6c 65 66 74 2e 76 69 73 69 62 6c 65 2d 6c 69 6e 6b 73 20 6c 69 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6d 65 6e 75 2d 69 74 65 6d 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2e 6d 61 69 6e 4e 61 76 49 74 65 6d 20 61 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2d 6c 69 6e 6b 2e 63 6f 6d 6d 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 74 6f 70 2d 6c 65 76 65 6c 2d 69 74 65 6d 2d 6c 69 6e 6b 2d 2d 61 63 74 69 76 65 2e 6a 73 2d 74 6f 70 2d 6c 65 76 65 6c 2d 6d 65 6e 75 2d 69 74 65 6d 2e 6c 69 6e 6b 42 74 6e 5b 68 72 65 66 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 33 7d 2c 7b Data Ascii: emeNav-align-left.visible-links li.comm-navigation__menu-item.comm-navigation__top-level-item.mainNavItem a.comm-navigation__top-level-item-link.comm-navigation__top-level-item-link--active.js-top-level-menu-item.linkBtn[href]","Consent":false,"Type":3},{
2024-04-16 17:43:41 UTC	1255	IN	Data Raw: 6d 65 55 74 69 6c 73 43 6f 6e 74 61 69 6e 65 72 20 64 69 76 2e 74 68 65 6d 65 50 72 6f 66 69 6c 65 4d 65 6e 75 2e 74 68 65 6d 65 55 74 69 6c 20 64 69 76 20 64 69 76 20 64 69 76 20 63 6f 6d 6d 75 6e 69 74 79 5f 75 73 65 72 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 2e 63 6f 6d 6d 2d 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6d 65 6e 75 20 64 69 76 20 64 69 76 20 75 6c 5b 72 6f 6c 65 3d 5c 22 6d 65 6e 75 5c 22 5d 20 6c 69 20 61 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 6f 76 65 72 5b 72 6f 6c 65 3d 5c 22 6d 65 6e 75 69 74 65 6d 5c 22 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 33 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 66 73 2d 65 78 63 6c 75 64 65 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 Data Ascii: meUtilsContainer div.themeProfileMenu.themeUtil div div div community_user-user-profile-menu.comm-user-profile-menu div div ul[role=\"menu\"] li a.menu-item-hover[role=\"menuitem\"]","Consent":false,"Type":3},{"Selector":".fs-exclude","Consent":false,"Typ
2024-04-16 17:43:41 UTC	1255	IN	Data Raw: 55 73 65 42 75 66 66 65 72 65 64 50 4f 22 3a 74 72 75 65 2c 22 55 73 65 43 6c 69 65 6e 74 53 69 64 65 49 64 22 3a 74 72 75 65 2c 22 55 73 65 43 6f 6d 70 72 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 55 73 65 4c 5a 45 6e 63 6f 64 69 6e 67 22 3a 74 72 75 65 2c 22 55 73 65 53 74 61 74 65 6c 65 73 73 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 55 73 65 53 74 61 74 69 63 53 65 74 74 69 6e 67 73 22 3a 74 72 75 65 2c 22 57 68 69 74 65 6c 69 73 74 45 6c 65 6d 65 6e 74 73 22 3a 74 72 75 65 7d 2c 22 4f 72 67 53 65 74 74 69 6e 67 73 22 3a 7b 22 41 74 74 72 69 62 75 74 65 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 7b 22 54 61 72 67 65 74 22 3a 30 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 73 72 63 22 2c 22 41 63 74 69 6f 6e 22 3a 32 7d 2c 7b 22 54 61 72 67 65 Data Ascii: UseBufferedPO":true,"UseClientSideId":true,"UseCompression":true,"UseLZEncoding":true,"UseStatelessConsent":true,"UseStaticSettings":true,"WhitelistElements":true},"OrgSettings":{"AttributeBlocklist":[{"Target":0,"Tag":"*","Name":"src","Action":2},{"Targe
2024-04-16 17:43:41 UTC	1255	IN	Data Raw: 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 6f 70 74 69 6f 6e 22 2c 22 4e 61 6d 65 22 3a 22 6c 61 62 65 6c 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 2d 63 6f 6d 2e 61 67 69 6c 65 62 69 74 73 2e 6f 6e 65 70 61 73 73 77 6f 72 64 2e 69 6e 69 74 69 61 6c 2d 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 2d 6b 77 63 61 63 68 65 64 76 61 6c 75 65 22 2c 22 41 Data Ascii: n":1},{"Target":2,"Tag":"option","Name":"label","Action":1},{"Target":2,"Tag":"","Name":"placeholder","Action":1},{"Target":1,"Tag":"","Name":"data-com.agilebits.onepassword.initial-value","Action":0},{"Target":1,"Tag":"*","Name":"data-kwcachedvalue","A
2024-04-16 17:43:41 UTC	1121	IN	Data Raw: 65 6c 74 61 2d 62 61 73 65 22 2c 22 65 74 61 67 22 2c 22 65 78 70 69 72 65 73 22 2c 22 69 6d 22 2c 22 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 22 2c 22 6c 69 6e 6b 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 2c 22 70 65 72 6d 61 6e 65 6e 74 22 2c 22 70 33 70 22 2c 22 70 72 61 67 6d 61 22 2c 22 70 72 6f 78 79 2d 61 75 74 68 65 6e 74 69 63 61 74 65 22 2c 22 70 75 62 6c 69 63 2d 6b 65 79 2d 70 69 6e 73 22 2c 22 72 65 74 72 79 2d 61 66 74 65 72 22 2c 22 70 65 72 6d 61 6e 65 6e 74 22 2c 22 73 65 72 76 65 72 22 2c 22 73 74 61 74 75 73 22 2c 22 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 22 2c 22 74 72 61 69 6c 65 72 22 2c 22 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 74 6b 22 2c 22 75 70 67 72 61 64 65 22 2c 22 76 61 72 79 Data Ascii: elta-base","etag","expires","im","last-modified","link","location","permanent","p3p","pragma","proxy-authenticate","public-key-pins","retry-after","permanent","server","status","strict-transport-security","trailer","transfer-encoding","tk","upgrade","vary

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50214	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	560	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:41 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50218	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289419943&PageStart=1713289404678&PrevBundleTime=1713289419444&LastActivity=2695&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:41 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50220	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	868	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289420558&PageStart=1713289404678&PrevBundleTime=1713289421160&DeltaT=2186 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 105799 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 31 31 30 31 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 32 35 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 61 70 65 78 2f 7a 6f 6f 6d 69 6e 5f 61 70 70 5f 5f 5a 6f 6f 6d 69 6e 46 69 6e 67 65 72 50 72 69 6e 74 22 2c 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 5c 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 5c 22 20 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 5c 22 3e 22 5d 2c 22 57 68 65 6e 22 3a 31 31 30 31 36 2c 22 46 49 64 22 3a 37 33 33 7d 2c 7b 22 4b 69 6e 64 Data Ascii: {"Seq":6,"When":11016,"Evts":[{"Kind":25,"Args":["https://support.docusign.com/apex/zoomin_app__ZoominFingerPrint","<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">"],"When":11016,"FId":733},{"Kind
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 70 4c 69 6e 6b 54 61 72 67 65 74 22 2c 22 3a 74 69 74 6c 65 22 2c 34 37 38 2c 32 35 2c 22 3c 53 50 41 4e 22 2c 5b 33 33 32 2c 33 5d 2c 22 6a 5f 69 64 30 22 2c 32 33 2c 22 5c 6e 5c 6e 20 20 20 20 22 2c 5b 33 37 30 2c 34 5d 2c 22 66 72 61 6d 65 2d 77 72 61 70 22 2c 5b 32 38 31 2c 32 5d 2c 22 5c 6e 5c 6e 20 20 20 20 20 20 20 20 22 2c 32 33 2c 22 5c 6e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 22 2c 32 33 2c 22 5c 6e 20 20 20 20 22 2c 5b 32 38 34 2c 32 5d 2c 22 5c 6e 5c 6e 5c 6e 22 2c 5b 32 38 35 2c 32 5d 2c 5b 35 30 36 2c 33 5d 2c 5b 34 31 37 2c 32 5d 2c 5b 32 39 39 2c 33 5d 2c 5b 34 31 32 2c 34 5d 2c 5b 32 39 39 2c 33 5d 2c 5b 33 37 30 2c 34 5d 2c 22 63 6c 65 61 72 69 6e 67 42 6f 78 22 2c 5b 33 37 30 2c 34 5d 2c 5b 33 34 39 2c 32 5d 2c 5b 33 37 30 2c 34 5d 2c 22 Data Ascii: pLinkTarget",":title",478,25,"<SPAN",[332,3],"j_id0",23,"\n\n ",[370,4],"frame-wrap",[281,2],"\n\n ",23,"\n\n\n ",23,"\n ",[284,2],"\n\n\n",[285,2],[506,3],[417,2],[299,3],[412,4],[299,3],[370,4],"clearingBox",[370,4],[349,2],[370,4],"
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 30 30 30 30 30 30 30 30 31 37 35 2c 32 34 32 35 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 36 37 33 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 2c 32 34 32 37 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 36 37 33 2e 39 30 30 30 30 30 30 30 30 30 32 33 33 2c 32 39 34 34 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 39 36 31 2e 39 30 30 30 30 30 30 30 30 30 32 33 33 2c 30 2c 30 2c 33 30 30 5d 2c 22 57 68 65 6e 22 3a 31 31 32 34 32 2c 22 46 49 64 22 3a 37 33 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 31 31 22 2c 35 37 30 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 32 34 36 38 2e 36 39 39 39 39 39 39 39 39 39 Data Ascii: 00000000175,2425.8000000000175,2673.7000000000116,2427.8000000000175,2673.9000000000233,2944.8000000000175,2961.9000000000233,0,0,300],"When":11242,"FId":733},{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=11",570.8000000000175,2468.6999999999
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 30 30 30 30 30 30 30 30 31 37 35 2c 34 37 31 31 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 34 37 35 38 2c 32 36 36 30 39 2c 32 36 36 30 39 2c 32 36 39 30 39 5d 2c 22 57 68 65 6e 22 3a 31 31 32 34 33 2c 22 46 49 64 22 3a 37 33 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 6a 73 6c 69 62 72 61 72 79 2f 31 36 39 38 33 33 36 36 36 34 32 34 38 2f 73 66 64 63 2f 4e 65 74 77 6f 72 6b 54 72 61 63 6b 69 6e 67 2e 6a 73 22 2c 35 37 36 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 30 2c 22 73 63 72 69 70 74 22 2c 30 2c 30 2c 35 37 36 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 35 37 36 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 35 37 36 2e 32 30 30 Data Ascii: 00000000175,4711.8000000000175,4758,26609,26609,26909],"When":11243,"FId":733},{"Kind":57,"Args":[2,"https://support.docusign.com/jslibrary/1698336664248/sfdc/NetworkTracking.js",576.2000000000116,0,"script",0,0,576.2000000000116,576.2000000000116,576.200
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 36 37 31 2e 38 39 39 39 39 39 39 39 39 39 39 34 32 2c 34 38 30 37 32 2c 34 38 30 37 32 2c 30 5d 2c 22 57 68 65 6e 22 3a 31 31 32 34 34 2c 22 46 49 64 22 3a 37 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 31 22 2c 31 36 32 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 34 32 2e 37 30 30 30 30 30 30 30 30 30 31 31 36 34 2c 22 6c 69 6e 6b 22 2c 30 2c 30 2c 31 36 32 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 31 36 32 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 31 36 32 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 31 36 32 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 31 36 32 39 2e 33 39 39 39 39 39 39 Data Ascii: 671.8999999999942,48072,48072,0],"When":11244,"FId":716},{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=1",1629.3999999999942,42.70000000001164,"link",0,0,1629.3999999999942,1629.3999999999942,1629.3999999999942,1629.3999999999942,1629.3999999
2024-04-16 17:43:41 UTC	16384	OUT	Data Raw: 39 39 39 39 39 39 39 39 38 32 35 2c 35 31 36 30 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 35 31 36 30 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 35 31 36 30 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 35 32 30 39 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 35 33 33 36 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 35 33 33 36 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 31 31 32 34 35 2c 22 46 49 64 22 3a 37 33 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 31 33 22 2c 35 31 36 30 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 31 37 37 2c 22 6c 69 6e 6b 22 2c 30 2c 30 2c 35 31 36 30 2e Data Ascii: 99999999825,5160.6999999999825,5160.6999999999825,5160.6999999999825,5209.799999999988,5336.299999999988,5336.600000000006,0,0,0],"When":11245,"FId":732},{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=13",5160.799999999988,177,"link",0,0,5160.
2024-04-16 17:43:41 UTC	7495	OUT	Data Raw: 31 38 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 36 39 30 34 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 36 39 31 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 34 33 2c 34 33 2c 30 5d 2c 22 57 68 65 6e 22 3a 31 31 32 34 35 2c 22 46 49 64 22 3a 37 33 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 72 65 73 6f 75 72 63 65 2f 31 37 31 30 39 37 34 37 35 30 30 30 30 2f 7a 6f 6f 6d 69 6e 5f 61 70 70 5f 5f 5a 6f 6f 6d 69 6e 5f 46 50 2f 66 70 2e 6d 69 6e 2e 6a 73 22 2c 35 31 36 33 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 36 31 37 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 2c 22 73 63 72 69 70 74 22 2c 30 2c 30 2c 35 31 36 33 2e 33 39 39 39 39 39 39 39 39 Data Ascii: 18.100000000006,6904.600000000006,6914.399999999994,43,43,0],"When":11245,"FId":732},{"Kind":57,"Args":[2,"https://support.docusign.com/resource/1710974750000/zoomin_app__Zoomin_FP/fp.min.js",5163.399999999994,617.2999999999884,"script",0,0,5163.399999999
2024-04-16 17:43:42 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:42 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 31 36 33 38 7d 0a Data Ascii: {"BundleTime":1713289421638}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50221	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	591	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=5&ClientTime=1713289420072&PageStart=1713289404678&PrevBundleTime=1713289415782 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:42 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:42 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:42 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50222	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:42 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:41 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:42 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50224	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:41 UTC	666	OUT	POST /track/?verbose=1&ip=1&_=1713289420951 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 2055 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:41 UTC	2055	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 53 63 72 6f 6c 6c 25 32 30 44 65 70 74 68 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 25 33 46 6c 61 6e 67 75 61 67 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Scroll%20Depth%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2FcontactSupport%3Flanguag
2024-04-16 17:43:42 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:42 GMT Content-Length: 25 x-envoy-upstream-service-time: 25 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:42 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50223	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:42 UTC	1302	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422
2024-04-16 17:43:42 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:42 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:42 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50228	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	555	OUT	GET /rec/integrations?OrgId=o-19DFBM-na1 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	261	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Length: 1835 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:43 UTC	994	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e 20 3d 20 66 75 Data Ascii: (function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn = fu
2024-04-16 17:43:43 UTC	841	IN	Data Raw: 27 73 74 61 74 27 2c 20 7b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 54 79 70 65 3a 20 27 49 4e 54 45 47 52 41 54 49 4f 4e 5f 49 4e 49 54 49 41 4c 49 5a 45 44 27 2c 0a 20 20 20 20 20 20 20 20 70 61 79 6c 6f 61 64 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 72 6f 76 69 64 65 72 5f 69 64 3a 20 27 71 75 61 6c 74 72 69 63 73 27 2c 0a 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 5f 73 74 61 74 75 73 3a 20 27 53 55 43 43 45 53 53 27 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 3b 0a 20 20 20 20 20 20 46 53 2e 6c 6f 67 28 22 77 61 72 6e 22 2c 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 6f 72 20 72 75 6e 20 51 53 49 2e 41 50 Data Ascii: 'stat', { eventType: 'INTEGRATION_INITIALIZED', payload: { provider_id: 'qualtrics', event_status: 'SUCCESS' } }); } catch(e) { console.warn(e); FS.log("warn", "Failed to load or run QSI.AP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50226	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	1936	OUT	GET /apex/zoomin_app__ZoominGAPage HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false If-Modified-Since: Tue, 16 Apr 2024 17:43:26 GMT
2024-04-16 17:43:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:43 GMT Last-Modified: Tue, 16 Apr 2024 17:43:43 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 3938738b6aec7e10099c500acbdbe211
2024-04-16 17:43:43 UTC	3276	IN	Data Raw: 63 63 30 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 2f 31 36 33 39 30 37 38 34 36 34 30 30 30 2f 7a 6f 6f 6d 69 6e 5f 61 70 70 5f 5f 65 76 65 6e 74 5f 6c Data Ascii: cc0<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="/resource/1639078464000/zoomin_app__event_l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50225	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	1941	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false If-Modified-Since: Tue, 16 Apr 2024 17:43:32 GMT
2024-04-16 17:43:43 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:28 GMT Last-Modified: Tue, 16 Apr 2024 17:43:28 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: be70a08b1f45663bbc1be2ddd8d14c59
2024-04-16 17:43:43 UTC	15821	IN	Data Raw: 33 65 30 34 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 73 74 6f 6d 65 72 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 Data Ascii: 3e04<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html class=""><head><title>Customer Community</title><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="
2024-04-16 17:43:43 UTC	68	IN	Data Raw: 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 70 61 67 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 74 69 6d 65 3a 20 32 34 6d 73 20 2d 2d 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: div></div></body></html>... page generation time: 24ms -->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50230	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	3315	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:43 UTC	447	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=1800 Expires: Mon, 17 Apr 2023 17:43:43 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:43 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 37b57fa3fd4c7a8bf08ce8e19a7c371e
2024-04-16 17:43:43 UTC	15937	IN	Data Raw: 33 65 39 35 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6c 61 79 6f 75 74 3a 2f 2f 73 69 74 65 66 6f 72 63 65 2d 67 65 6e 65 72 61 74 65 64 70 61 67 65 2d 65 62 39 35 35 36 61 38 2d 61 62 64 39 2d 34 64 37 39 2d 62 32 30 63 2d 65 38 31 62 61 32 35 32 36 63 66 62 2e 63 31 39 33 22 7d 2c 22 6f 72 69 67 69 6e 61 6c 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 70 61 67 65 4c 6f 61 64 65 72 22 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 70 61 67 65 4c Data Ascii: 3e95{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/*[0]","attributes":{"values":{"pageL
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 27 6d 6f 72 65 2d 70 72 6f 64 75 63 74 73 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 73 6c 64 73 2d 74 65 78 74 2d 61 6c 69 67 6e 5f 63 65 6e 74 65 72 27 3e 5c 6e 20 20 20 20 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 6f 6d 0d 0a 38 30 30 30 0d 0a 6d 75 6e 69 74 79 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6d 6d 75 6e 69 74 79 3c 5c 2f 61 3e 3c 5c 2f 64 69 76 3e 5c 6e 3c 5c 2f 64 69 76 3e 22 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 2c 22 68 65 61 64 65 72 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 68 65 61 64 65 72 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f Data Ascii: class='more-products-integrations slds-text-align_center'>\n <div><a href=\"https://com8000munity.docusign.com/\" target=\"_blank\">Community<\/a><\/div>\n<\/div>"}}}}]}}}}]}}}}]},"header":{"descriptor":"header","value":[{"componentDef":{"descripto
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 69 63 68 54 65 78 74 22 2c 22 73 75 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 75 69 3a 6f 75 74 70 75 74 52 69 63 68 54 65 78 74 22 2c 22 61 64 22 3a 5b 5b 22 62 6f 64 79 22 2c 22 61 75 72 61 3a 2f 2f 41 75 72 61 2e 43 6f 6d 70 6f 6e 65 6e 74 5b 5d 22 2c 22 47 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 47 22 2c 66 61 6c 73 65 5d 2c 5b 22 64 69 72 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 6c 74 72 22 5d 2c 5b 22 6e 61 6d 65 73 70 61 63 65 4f 76 65 72 72 69 64 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 5b 22 61 63 74 69 6f 6e 61 62 6c 65 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 Data Ascii: ichText","su":"markup://ui:outputRichText","ad":[["body","aura://Aura.Component[]","G",false,[]],["class","aura://String","G",false],["dir","aura://String","I",false,"ltr"],["namespaceOverride","aura://String","I",false],["actionable","aura://Boolean","I"
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 66 65 72 65 6e 63 65 5c 22 29 3b 62 2e 70 61 67 65 53 65 72 76 69 63 65 2e 70 72 6f 76 69 64 65 53 65 72 76 69 63 65 28 63 2c 5c 6e 7b 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 52 65 66 65 72 65 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 7d 65 6c 73 65 20 64 0d 0a 31 36 33 0d 0a 3d 62 2e 70 61 67 65 53 65 72 76 69 63 65 2e 67 65 74 53 65 72 76 69 63 65 28 61 29 2e 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 52 65 66 65 72 65 6e 63 65 28 29 2c 62 2e 6f 62 73 65 72 76 61 62 6c 65 73 2e 74 6f 41 75 72 61 43 6f 6d 70 6f 6e 65 6e 74 28 64 2c 61 2c 5c 22 76 2e 70 61 67 65 52 65 66 65 72 65 6e 63 65 5c 22 29 7d 2c 6f 6e 50 61 67 65 52 65 66 65 72 65 6e 63 65 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b 62 Data Ascii: ference\");b.pageService.provideService(c,\n{getCurrentPageReference:function(){return d}})}else d163=b.pageService.getService(a).getCurrentPageReference(),b.observables.toAuraComponent(d,a,\"v.pageReference\")},onPageReferenceChange:function(a,c,b){b
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 5b 22 72 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 4f 62 6a 65 63 74 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 22 5d 2c 5b 22 66 69 65 6c 64 73 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 5b 5d 22 2c 22 49 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 5b 22 6e 65 65 64 52 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 2c 66 61 6c 73 65 2c 66 61 6c 73 65 5d 2c 5b 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 22 5d 2c 5b 22 63 6d 73 52 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 2c 66 61 6c 73 65 2c 66 61 6c 73 65 5d 2c 5b 22 61 63 74 69 76 65 4c 61 6e Data Ascii: //String","I",false],["record","aura://Object","I",false,""],["fields","aura://String[]","I",false,[]],["needRecord","aura://Boolean","I",false,false],["errorMessage","aura://String","I",false,""],["cmsRecord","aura://Boolean","I",false,false],["activeLan
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 69 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 5c 22 6f 62 6a 65 63 74 5c 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 6f 28 65 29 3d 3d 3d 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 70 61 72 61 6d 65 74 65 72 73 2e 72 65 71 75 69 72 65 64 2e 65 76 65 72 79 28 6e 3d 3e 6e 20 69 6e 20 65 29 7d 63 6f 6e 73 74 20 75 3d 7b 6f 76 65 72 72 69 64 65 73 3a 7b 68 65 61 64 65 72 73 3a 7b 5c 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 5c 22 3a 5c 22 6e 6f 2d 63 61 63 68 65 5c 22 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 2c 74 2c 72 2c 6f 3d 66 61 6c 73 65 2c 69 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 72 65 71 75 69 72 65 64 3a 6e 2c 72 65 73 6f 75 72 63 65 54 79 70 65 3a 74 2c 74 79 Data Ascii: i(e){return typeof e===\"object\"&&e!==null&&o(e)===false}function a(e,n){return n.parameters.required.every(n=>n in e)}const u={overrides:{headers:{\"Cache-Control\":\"no-cache\"}}};function s(e,n,t,r,o=false,i){return{name:e,required:n,resourceType:t,ty
2024-04-16 17:43:43 UTC	16384	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 3a 74 69 6c 65 4d 65 6e 75 49 74 65 6d 22 2c 22 6e 22 3a 22 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 22 2c 22 61 64 22 3a 5b 5b 22 69 74 65 6d 22 2c 6e 75 6c 6c 2c 22 47 22 2c 66 61 6c 73 65 2c 7b 7d 5d 5d 7d 2c 7b 22 78 73 22 3a 22 50 22 2c 22 63 6f 22 3a 22 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 3a 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e 69 66 69 65 64 4c 61 79 6f 75 74 27 2c 20 5c 22 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e Data Ascii: navigation:tileMenuItem","n":"community_navigation/tileMenuItem","ad":[["item",null,"G",false,{}]]},{"xs":"P","co":"function() { $A.componentService.addModule('markup://community_navigation:tileMenuItemUnifiedLayout', \"community_navigation/tileMenuItemUn
2024-04-16 17:43:43 UTC	9523	IN	Data Raw: 6e 20 61 77 61 69 74 20 69 2e 6a 73 6f 6e 28 29 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 5c 22 42 61 64 20 72 65 71 75 65 73 74 5c 22 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 63 6f 6e 73 74 20 63 3d 5c 22 34 34 2e 30 5c 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 63 6f 6e 73 74 20 65 3d 24 41 21 3d 3d 6e 75 6c 6c 3f 24 41 2e 73 74 6f 72 61 67 65 53 65 72 76 69 63 65 2e 76 65 72 73 69 6f 6e 3a 63 3b 72 65 74 75 72 6e 20 65 7d 65 2e 64 65 62 6f 75 6e 63 65 3d 69 3b 65 2e 66 65 74 63 68 4a 73 6f 6e 3d 75 3b 65 2e 67 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 73 3b 65 2e 68 61 73 4d 6f 64 69 66 69 65 72 4b 65 79 3d 6e 3b 65 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 3d 6f 3b Data Ascii: n await i.json()}throw new Error(\"Bad request\")}return null}catch(e){return null}}const c=\"44.0\";function s(){const e=$A!==null?$A.storageService.version:c;return e}e.debounce=i;e.fetchJson=u;e.getAppVersion=s;e.hasModifierKey=n;e.isUndefinedOrNull=o;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50229	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	2712	OUT	POST /s/sfsites/aura?r=1&aura.ApexAction.execute=5&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 3124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-LDS-Endpoints: ApexActionController.execute:CommonUtility.configValue, ApexActionController.execute:RSC_FooterController.getExcludeAnalytics, ApexActionController.execute:RSC_LanguageSelectorController.getLanguageOptions, ApexActionController.execute:CommonUtility.configValues, ApexActionController.execute:RSC_LanguageSelectorController.getCurrentUserLanguage X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 356780000015c41924 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:43 UTC	3124	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 30 33 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 70 65 78 25 33 41 25 32 46 25 32 46 52 53 43 5f 43 68 61 74 42 6f 74 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 53 50 47 6c 6f 62 61 6c 53 65 74 74 69 6e 67 47 65 6e 65 73 79 73 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 6d 61 72 6b 75 70 25 33 41 25 32 46 25 32 46 63 25 33 41 43 53 50 5f 47 65 6e 65 73 79 73 43 68 61 74 62 6f 74 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 37 44 25 37 44 25 32 43 25 37 42 25 32 32 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22103%3Ba%22%2C%22descriptor%22%3A%22apex%3A%2F%2FRSC_ChatBot%2FACTION%24getCSPGlobalSettingGenesys%22%2C%22callingDescriptor%22%3A%22markup%3A%2F%2Fc%3ACSP_GenesysChatbot%22%2C%22params%22%3A%7B%7D%7D%2C%7B%22
2024-04-16 17:43:43 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:43 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:43 GMT Server-Timing: Total;dur=204 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 356780000015c41924
2024-04-16 17:43:43 UTC	2928	IN	Data Raw: 62 36 34 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 31 30 33 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 64 65 70 6c 6f 79 6d 65 6e 74 49 64 22 3a 22 32 65 30 31 34 63 66 32 2d 62 36 63 36 2d 34 35 30 34 2d 38 37 32 66 2d 33 32 63 66 38 61 34 62 33 30 31 36 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 2d 75 73 77 32 22 7d 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 2c 7b 22 69 64 22 3a 22 31 30 34 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 74 72 75 73 74 Data Ascii: b64{"actions":[{"id":"103;a","state":"SUCCESS","returnValue":{"deploymentId":"2e014cf2-b6c6-4504-872f-32cf8a4b3016","environment":"prod-usw2"},"error":[]},{"id":"104;a","state":"SUCCESS","returnValue":{"returnValue":"https://support.docusign.com/s/trust

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50232	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	603	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=6&ClientTime=1713289420558&PageStart=1713289404678&PrevBundleTime=1713289421160&DeltaT=2186 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:43 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:43 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50233	130.211.34.183	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713289420951 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:43 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:43 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50234	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	660	OUT	POST /track/?verbose=1&ip=1&_=1713289422400 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1141 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	1141	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 50 61 67 65 25 32 30 56 69 65 77 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 25 33 46 6c 61 6e 67 75 61 67 65 25 33 44 65 6e 5f 55 53 25 32 32 25 32 43 25 32 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Page%20View%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US%22%2C%2
2024-04-16 17:43:43 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:43 GMT Content-Length: 25 x-envoy-upstream-service-time: 40 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:43 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50231	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	696	OUT	GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "5f4f7675750c433cd6fac71ba12dba62" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:43 GMT Connection: close Server: nginx x-amz-id-2: om5H22ktiUFKkm605R2Cc7pAGtuTk9qFekY/O7p8CPLYT6nYcSTSbCsU1vvBrUpzZGtn6rfYm4k= x-amz-request-id: 9BD60YRC48G3S9VY Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Do6GzKcbdBLZHu8HmZ2SrItvQGsI2UND ETag: "5f4f7675750c433cd6fac71ba12dba62" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50236	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	901	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=1&ClientTime=1713289422530&PageStart=1713289420652&PrevBundleTime=0&LastActivity=1593&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 159104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 0b 93 1b c7 91 2e fa 57 e6 ca e1 b0 e5 98 19 a2 1b ef f1 ee 3d cb 97 24 7a 49 89 9e 19 59 b2 7c 36 1c 0d a0 31 03 13 40 83 00 86 e4 68 e3 fc b6 f3 93 ce 5f b8 95 f5 cc aa ca ac 2a d0 f7 9c ab 8d 2b db a4 ac 99 7e 54 57 65 65 e5 e3 cb 2f ff f3 8b 9b f6 fd 17 57 d5 f9 17 3f dc b7 db 2f ae ea f3 2f 5e 7e 38 1e be b8 fa db 7f 7e f1 ef ab ed 42 fc 64 78 fe c5 d3 fd 1d fc e8 8b fb e3 71 77 b8 7a f2 e4 f0 b0 db 75 fb e3 e5 a2 9b 3f 1c 56 77 db cb 79 b7 79 72 78 f2 df d6 cd f6 ee a1 b9 6b ff f5 e2 62 b6 ee e6 ef da c5 c5 c5 17 e7 5f fc cb ff f5 e2 bb e7 b7 7f 7d fb f2 ec fe b8 59 ff df e2 27 c5 0f 6a b7 7f ff fe 46 dc f0 c5 7f d8 11 fe 8f 73 33 b4 49 35 9d d8 c1 2d 9b f5 a1 3d af e8 eb 3e e3 13 cc 9b b7 cd 87 d5 5d 73 6c c9 11 Data Ascii: .W=$zIY\|61@h_*+~TWee/W?//^~8~Bdxqwzu?Vwyyrxkb_}Y'jFs3I5-=>]sl
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: d0 fa 79 17 c1 86 eb 7d 05 42 2d b4 ea 98 d8 dd 75 2a 2e 1e 1b f5 6b f1 bb 0b 71 ea 37 1b 6c bf f7 27 bd f1 70 b0 98 fa 8f 71 b5 7e 32 a6 83 ba 7c f9 22 a2 f7 86 2c 29 ab 50 55 59 e8 0c f1 82 21 6c d8 d7 1c 62 83 af 68 2a de 5f 25 1c f3 86 25 b8 c8 59 41 28 4a 1e dd c3 b5 e2 fa 9c 4e 5c 9c a4 99 83 1e 08 65 25 b8 15 67 cd 53 74 d9 66 ed 8c 31 11 15 96 f8 d6 cb d3 30 0b 86 ab 15 f4 ae 21 2a b1 a3 32 40 13 bb 35 31 bb 78 35 22 50 14 b6 51 75 f8 42 1c 22 0b 08 b2 8d 7b 21 5d 89 9d 18 6b 54 4b 42 03 e9 f3 b8 ea 9f 52 eb 20 87 d3 28 c5 ac 33 09 6d d4 eb 84 2f 50 21 9a cd 91 06 86 f0 0c 52 41 04 6b f8 51 85 86 a6 1a ef cf 0f 62 bd 24 d7 68 c5 f0 1c f8 64 c7 24 ff 7e b8 12 23 b4 12 53 a9 dc 99 5d aa 4e bf 59 b3 47 b4 70 c5 96 79 54 6a 93 02 d4 46 43 44 0d 80 25 Data Ascii: y}B-u.kq7l'pq~2\|",)PUY!lbh_%%YA(JN\e%gStf10!*2@51x5"PQuB"{!]kTKBR (3m/P!RAkQb$hd$~#S]NYGpyTjFCD%
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: 51 2f 5a 36 cd 99 10 8c bd 1d 49 41 2d 48 98 a0 b0 dd 6a dc 81 36 00 b1 02 00 f1 3a 27 19 0c 26 a1 8d 4c ac 34 7f e5 84 08 12 a2 a3 4b 55 84 29 d7 b7 7f b8 7c 33 ef 3d 5f 7d 09 bd e7 f3 97 cb c9 7c d4 1a d0 59 59 df 07 7a 8b c6 56 6b 4f e0 ad cd 92 6d ca b4 b3 ba 3c 2e a5 d2 76 17 24 d6 ca f3 09 c9 1a a4 9c 2c f8 21 8c 0e 71 46 c7 8c f5 5c 6d 39 8c 63 d3 a9 35 65 6b 67 c1 08 25 69 c6 51 02 f5 b7 a1 63 01 c8 54 98 c2 a3 71 e6 86 95 60 80 83 8c 3b 58 54 47 8a 87 61 c2 fa 46 23 73 ba 82 c9 94 a4 fb fd 0d 25 75 4c f8 9e 13 51 06 3c 99 9a 61 bf a5 46 6d 6a 8a 1a 61 53 7b 68 d9 ea 7e c0 b1 25 a0 d1 d9 f0 54 f7 1c aa 13 54 97 33 d2 b9 3a d9 74 fd 6e 18 05 5d 1f 49 e5 e9 cc 1e 49 69 68 82 db a8 d3 97 05 1e 64 42 e2 b4 30 b0 a8 5b 4c f7 13 c1 11 17 13 eb d7 4a 1e Data Ascii: Q/Z6IA-Hj6:'&L4KU)\|3=_}\|YYzVkOm<.v$,!qF\m9c5ekg%iQcTq`;XTGaF#s%uLQ<aFmjaS{h~%TT3:tn]IIihdB0[LJ
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: 27 fb 89 89 59 97 90 79 37 67 46 18 39 2c 6d a2 66 e7 5e 4b 12 f7 3a d0 95 95 59 a4 fc 92 04 d6 58 b5 84 13 cc f8 72 8c a5 6a 12 77 41 06 8a bb c0 20 5e 7f 7b 6b 8e e8 d5 e3 d6 96 e1 bb f1 94 7d 70 17 72 23 bb a9 d8 a9 9c b4 50 db 20 f3 a2 25 ca 54 1a 48 9b 7b 08 63 07 29 26 c9 28 f5 eb 12 18 59 09 fe 9c 71 f5 eb 9c c5 9e 6b 82 25 96 8f b9 8f 1d 5a 3f c4 62 76 62 38 61 b4 d9 dc 91 5a 39 d2 9b 52 05 2c 17 7a 12 59 4b 8a 18 7c 19 15 2f b5 f3 15 69 a2 3a 4b e0 bc 3e c5 58 59 16 52 38 9b 43 c9 ae 36 81 40 5d 08 65 1b ad 9e 41 d8 40 aa e5 6e c0 e2 54 78 8e 29 b1 5c ab 61 d4 8a 23 59 d3 6c 31 b1 70 eb 8c 6e 10 c8 3f 90 e5 0e 93 e0 2c 1f 3f b9 37 b3 96 fa e3 fe 0b a8 dd c4 36 b8 a8 6a a2 cf fe 53 a3 6a 06 1a b0 b8 7a b7 5e 0d 9b e5 2a b3 8d 9a 9c 52 24 98 05 9a Data Ascii: 'Yy7gF9,mf^K:YXrjwA ^{k}pr#P %TH{c)&(Yqk%Z?bvb8aZ9R,zYK\|/i:K>XYR8C6@]eA@nTx)\a#Yl1pn?,?76jSjz^*R$
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: db d6 eb 70 a1 41 ca f7 9f 8c 84 9f 37 e3 e3 b6 ce fd 1e ff 76 3c 3f 9a f9 40 ea d1 d9 57 fc e1 12 d2 13 43 b6 bd b0 f2 19 d1 21 3b 10 79 30 35 3f 66 f0 5c 50 57 31 a0 83 4b 09 8b c2 1e 21 3d d5 a1 2e 94 ab ff 26 bb 95 d8 74 35 d1 63 b1 a8 32 0a 5c dc aa 6a 5d 00 3d b4 7c 62 cf 7a 6b 7e 81 56 af e6 e7 a2 f6 8d 29 ee c6 a9 54 aa 7f 7c 36 83 18 5e 65 ad 4f 67 32 c4 b7 2e 7b ad 90 e7 b6 79 34 ff a3 fc 7e b1 85 7d 6d 86 85 3a aa aa 4a 3b eb d1 2d 6d bb a3 b5 e3 55 b8 c7 4f 16 4e 50 3f ac 1b f3 1e 44 44 d7 86 15 b5 95 8f da 7b b0 92 a4 72 b3 62 b4 48 c0 fb 85 1d d1 64 0d 43 6b a8 f3 d3 9d 36 8b f3 f8 4e f9 68 b2 c4 05 ce fc 9c c4 90 51 41 1b 78 3b 19 96 1c 78 c8 f8 a3 99 af 51 aa 73 23 77 a5 7d 4a 8c c4 1c c6 47 68 88 9b 1b c4 d9 70 7c 90 76 e2 f2 c2 99 92 24 Data Ascii: pA7v<?@WC!;y05?f\PW1K!=.&t5c2\j]=\|bzk~V)T\|6^eOg2.{y4~}m:J;-mUONP?DD{rbHdCk6NhQAx;xQs#w}JGhp\|v$
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: 4b 17 cd aa ec 83 b3 ca 8b 7a cd 45 3f a1 35 17 8b f5 ed 66 dc 8d db 62 9e 35 49 82 5e f6 71 98 be 68 4d 24 c5 14 3d bc 9e 88 91 16 47 26 32 14 8a 9c 1c 0c ab e3 00 91 78 12 34 a5 5f 33 cf 32 54 8a 34 9a 28 1e 9c 59 00 c7 0a bb 5a e9 a7 a3 ab 7f 6e a6 95 d2 bd 72 52 2d d7 f2 94 bb 80 0d 95 66 4b bf 33 66 ce 67 a0 a8 db 7e f7 a7 39 b3 cf 82 f0 d1 cb cf 5f 6d e1 86 ab 33 dc 71 b5 b5 b7 10 ea f4 d5 72 58 f7 b3 c5 58 14 2a ef 1e 5f 86 cf 78 f7 b4 7d d8 ec 0f 55 9b 34 46 cb 40 6a bd fb a7 4d 23 6b 7e 54 04 57 a7 61 90 32 df 5a 76 c2 ea 02 4f b2 43 7d 1e 19 c9 ad 5e d5 ea a0 48 83 0a 18 37 bd 85 13 31 57 3d fd 2e 10 cf 40 4b ae 85 98 03 c8 2a 9a 0a d4 fe 61 b3 8e 72 43 d4 2f e8 87 da 34 a4 ba bb 7f 6b 84 fc d1 26 fd 82 3a fb 76 fc fc fa f6 7f 47 08 af bd 31 63 Data Ascii: KzE?5fb5I^qhM$=G&2x4_32T4(YZnrR-fK3fg~9_m3qrXX_x}U4F@jM#k~TWa2ZvOC}^H71W=.@KarC/4k&:vG1c
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: c2 e0 a9 df f0 cd fe b4 31 8f 1e 26 7f 13 83 df 3e d6 d5 1c f8 e6 0c 01 74 34 a2 22 20 46 ac 70 76 9c 03 41 84 d1 39 b5 7a 3c bd c8 21 6c 8b a9 0b d1 5c c5 f9 8e 89 c5 f7 e3 9a e3 59 f8 f9 d3 d0 98 8a 4d 03 c9 0e 5f 64 37 bc 0d fb ff 82 44 64 c0 f6 68 91 32 ec 83 56 b6 76 e5 72 f5 50 a7 4e a3 d8 5c a6 52 ea 85 f4 18 11 14 42 d5 4c ff 10 4a ce b6 27 52 5f 4e f7 d6 8f 0f b0 84 df dd ee 9f 48 da 57 4a 65 e7 81 7d dd c6 6b f7 bb ed 9c 77 a5 8c 53 1b f5 2b cb 01 07 59 9e 96 6c f3 c8 70 19 e4 84 d2 38 28 fe 3a 24 e2 28 73 f0 c2 87 41 cc 0f 45 c1 21 e9 05 f0 3e ce f4 78 09 72 94 03 50 73 99 d9 dc 45 60 99 ec 61 bd 1f cf bf 5f 96 98 7c 82 3b 88 67 75 bb 19 b6 e6 9f 75 16 85 b2 3d 9f f6 f7 88 a8 c8 e2 26 35 4a 4b 2d a9 c7 53 46 bc 6f 15 cf 19 a5 8d 51 35 e4 b5 c8 Data Ascii: 1&>t4" FpvA9z<!l\YM_d7Ddh2VvrPN\RBLJ'R_NHWJe}kwS+Ylp8(:$(sAE!>xrPsE`a_\|;guu=&5JK-SFoQ5
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: 36 95 ea c5 96 9f 5b 3f b1 d1 5c 0a 48 22 39 c9 d7 ac 0c e8 a2 79 99 c6 1c bf 27 e6 54 45 d4 06 d8 43 40 23 77 f6 f2 fc e7 d7 17 c5 d3 b7 2f 8a 1f 7e fe e9 c5 cb e2 c5 cb 8b a7 3f bd 2e 1e 01 ef 06 e5 19 b7 62 1d f1 59 8d ba b3 58 d3 2b 65 b9 1f c0 25 45 28 ad b7 42 d9 69 fc 71 72 1d 4a 02 5a 6b 57 ef ee c8 fc e3 d5 f4 4b b1 fb b2 ae f8 45 49 91 64 a1 f6 92 bc 12 2c 95 fe 4c a9 53 c9 9e 3d 63 6d 19 85 86 79 c6 7b f5 cb ce d3 cb a0 dc 07 fc 6b ec 10 ea 34 db af 3a 23 d7 77 e8 0e 1d 76 34 84 d5 cd a4 da ac 77 db 3b fa fa c8 66 48 41 e1 1e 46 06 8e 0b db fb 5e 90 a2 0c ad 03 38 fb ed 54 70 0c 97 04 fa b3 99 dd d5 a2 70 3a bb 65 04 0b 2a f0 f1 65 01 61 32 e8 f0 f1 ef c7 62 5a 43 53 ba fd f0 41 36 d6 90 da 8c 63 a7 15 49 f1 10 3a 24 ee 10 b2 99 dd 6a a2 59 2b Data Ascii: 6[?\H"9y'TEC@#w/~?.bYX+e%E(BiqrJZkWKEId,LS=cmy{k4:#wv4w;fHAF^8Tpp:e*ea2bZCSA6cI:$jY+
2024-04-16 17:43:43 UTC	16384	OUT	Data Raw: a3 87 ba 66 82 48 a2 70 37 71 6e 72 08 0b 21 68 9f 38 4e 83 fb d6 12 18 3c e9 fa 30 26 e4 07 b8 9a d9 09 fb 85 78 6d a6 7c 6d 42 15 6c 9f 9b 3b 52 7d ed be 3a 0e 3b a3 1a dc a0 ae 3f 6a fd 46 32 c0 ba 30 d2 3e 3e 20 c5 e5 92 8e 4f ea 07 21 36 7e 13 9a cc 50 47 88 1b ba 7d 30 8a 2e 38 67 89 7c a8 36 d3 6c 51 81 a1 a5 ba 69 98 ec b2 8c b5 ec af 03 58 ef 54 47 fe 3a 2d 77 a5 99 9f 8f d5 97 6f 7f ff e2 fd bb 97 d7 e5 7c f1 b7 a8 b9 d2 86 86 ae 35 fa c0 47 5f cf 97 1f ff 16 f6 5f 77 3e fb ff b3 f7 2e 6a 6e db 48 c2 e8 ab f0 28 27 9e 78 57 94 09 de d9 bd 9e f9 ed b6 9d 78 c6 b7 75 db c9 6c 9c 7c fd 51 14 d5 ad 98 ba 8c 28 75 db e9 2f e7 d5 f6 91 fe 57 38 55 05 80 04 af 22 25 b5 93 d9 1d 5f ba 25 12 28 14 80 42 a1 aa 50 a8 6a 35 6e 34 b5 9c 7d 49 c6 49 7b d8 34 Data Ascii: fHp7qnr!h8N<0&xm\|mBl;R}:;?jF20>> O!6~PG}0.8g\|6lQiXTG:-wo\|5G__w>.jnH('xWxul\|Q(u/W8U"%_%(BPj5n4}II{4
2024-04-16 17:43:43 UTC	11648	OUT	Data Raw: d6 f1 3f b6 b0 73 15 11 11 54 86 87 7c d9 dc 88 61 e6 b4 6b 5a 72 94 02 af 4a 67 b0 07 2d 50 30 2e 71 6f b2 07 0a 19 bb 38 bc 7c d4 2e c8 63 98 22 9e 6a f5 8f e5 dc 15 89 ff f9 19 9f 38 c7 b4 8a f6 1d a5 7e 05 20 07 a5 55 33 fc 61 67 f3 c7 c5 a5 42 05 c5 61 a0 28 7f 82 e5 15 a5 42 1c 73 90 7d 20 f3 9a c0 6a bb 1c 41 ea ca 0c 55 bf 01 b4 78 d9 16 1e 70 e1 ab 70 fd b9 3c 0e 6f de 3e 7f f9 fc dd f3 ef 9f 66 23 22 34 31 dc 4b 00 e3 4f 9f 74 a1 68 c0 da 36 f3 15 3e f8 8f f4 fa f2 04 fe 2b ac 39 1b 00 65 84 c8 c6 23 ac 3b ca 08 e5 60 07 dc 45 12 5d 15 24 39 11 cd 7e 8c f1 24 99 0f 14 5a 2e e8 dc f6 7a 16 df 3c 46 0a 1f a0 ff 8c 63 d2 7f d9 45 04 cc bb 87 a8 71 c4 f8 86 82 df 57 e1 e6 4a 35 06 00 8c 97 be a5 31 db b8 b2 1c 3b 62 e4 90 e3 69 cc d2 02 cd 34 5f 98 Data Ascii: ?sT\|akZrJg-P0.qo8\|.c"j8~ U3agBa(Bs} jAUxpp<o>f#"41KOth6>+9e#;`E]$9~$Z.z<FcEqWJ51;bi4_
2024-04-16 17:43:44 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50237	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	767	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11320&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	73	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 65 64 2f 41 67 65 6e 74 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 5d 7d Data Ascii: {"sm":[{"params":{"name":"Ajax/Events/Excluded/Agent"},"stats":{"c":1}}]}
2024-04-16 17:43:43 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:43 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130023-PDK
2024-04-16 17:43:43 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50238	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	768	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11321&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 290 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:43 UTC	290	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 65 76 65 6e 74 73 2f 31 2f 37 61 35 62 30 64 65 33 38 65 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 32 37 35 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 32 34 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 34 35 33 7d 2c 22 63 62 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/events/1/7a5b0de38e","status":200},"metrics":{"count":1,"txSize":{"t":275},"rxSize":{"t":24},"duration":{"t":453},"cb
2024-04-16 17:43:43 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:43 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kpdk1780114-PDK
2024-04-16 17:43:43 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50239	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:43 UTC	1941	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false If-Modified-Since: Tue, 16 Apr 2024 17:43:28 GMT
2024-04-16 17:43:44 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Cache-Control: public,must-revalidate,max-age=0,s-maxage=600 X-Powered-By: Salesforce.com ApexPages P3P: CP="CUR OTR STA" Expires: Tue, 16 Apr 2024 17:43:44 GMT Last-Modified: Tue, 16 Apr 2024 17:43:44 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 69d0a200046ad1733c4092cc517f8aa6
2024-04-16 17:43:44 UTC	15821	IN	Data Raw: 31 36 39 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 73 74 6f 6d 65 72 20 43 6f 6d 6d 75 6e 69 74 79 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 Data Ascii: 1692<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html class=""><head><title>Customer Community</title><script src="/static/111213/js/perf/stub.js" type="text/javascript"></script><script src="
2024-04-16 17:43:44 UTC	52	IN	Data Raw: 3e 3c 2f 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 70 61 67 65 20 67 65 6e 65 72 61 74 69 6f 6e 20 74 69 6d 65 3a 20 32 36 6d 73 20 2d 2d 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: ></html>... page generation time: 26ms -->0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50240	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	657	OUT	GET /genesys-bootstrap/genesys.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c6c4edc52df95ad8891299284ff3efdb" If-Modified-Since: Thu, 28 Mar 2024 03:04:03 GMT
2024-04-16 17:43:44 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:44 GMT Connection: close Server: nginx x-amz-id-2: a+NOz8vgCwyank3re7YmPuEYJtKhc0wmfjrTNRIGEwCtEOCymC8EfpgAQwsi/cCYH6EZ37+HBHc= x-amz-request-id: HFXMWNHSHD5JK99D Cache-Control: max-age=0, no-cache Last-Modified: Thu, 28 Mar 2024 03:04:03 GMT x-amz-version-id: QZm_h5zv_4b0p.BWe_vzGlRCw_A6jZYE ETag: "c6c4edc52df95ad8891299284ff3efdb" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50241	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289423195&PageStart=1713289396931&PrevBundleTime=1713289418976&LastActivity=12695&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 924 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:44 UTC	924	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 97 5b 8f da 38 14 c7 bf 4a ea 07 d4 4a 4e f0 2d b6 0f 5d 76 35 33 3b ea 56 d3 cb a8 4c 35 aa 56 7d c8 c5 40 34 21 61 92 00 9d 56 fd ee 6b a6 33 40 08 d0 aa 52 e9 0a e2 bc c4 3e c7 97 f3 f3 df 3e f9 82 7a e6 16 75 00 a3 eb a1 c9 50 87 12 ae 09 46 e7 d3 aa 44 9d 7f bf a0 8b 24 8b 51 c7 57 18 9d 14 83 79 15 c3 68 58 55 e3 b2 d3 6e 17 a5 d7 9f a4 69 59 e5 c5 9d 17 e5 a3 76 61 a2 76 38 c9 e2 d4 b4 a7 ec af b7 c5 e0 65 dc a5 ec f4 52 9c b7 de 97 a6 b0 5f 26 0c 68 24 95 70 03 20 be 2b 84 8e dc 30 20 c2 f5 43 11 4a 4a 81 72 f0 5b 3d 53 96 49 9e 59 73 12 1b ad 85 e8 bb 44 72 65 cd 59 e8 6a 50 ca 8d 39 e7 ac 4f 84 21 2c 68 5d 06 03 33 1f 28 06 06 8c 83 eb 93 fe bc 6b 2e dc 10 42 e6 fa 1c 02 bf af 40 e8 58 d9 ae 6f bb bc 75 96 26 26 Data Ascii: [8JJN-]v53;VL5V}@4!aVk3@R>>zuPFD$QWyhXUniYvav8eR_&h$p +0 CJJr[=SIYsDreYjP9O!,h]3(k.B@Xou&&
2024-04-16 17:43:44 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:44 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 34 36 38 32 7d 0a Data Ascii: {"BundleTime":1713289424682}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50245	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=7&ClientTime=1713289423138&PageStart=1713289404678&PrevBundleTime=1713289421026&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2544 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:44 UTC	2544	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 31 34 37 38 30 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 31 2c 22 73 65 6c 66 22 2c 32 32 34 35 36 2e 36 39 39 39 39 39 39 39 39 39 38 33 2c 36 38 5d 2c 22 57 68 65 6e 22 3a 31 34 37 38 30 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 74 72 61 63 6b 2f 3f 76 65 72 62 6f 73 65 3d 31 26 69 70 3d 31 26 5f 3d 31 37 31 33 32 38 39 34 31 38 33 31 32 22 2c 32 32 34 35 37 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 35 31 36 2e 32 30 30 30 30 30 30 30 30 30 31 31 36 2c 22 62 65 61 63 6f 6e 22 2c 30 2c 30 2c 32 32 34 35 37 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 30 Data Ascii: {"Seq":7,"When":14780,"Evts":[{"Kind":57,"Args":[11,"self",22456.699999999983,68],"When":14780},{"Kind":57,"Args":[2,"https://api-js.mixpanel.com/track/?verbose=1&ip=1&_=1713289418312",22457.599999999977,516.2000000000116,"beacon",0,0,22457.599999999977,0
2024-04-16 17:43:44 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50243	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	892	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=7&ClientTime=1713289423147&PageStart=1713289404678&PrevBundleTime=1713289421026&LastActivity=5881&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 932 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:44 UTC	932	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 96 6d 6f db 36 10 c7 bf 8a aa 17 46 0b e8 81 cf 94 9c 79 41 92 a6 db 90 a6 0d ea 04 c1 50 14 01 25 d1 36 17 59 52 44 da 4d 5a f4 bb ef 6c 27 b6 e2 c4 e8 c3 cb 4d 32 04 93 fc df 51 77 3f 1e a9 af fe 50 df f8 7d 19 f8 97 13 5d f9 7d cc 64 82 02 ff 78 ee ac df ff f8 d5 3f 31 55 e1 f7 39 8c 1f b4 e3 45 17 c6 81 6f 75 39 f2 03 42 18 17 91 48 1f ae 84 06 22 f9 f4 c8 d1 b7 e0 19 0f 24 f0 27 ce 35 b6 1f c7 aa 31 e1 3f 36 9a 9a db 46 55 ba 8c f2 7a 1a bb 56 e5 d7 f1 fe 5c b7 59 6d f5 00 f7 4c 03 8f ab 01 96 98 92 24 65 38 a1 98 ac 66 97 11 5f cf 2e 65 c0 b1 88 08 7a b8 30 16 81 9f 69 95 d7 95 1f 20 b8 9f b1 40 8f 6e 42 52 49 23 b9 16 a4 ab fe 4d 48 9c 10 fe bd 90 5a 1b 8d 66 65 69 5d dd de 2d e3 69 75 1e 67 b3 aa 28 75 3c 27 fb ef Data Ascii: mo6FyAP%6YRDMZl'M2Qw?P}]}dx?1U9Eou9BH"$'51?6FUzV\YmL$e8f_.ez0i @nBRI#MHZfei]-iug(u<'
2024-04-16 17:43:44 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:44 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 34 36 38 31 7d 0a Data Ascii: {"BundleTime":1713289424681}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50244	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: HvhGiDVkXoHI3/M2gdAzJA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:43:44 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50246	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	2350	OUT	POST /s/sfsites/aura?r=2&other.CSP_AuraMethods.getAlertLocalized=1&ui-communities-components-aura-components-forceCommunity-richText.RichText.getParsedRichTextValue=7 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 5637 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 5343900000592d6614 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:44 UTC	5637	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 32 35 33 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 75 6e 69 74 69 65 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 66 6f 72 63 65 43 6f 6d 6d 75 6e 69 74 79 2e 72 69 63 68 54 65 78 74 2e 52 69 63 68 54 65 78 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 50 61 72 73 65 64 52 69 63 68 54 65 78 74 56 61 6c 75 65 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22253%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.communities.components.aura.components.forceCommunity.richText.RichTextController%2FACTION%24getParsedRichTextValue%22%2C%22callingDescriptor%22%
2024-04-16 17:43:45 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:44 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:44 GMT Server-Timing: Total;dur=69 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 5343900000592d6614
2024-04-16 17:43:45 UTC	3626	IN	Data Raw: 65 31 65 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 32 35 33 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 6f 72 65 2d 70 72 6f 64 75 63 74 73 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 73 6c 64 73 2d 74 65 78 74 2d 61 6c 69 67 6e 5f 63 65 6e 74 65 72 5c 22 3e 5c 6e 20 3c 64 69 76 3e 5c 6e 20 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6d 6d 75 6e 69 74 79 3c 5c 2f 61 3e 5c 6e 20 3c 5c 2f 64 69 76 3e 5c 6e 3c 5c 2f 64 69 76 3e 22 2c 22 65 72 72 6f 72 22 3a 5b 5d 2c 22 73 74 6f 72 61 Data Ascii: e1e{"actions":[{"id":"253;a","state":"SUCCESS","returnValue":"<div class=\"more-products-integrations slds-text-align_center\">\n <div>\n <a href=\"https://community.docusign.com/\" target=\"_blank\">Community<\/a>\n <\/div>\n<\/div>","error":[],"stora

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50242	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:44 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 31 37 34 30 31 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289417401,"level":"INFO","message":"WS Reconnec
2024-04-16 17:43:45 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:43:44 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50247	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	2257	OUT	POST /s/sfsites/aura?r=3&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1086 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 5469000000d5cf0c38 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:44 UTC	1086	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 32 36 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 6f 6d 6d 75 6e 69 74 79 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6d 6d 75 6e 69 74 79 49 64 25 32 32 25 33 41 25 32 32 30 44 42 34 30 30 30 30 30 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22326%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FNavigationMenuController%2FACTION%24getCommunityNavigationMenu%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22communityId%22%3A%220DB400000
2024-04-16 17:43:45 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:45 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:45 GMT Server-Timing: Total;dur=334 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 5469000000d5cf0c38
2024-04-16 17:43:45 UTC	2091	IN	Data Raw: 38 31 66 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 32 36 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 6d 65 6e 75 49 74 65 6d 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 54 79 70 65 22 3a 22 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 22 2c 22 61 63 74 69 6f 6e 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 64 6f 63 75 6d 65 6e 74 2d 69 74 65 6d 3f 62 75 6e 64 6c 65 49 64 3d 76 72 75 31 37 30 36 36 35 30 32 39 31 33 32 37 26 74 6f 70 69 63 49 64 3d 64 67 77 31 37 30 36 36 35 30 33 37 35 34 34 30 2e 68 74 6d 6c 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 22 53 65 6e 64 65 72 73 Data Ascii: 81f{"actions":[{"id":"326;a","state":"SUCCESS","returnValue":{"menuItems":[{"actionType":"ExternalLink","actionValue":"https://support.docusign.com/s/document-item?bundleId=vru1706650291327&topicId=dgw1706650375440.html","imageUrl":null,"label":"Senders

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50248	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	2257	OUT	POST /s/sfsites/aura?r=4&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1091 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 5473600000845211fa User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:44 UTC	1091	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 32 37 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 6f 6d 6d 75 6e 69 74 79 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6d 6d 75 6e 69 74 79 49 64 25 32 32 25 33 41 25 32 32 30 44 42 34 30 30 30 30 30 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22327%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FNavigationMenuController%2FACTION%24getCommunityNavigationMenu%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22communityId%22%3A%220DB400000
2024-04-16 17:43:45 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:45 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:45 GMT Server-Timing: Total;dur=304 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 5473600000845211fa
2024-04-16 17:43:45 UTC	2103	IN	Data Raw: 38 32 62 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 32 37 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 6d 65 6e 75 49 74 65 6d 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 54 79 70 65 22 3a 22 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 22 2c 22 61 63 74 69 6f 6e 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 64 6f 63 75 6d 65 6e 74 2d 69 74 65 6d 3f 62 75 6e 64 6c 65 49 64 3d 6c 6a 79 31 37 30 36 36 34 35 31 36 30 30 35 39 26 74 6f 70 69 63 49 64 3d 67 6f 6f 31 37 30 36 36 34 35 35 39 36 36 34 31 2e 68 74 6d 6c 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 22 65 53 69 67 6e 61 74 Data Ascii: 82b{"actions":[{"id":"327;a","state":"SUCCESS","returnValue":{"menuItems":[{"actionType":"ExternalLink","actionValue":"https://support.docusign.com/s/document-item?bundleId=ljy1706645160059&topicId=goo1706645596641.html","imageUrl":null,"label":"eSignat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50249	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:44 UTC	2257	OUT	POST /s/sfsites/aura?r=5&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 1091 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 5526000000aad41d3b User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:44 UTC	1091	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 32 38 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 43 6f 6d 6d 75 6e 69 74 79 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 25 33 41 25 37 42 25 32 32 63 6f 6d 6d 75 6e 69 74 79 49 64 25 32 32 25 33 41 25 32 32 30 44 42 34 30 30 30 30 30 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22328%3Ba%22%2C%22descriptor%22%3A%22aura%3A%2F%2FNavigationMenuController%2FACTION%24getCommunityNavigationMenu%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22communityId%22%3A%220DB400000
2024-04-16 17:43:45 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:45 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:45 GMT Server-Timing: Total;dur=324 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 5526000000aad41d3b
2024-04-16 17:43:45 UTC	1627	IN	Data Raw: 36 34 66 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 32 38 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 6d 65 6e 75 49 74 65 6d 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 54 79 70 65 22 3a 22 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 22 2c 22 61 63 74 69 6f 6e 56 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 61 72 74 69 63 6c 65 73 2f 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2d 61 6e 64 2d 48 65 6c 70 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 22 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 61 6e 64 20 48 65 6c 70 22 2c 22 73 75 62 4d 65 6e 75 22 3a 5b 5d 2c 22 74 61 72 Data Ascii: 64f{"actions":[{"id":"328;a","state":"SUCCESS","returnValue":{"menuItems":[{"actionType":"ExternalLink","actionValue":"https://support.docusign.com/s/articles/Troubleshooting-and-Help","imageUrl":null,"label":"Troubleshooting and Help","subMenu":[],"tar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50250	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:45 UTC	1941	OUT	GET /apex/zoomin_app__ZoominFingerPrint HTTP/1.1 Host: support.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false If-Modified-Since: Tue, 16 Apr 2024 17:43:44 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50253	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	1887	OUT	GET /s/sfsites/aura?r=1&aura.ApexAction.execute=5&other.RSC_ChatBot.getCSPGlobalSettingGenesys=1&zoomin_app.ZoominCommunitySearch.obtainAdminSettingBaseUrl=2 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:46 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: bb7cc2666d5f227d2e800a7d1dc9172d
2024-04-16 17:43:46 UTC	1863	IN	Data Raw: 37 33 62 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 73b<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50255	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	911	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=2&ClientTime=1713289425091&PageStart=1713289420652&PrevBundleTime=1713289423665&LastActivity=2543&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 6479 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	6479	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5d fb 72 9c 38 d6 7f 95 de de 9a 6c 52 05 44 77 c0 5e ef 94 e3 64 26 99 71 9c 6c ec 4c 66 e3 4d b9 b8 08 37 13 1a 7a 80 b6 73 a9 79 b6 7d a4 7d 85 ef 48 d0 34 f4 15 72 db ef 8f f1 64 da 58 1c fd f4 3b 47 47 47 12 12 ea 8f e3 73 f9 fb f8 80 18 e3 57 13 99 c2 05 13 d4 18 3f ba 29 8b f1 c1 e5 c7 f1 cf 71 1a 8e 0f 38 dc 3e ce af 55 d2 9b b6 e0 1f c6 42 02 23 d4 88 8c 6f e2 22 f6 13 39 6e c9 ba f6 52 d6 69 24 05 a3 06 a3 8e 41 10 59 ca 72 84 96 b2 dc 6e 84 99 31 3e 3d 79 7e 75 15 05 28 08 23 1a 62 ee 4b 2a 23 67 6c 30 e4 32 cb 41 8b 1f 6c 73 03 b5 f0 b0 d8 88 c7 6b bc 2d 00 16 6e fe 46 dc 21 c8 b6 f7 43 62 6c 8c 0b 99 44 1a 91 5a 62 89 20 0c d7 ed 91 1f ec 3c cb e2 b4 94 79 76 23 73 80 c1 9c b7 89 08 c3 26 06 23 14 55 1f 3d b4 Data Ascii: ]r8lRDw^d&qlLfM7zsy}}H4rdX;GGGsW?)q8>UB#o"9nRi$AYrn1>=y~u(#bK*#gl02Alsk-nF!CblDZb <yv#s&#U=
2024-04-16 17:43:46 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:46 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 36 34 32 36 7d 0a Data Ascii: {"BundleTime":1713289426426}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50261	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	636	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=1&ClientTime=1713289422530&PageStart=1713289420652&PrevBundleTime=0&LastActivity=1593&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:46 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50258	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	3061	OUT	GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22295ac930-4585-45d7-b3ab-7962b3fd4b52%22%2C%22routeType%22%3A%22home%22%2C%22themeLayoutType%22%3A%22Home%22%2C%22params%22%3A%7B%22language%22%3A%22%22%2C%22viewid%22%3A%22eb9556a8-abd9-4d79-b20c-e81ba2526cfb%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A193%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMTAuNS01LjAuMTA%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%22XvLrnsfis-Fl75QQFAqN9A%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDE3MThlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:46 UTC	447	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=1800 Expires: Mon, 17 Apr 2023 17:43:46 GMT Access-Control-Allow-Origin: * Last-Modified: Mon, 15 Apr 2024 17:43:46 GMT Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: f2b22df5ea651a546416015e74e2c91a
2024-04-16 17:43:46 UTC	15937	IN	Data Raw: 33 65 39 35 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 6c 61 79 6f 75 74 3a 2f 2f 73 69 74 65 66 6f 72 63 65 2d 67 65 6e 65 72 61 74 65 64 70 61 67 65 2d 65 62 39 35 35 36 61 38 2d 61 62 64 39 2d 34 64 37 39 2d 62 32 30 63 2d 65 38 31 62 61 32 35 32 36 63 66 62 2e 63 31 39 33 22 7d 2c 22 6f 72 69 67 69 6e 61 6c 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 73 69 74 65 66 6f 72 63 65 3a 70 61 67 65 4c 6f 61 64 65 72 22 2c 22 63 72 65 61 74 69 6f 6e 50 61 74 68 22 3a 22 2f 2a 5b 30 5d 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 76 61 6c 75 65 73 22 3a 7b 22 70 61 67 65 4c Data Ascii: 3e95{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-eb9556a8-abd9-4d79-b20c-e81ba2526cfb.c193"},"original":"markup://siteforce:pageLoader","creationPath":"/*[0]","attributes":{"values":{"pageL
2024-04-16 17:43:46 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 27 6d 6f 72 65 2d 70 72 6f 64 75 63 74 73 2d 69 6e 74 65 67 72 61 74 69 6f 6e 73 20 73 6c 64 73 2d 74 65 78 74 2d 61 6c 69 67 6e 5f 63 65 6e 74 65 72 27 3e 5c 6e 20 20 20 20 3c 64 69 76 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 6f 6d 0d 0a 38 30 30 30 0d 0a 6d 75 6e 69 74 79 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 43 6f 6d 6d 75 6e 69 74 79 3c 5c 2f 61 3e 3c 5c 2f 64 69 76 3e 5c 6e 3c 5c 2f 64 69 76 3e 22 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 7d 7d 7d 5d 7d 2c 22 68 65 61 64 65 72 22 3a 7b 22 64 65 73 63 72 69 70 74 6f 72 22 3a 22 68 65 61 64 65 72 22 2c 22 76 61 6c 75 65 22 3a 5b 7b 22 63 6f 6d 70 6f 6e 65 6e 74 44 65 66 22 3a 7b 22 64 65 73 63 72 69 70 74 6f Data Ascii: class='more-products-integrations slds-text-align_center'>\n <div><a href=\"https://com8000munity.docusign.com/\" target=\"_blank\">Community<\/a><\/div>\n<\/div>"}}}}]}}}}]}}}}]},"header":{"descriptor":"header","value":[{"componentDef":{"descripto
2024-04-16 17:43:46 UTC	16384	IN	Data Raw: 69 63 68 54 65 78 74 22 2c 22 73 75 22 3a 22 6d 61 72 6b 75 70 3a 2f 2f 75 69 3a 6f 75 74 70 75 74 52 69 63 68 54 65 78 74 22 2c 22 61 64 22 3a 5b 5b 22 62 6f 64 79 22 2c 22 61 75 72 61 3a 2f 2f 41 75 72 61 2e 43 6f 6d 70 6f 6e 65 6e 74 5b 5d 22 2c 22 47 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 47 22 2c 66 61 6c 73 65 5d 2c 5b 22 64 69 72 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 6c 74 72 22 5d 2c 5b 22 6e 61 6d 65 73 70 61 63 65 4f 76 65 72 72 69 64 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 5b 22 61 63 74 69 6f 6e 61 62 6c 65 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 Data Ascii: ichText","su":"markup://ui:outputRichText","ad":[["body","aura://Aura.Component[]","G",false,[]],["class","aura://String","G",false],["dir","aura://String","I",false,"ltr"],["namespaceOverride","aura://String","I",false],["actionable","aura://Boolean","I"
2024-04-16 17:43:46 UTC	16384	IN	Data Raw: 66 65 72 65 6e 63 65 5c 22 29 3b 62 2e 70 61 67 65 53 65 72 76 69 63 65 2e 70 72 6f 76 69 64 65 53 65 72 76 69 63 65 28 63 2c 5c 6e 7b 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 52 65 66 65 72 65 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 7d 29 7d 65 6c 73 65 20 64 0d 0a 34 31 36 62 0d 0a 3d 62 2e 70 61 67 65 53 65 72 76 69 63 65 2e 67 65 74 53 65 72 76 69 63 65 28 61 29 2e 67 65 74 43 75 72 72 65 6e 74 50 61 67 65 52 65 66 65 72 65 6e 63 65 28 29 2c 62 2e 6f 62 73 65 72 76 61 62 6c 65 73 2e 74 6f 41 75 72 61 43 6f 6d 70 6f 6e 65 6e 74 28 64 2c 61 2c 5c 22 76 2e 70 61 67 65 52 65 66 65 72 65 6e 63 65 5c 22 29 7d 2c 6f 6e 50 61 67 65 52 65 66 65 72 65 6e 63 65 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 29 7b Data Ascii: ference\");b.pageService.provideService(c,\n{getCurrentPageReference:function(){return d}})}else d416b=b.pageService.getService(a).getCurrentPageReference(),b.observables.toAuraComponent(d,a,\"v.pageReference\")},onPageReferenceChange:function(a,c,b){
2024-04-16 17:43:46 UTC	16384	IN	Data Raw: 22 2c 22 49 22 2c 66 61 6c 73 65 5d 2c 5b 22 72 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 4f 62 6a 65 63 74 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 22 5d 2c 5b 22 66 69 65 6c 64 73 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 5b 5d 22 2c 22 49 22 2c 66 61 6c 73 65 2c 5b 5d 5d 2c 5b 22 6e 65 65 64 52 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 2c 66 61 6c 73 65 2c 66 61 6c 73 65 5d 2c 5b 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 2c 22 61 75 72 61 3a 2f 2f 53 74 72 69 6e 67 22 2c 22 49 22 2c 66 61 6c 73 65 2c 22 22 5d 2c 5b 22 63 6d 73 52 65 63 6f 72 64 22 2c 22 61 75 72 61 3a 2f 2f 42 6f 6f 6c 65 61 6e 22 2c 22 49 22 2c 66 61 6c 73 65 2c 66 61 6c 73 65 5d 2c 5b 22 61 63 74 69 76 65 4c 61 6e 67 75 61 67 65 43 6f 64 Data Ascii: ","I",false],["record","aura://Object","I",false,""],["fields","aura://String[]","I",false,[]],["needRecord","aura://Boolean","I",false,false],["errorMessage","aura://String","I",false,""],["cmsRecord","aura://Boolean","I",false,false],["activeLanguageCod
2024-04-16 17:43:47 UTC	16384	IN	Data Raw: 69 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 5c 22 6f 62 6a 65 63 74 5c 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 6f 28 65 29 3d 3d 3d 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 70 61 72 61 6d 65 74 65 72 73 2e 72 65 71 75 69 72 65 64 2e 65 76 65 72 79 28 6e 3d 3e 6e 20 69 6e 20 65 29 7d 63 6f 6e 73 74 20 75 3d 7b 6f 76 65 72 72 69 64 65 73 3a 7b 68 65 61 64 65 72 73 3a 7b 5c 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 5c 22 3a 5c 22 6e 6f 2d 63 61 63 68 65 5c 22 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 2c 74 2c 72 2c 6f 3d 66 61 6c 73 65 2c 69 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 72 65 71 75 69 72 65 64 3a 6e 2c 72 65 73 6f 75 72 63 65 54 79 70 65 3a 74 2c 74 79 Data Ascii: i(e){return typeof e===\"object\"&&e!==null&&o(e)===false}function a(e,n){return n.parameters.required.every(n=>n in e)}const u={overrides:{headers:{\"Cache-Control\":\"no-cache\"}}};function s(e,n,t,r,o=false,i){return{name:e,required:n,resourceType:t,ty
2024-04-16 17:43:47 UTC	16384	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 3a 74 69 6c 65 4d 65 6e 75 49 74 65 6d 22 2c 22 6e 22 3a 22 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 22 2c 22 61 64 22 3a 5b 5b 22 69 74 65 6d 22 2c 6e 75 6c 6c 2c 22 47 22 2c 66 61 6c 73 65 2c 7b 7d 5d 5d 7d 2c 7b 22 78 73 22 3a 22 50 22 2c 22 63 6f 22 3a 22 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 24 41 2e 63 6f 6d 70 6f 6e 65 6e 74 53 65 72 76 69 63 65 2e 61 64 64 4d 6f 64 75 6c 65 28 27 6d 61 72 6b 75 70 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 3a 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e 69 66 69 65 64 4c 61 79 6f 75 74 27 2c 20 5c 22 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2f 74 69 6c 65 4d 65 6e 75 49 74 65 6d 55 6e Data Ascii: navigation:tileMenuItem","n":"community_navigation/tileMenuItem","ad":[["item",null,"G",false,{}]]},{"xs":"P","co":"function() { $A.componentService.addModule('markup://community_navigation:tileMenuItemUnifiedLayout', \"community_navigation/tileMenuItemUn
2024-04-16 17:43:47 UTC	9515	IN	Data Raw: 6e 20 61 77 61 69 74 20 69 2e 6a 73 6f 6e 28 29 7d 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 5c 22 42 61 64 20 72 65 71 75 65 73 74 5c 22 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 63 6f 6e 73 74 20 63 3d 5c 22 34 34 2e 30 5c 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 63 6f 6e 73 74 20 65 3d 24 41 21 3d 3d 6e 75 6c 6c 3f 24 41 2e 73 74 6f 72 61 67 65 53 65 72 76 69 63 65 2e 76 65 72 73 69 6f 6e 3a 63 3b 72 65 74 75 72 6e 20 65 7d 65 2e 64 65 62 6f 75 6e 63 65 3d 69 3b 65 2e 66 65 74 63 68 4a 73 6f 6e 3d 75 3b 65 2e 67 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 73 3b 65 2e 68 61 73 4d 6f 64 69 66 69 65 72 4b 65 79 3d 6e 3b 65 2e 69 73 55 6e 64 65 66 69 6e 65 64 4f 72 4e 75 6c 6c 3d 6f 3b Data Ascii: n await i.json()}throw new Error(\"Bad request\")}return null}catch(e){return null}}const c=\"44.0\";function s(){const e=$A!==null?$A.storageService.version:c;return e}e.debounce=i;e.fetchJson=u;e.getAppVersion=s;e.hasModifierKey=n;e.isUndefinedOrNull=o;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50259	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	643	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289423195&PageStart=1713289396931&PrevBundleTime=1713289418976&LastActivity=12695&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:46 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50260	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=7&ClientTime=1713289423147&PageStart=1713289404678&PrevBundleTime=1713289421026&LastActivity=5881&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:46 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50262	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	1895	OUT	GET /s/sfsites/aura?r=2&other.CSP_AuraMethods.getAlertLocalized=1&ui-communities-components-aura-components-forceCommunity-richText.RichText.getParsedRichTextValue=7 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:46 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 2ef52955e6c2c9c5a0202947068e7bbe
2024-04-16 17:43:46 UTC	1875	IN	Data Raw: 37 34 37 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 747<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50256	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	892	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=8&ClientTime=1713289425097&PageStart=1713289404678&PrevBundleTime=1713289424681&LastActivity=7856&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 798 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	798	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 54 db 6e db 38 10 fd 15 2d 1f 8c 16 d0 85 f7 8b bb 6e 90 a4 e9 6e 91 a4 2d d6 09 82 45 51 04 94 44 db ac 65 49 11 69 37 69 d1 7f 2f e3 04 b6 9c a4 8b 6e 5f 2b 0a 84 34 3c 33 c3 99 73 c8 af 60 6c ae c0 50 c6 e0 62 66 6a 30 44 8a 51 15 83 a3 95 77 60 f8 e1 2b 38 b6 75 09 86 4c c4 60 bf 9b de 9a 70 0c 66 de b7 6e 98 65 ba b5 c9 27 97 2e ec 75 ab 6b 53 a5 45 b3 c8 7c a7 8b 79 b6 b7 32 5d de 38 33 42 03 db 86 e9 72 84 04 22 58 2a 8a a1 62 08 c4 98 41 c5 53 a9 36 0f 8d a9 64 29 de fc 4b 49 78 0c ae 17 d5 6d b2 ce 5c 2d 8d f3 20 86 61 3c e1 0a 77 06 66 4c e2 14 6d 43 91 bb 85 8f 3b 35 7e 8b 9f 28 0e a1 18 38 53 4d c2 06 39 55 a4 b7 1f 15 13 44 fe 67 04 c9 61 4a fa fb 24 8c ff 44 88 5e 87 3b 97 4e 96 55 e5 7c d3 dd ac db db 99 22 Data Ascii: Tn8-nn-EQDeIi7i/n_+4<3s`lPbfj0DQw`+8uL`pfne'.ukSE\|y2]83Br"X*bAS6d)KIxm\- a<wfLmC;5~(8SM9UDgaJ$D^;NU\|"
2024-04-16 17:43:46 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:46 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 36 34 32 38 7d 0a Data Ascii: {"BundleTime":1713289426428}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50251	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	666	OUT	POST /track/?verbose=1&ip=1&_=1713289425049 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 1141 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	1141	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 50 61 67 65 25 32 30 56 69 65 77 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 25 33 46 6c 61 6e 67 75 61 67 65 25 33 44 65 6e 5f 55 53 25 32 32 25 32 43 25 32 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Page%20View%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US%22%2C%2
2024-04-16 17:43:46 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 25 x-envoy-upstream-service-time: 18 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:46 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50252	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=8&ClientTime=1713289425096&PageStart=1713289404678&PrevBundleTime=1713289424681&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	1910	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 31 39 35 34 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2d 6a 73 2e 6d 69 78 70 61 6e 65 6c 2e 63 6f 6d 2f 74 72 61 63 6b 2f 3f 76 65 72 62 6f 73 65 3d 31 26 69 70 3d 31 26 5f 3d 31 37 31 33 32 38 39 34 32 30 39 35 31 22 2c 32 35 30 39 36 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 34 38 35 2e 32 39 39 39 39 39 39 39 39 39 38 38 33 36 2c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 2c 30 2c 30 2c 32 35 30 39 36 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 35 35 38 32 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 31 39 35 34 39 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":8,"When":19549,"Evts":[{"Kind":57,"Args":[2,"https://api-js.mixpanel.com/track/?verbose=1&ip=1&_=1713289420951",25096.899999999994,485.29999999998836,"xmlhttprequest",0,0,25096.899999999994,0,0,0,0,0,0,0,25582.199999999983,0,0,0],"When":19549},{"Ki
2024-04-16 17:43:46 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50254	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	912	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=2&ClientTime=1713289425084&PageStart=1713289420652&PrevBundleTime=1713289423665&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 29415 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 32 2c 22 57 68 65 6e 22 3a 32 34 36 33 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 32 34 36 33 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 32 34 39 37 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 34 33 2c 34 33 38 2c 32 30 32 5d 2c 22 57 68 65 6e 22 3a 32 35 30 30 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 34 2c 22 4c 43 50 5f 5f 66 63 30 63 64 66 33 64 31 35 62 65 33 65 66 38 22 2c 34 30 39 34 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 30 5d 2c 22 57 68 65 6e 22 3a 32 35 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 35 2c 22 4c 43 Data Ascii: {"Seq":2,"When":2463,"Evts":[{"Kind":52,"Args":[],"When":2463},{"Kind":100,"Args":["visible"],"When":2497},{"Kind":8,"Args":[643,438,202],"When":2500},{"Kind":57,"Args":[4,"LCP__fc0cdf3d15be3ef8",4094.8000000000175,0],"When":2516},{"Kind":57,"Args":[5,"LC
2024-04-16 17:43:46 UTC	13031	OUT	Data Raw: 35 5d 2c 22 32 33 3a 32 3b 61 22 2c 5b 34 39 31 39 2c 36 5d 2c 5b 31 30 2c 32 5d 2c 5b 34 36 35 37 2c 33 5d 2c 22 32 37 3a 32 3b 61 22 2c 5b 34 39 33 31 2c 36 5d 2c 5b 32 31 35 2c 34 5d 2c 5b 34 36 37 31 2c 32 5d 2c 22 32 39 3a 32 3b 61 22 2c 5b 34 39 34 34 2c 39 5d 2c 34 34 33 2c 22 31 37 37 3a 32 3b 61 22 2c 5b 34 38 30 2c 35 5d 2c 22 73 69 64 65 62 61 72 41 6c 74 22 2c 34 38 36 2c 22 30 34 66 35 31 65 39 66 2d 63 39 65 32 2d 34 32 62 38 2d 62 61 38 34 2d 63 61 64 61 30 39 36 37 65 65 64 62 22 2c 34 34 33 2c 22 31 34 37 3a 32 3b 61 22 2c 5b 37 30 39 2c 37 5d 2c 22 33 65 66 63 66 64 66 30 2d 63 38 33 62 2d 34 38 38 37 2d 38 66 65 33 2d 37 65 64 38 35 38 38 39 30 32 32 31 22 2c 5b 36 31 32 2c 33 5d 2c 22 31 34 34 3a 32 3b 61 22 2c 5b 31 37 31 36 2c 35 5d Data Ascii: 5],"23:2;a",[4919,6],[10,2],[4657,3],"27:2;a",[4931,6],[215,4],[4671,2],"29:2;a",[4944,9],443,"177:2;a",[480,5],"sidebarAlt",486,"04f51e9f-c9e2-42b8-ba84-cada0967eedb",443,"147:2;a",[709,7],"3efcfdf0-c83b-4887-8fe3-7ed858890221",[612,3],"144:2;a",[1716,5]
2024-04-16 17:43:46 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50264	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	2279	OUT	POST /s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 61313 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 70634000001724b926 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:46 UTC	16384	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 33 35 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 62 65 61 63 6f 6e 2e 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 42 65 61 63 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 73 65 6e 64 44 61 74 61 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 55 4e 4b 4e 4f 57 4e 25 32 32 25 32 43 25 32 32 70 61 72 61 6d 73 25 32 32 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22335%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.instrumentation.components.beacon.InstrumentationBeaconController%2FACTION%24sendData%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22
2024-04-16 17:43:46 UTC	16384	OUT	Data Raw: 43 25 35 43 25 32 32 64 65 66 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 61 70 65 78 25 33 41 25 32 46 25 32 46 7a 6f 6f 6d 69 6e 5f 61 70 70 2e 5a 6f 6f 6d 69 6e 43 6f 6d 6d 75 6e 69 74 79 53 65 61 72 63 68 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 6f 62 74 61 69 6e 53 65 61 72 63 68 53 6f 75 72 63 65 73 4c 69 73 74 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 73 74 61 74 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 53 55 43 43 45 53 53 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 63 61 63 68 65 25 35 43 25 32 32 25 33 41 74 72 75 65 25 37 44 25 32 43 25 35 43 25 32 32 63 61 6c 6c 62 61 63 6b 54 69 6d 65 25 35 43 25 32 32 25 33 41 30 25 32 43 25 35 43 25 32 32 65 6e 71 75 65 75 65 57 61 69 74 25 35 43 25 32 32 25 33 41 33 31 Data Ascii: C%5C%22def%5C%22%3A%5C%22apex%3A%2F%2Fzoomin_app.ZoominCommunitySearchController%2FACTION%24obtainSearchSourcesList%5C%22%2C%5C%22state%5C%22%3A%5C%22SUCCESS%5C%22%2C%5C%22cache%5C%22%3Atrue%7D%2C%5C%22callbackTime%5C%22%3A0%2C%5C%22enqueueWait%5C%22%3A31
2024-04-16 17:43:46 UTC	16384	OUT	Data Raw: 32 25 33 41 25 35 43 25 32 32 33 32 36 25 33 42 61 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 61 62 6f 72 74 61 62 6c 65 25 35 43 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 35 43 25 32 32 73 74 6f 72 61 62 6c 65 25 35 43 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 35 43 25 32 32 62 61 63 6b 67 72 6f 75 6e 64 25 35 43 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 35 43 25 32 32 63 6d 70 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 63 6f 6d 6d 75 6e 69 74 79 5f 6e 61 76 69 67 61 74 69 6f 6e 2d 74 69 6c 65 2d 6d 65 6e 75 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 64 65 66 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 61 75 72 61 25 33 41 25 32 46 25 32 46 4e 61 76 69 67 61 74 69 6f 6e 4d 65 6e 75 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e Data Ascii: 2%3A%5C%22326%3Ba%5C%22%2C%5C%22abortable%5C%22%3Afalse%2C%5C%22storable%5C%22%3Afalse%2C%5C%22background%5C%22%3Afalse%2C%5C%22cmp%5C%22%3A%5C%22community_navigation-tile-menu%5C%22%2C%5C%22def%5C%22%3A%5C%22aura%3A%2F%2FNavigationMenuController%2FACTION
2024-04-16 17:43:46 UTC	12161	OUT	Data Raw: 4c 69 62 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 6c 69 67 68 74 6e 69 6e 67 25 33 41 63 6c 61 73 73 6e 61 6d 65 73 4c 69 62 72 61 72 79 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 6e 73 25 33 41 6e 6f 74 69 66 69 63 61 74 69 6f 6e 4c 69 62 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 66 6c 65 78 69 70 61 67 65 25 33 41 75 74 69 6c 73 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 6e 73 25 33 41 73 74 6f 72 65 25 35 43 25 32 32 25 35 44 25 32 43 25 35 43 25 32 32 70 61 67 65 43 6f 75 6e 74 65 72 25 35 43 25 32 32 25 33 41 31 25 32 43 25 35 43 25 32 32 70 68 61 73 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 45 50 54 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 70 61 67 65 56 69 65 77 43 6f 75 6e 74 65 72 25 35 43 25 32 32 25 33 41 31 25 32 43 Data Ascii: Lib%5C%22%2C%5C%22lightning%3AclassnamesLibrary%5C%22%2C%5C%22uns%3AnotificationLib%5C%22%2C%5C%22flexipage%3Autils%5C%22%2C%5C%22uns%3Astore%5C%22%5D%2C%5C%22pageCounter%5C%22%3A1%2C%5C%22phase%5C%22%3A%5C%22EPT%5C%22%2C%5C%22pageViewCounter%5C%22%3A1%2C
2024-04-16 17:43:46 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:46 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:46 GMT Server-Timing: Total;dur=273 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 70634000001724b926
2024-04-16 17:43:46 UTC	1947	IN	Data Raw: 37 38 66 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 33 35 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 7b 22 49 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 52 65 73 75 6c 74 20 3a 20 20 28 20 52 45 43 45 49 56 45 44 20 3d 20 37 20 2c 20 53 55 43 43 45 53 53 20 2d 3e 20 55 45 20 3d 20 31 20 2c 20 53 55 43 43 45 53 53 20 2d 3e 20 4c 4f 47 20 3d 20 37 20 2c 20 54 6f 70 69 63 20 3d 20 41 49 4c 54 4e 20 29 20 20 2c 20 54 72 61 63 69 6e 67 52 65 73 70 6f 6e 73 65 20 3a 20 28 20 41 73 79 6e 63 52 65 73 75 6c 74 73 20 29 20 2c 20 54 65 6c 65 6d 65 74 72 79 52 65 73 70 6f 6e 73 65 20 3a 20 28 20 41 73 79 6e 63 52 65 73 75 6c 74 73 20 29 4f 31 31 79 49 6e 73 74 72 75 6d 65 6e 74 61 Data Ascii: 78f{"actions":[{"id":"335;a","state":"SUCCESS","returnValue":{"InstrumentationResult : ( RECEIVED = 7 , SUCCESS -> UE = 1 , SUCCESS -> LOG = 7 , Topic = AILTN ) , TracingResponse : ( AsyncResults ) , TelemetryResponse : ( AsyncResults )O11yInstrumenta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50263	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	2311	OUT	POST /s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 70700000008a9993a7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Cache: 4159c6dd8c0ae034 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; _ga=GA1.1.426113818.1713289394; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false
2024-04-16 17:43:46 UTC	991	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 33 37 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 2e 72 75 6e 74 69 6d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 69 74 65 66 6f 72 63 65 2e 6e 65 74 77 6f 72 6b 2e 74 72 61 63 6b 69 6e 67 2e 4e 65 74 77 6f 72 6b 54 72 61 63 6b 69 6e 67 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 63 72 65 61 74 65 4c 6f 67 52 65 63 6f 72 64 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22337%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.network.tracking.NetworkTrackingController%2FACTION%24createLogRecord%22%2C%22callingDescriptor
2024-04-16 17:43:46 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:46 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:46 GMT Server-Timing: Total;dur=14 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 70700000008a9993a7
2024-04-16 17:43:46 UTC	1411	IN	Data Raw: 35 37 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 33 37 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 74 72 75 65 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f 57 44 64 4c 4f 47 74 58 63 54 5a 71 53 57 5a 69 55 31 39 5a 61 44 4a 46 64 7a 6b 34 62 6b 6b 30 62 56 4a 68 5a 47 4a 43 57 45 39 6d 55 43 31 49 5a 58 5a 52 62 6d 63 79 4e 44 67 75 4d 54 Data Ascii: 577{"actions":[{"id":"337;a","state":"SUCCESS","returnValue":true,"error":[]}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50270	107.178.240.159	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	666	OUT	POST /track/?verbose=1&ip=1&_=1713289425785 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive Content-Length: 2007 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	2007	OUT	Data Raw: 64 61 74 61 3d 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 65 76 65 6e 74 25 32 32 25 33 41 25 32 30 25 32 32 53 63 72 6f 6c 6c 25 32 30 44 65 70 74 68 25 32 32 25 32 43 25 32 32 70 72 6f 70 65 72 74 69 65 73 25 32 32 25 33 41 25 32 30 25 37 42 25 32 32 25 32 34 6f 73 25 32 32 25 33 41 25 32 30 25 32 32 57 69 6e 64 6f 77 73 25 32 32 25 32 43 25 32 32 25 32 34 62 72 6f 77 73 65 72 25 32 32 25 33 41 25 32 30 25 32 32 43 68 72 6f 6d 65 25 32 32 25 32 43 25 32 32 25 32 34 63 75 72 72 65 6e 74 5f 75 72 6c 25 32 32 25 33 41 25 32 30 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 73 25 32 46 25 33 46 6c 61 6e 67 75 61 67 65 25 33 44 65 6e 5f 55 53 25 32 32 25 32 Data Ascii: data=%5B%0A%20%20%20%20%7B%22event%22%3A%20%22Scroll%20Depth%22%2C%22properties%22%3A%20%7B%22%24os%22%3A%20%22Windows%22%2C%22%24browser%22%3A%20%22Chrome%22%2C%22%24current_url%22%3A%20%22https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US%22%2
2024-04-16 17:43:47 UTC	585	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://support.docusign.com access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 25 x-envoy-upstream-service-time: 34 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:47 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 73 74 61 74 75 73 22 3a 31 7d Data Ascii: {"error":null,"status":1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50271	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	1870	OUT	POST /_ui/networks/tracking/NetworkTrackingServlet HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 183 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/apex/zoomin_app__ZoominGAPage Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:46 UTC	183	OUT	Data Raw: 6c 6f 67 4c 69 6e 65 73 3d 25 35 42 25 37 42 25 32 32 6c 6f 67 4e 61 6d 65 25 32 32 25 32 30 3a 25 32 30 25 32 32 6e 65 74 77 6f 72 6b 25 32 32 2c 25 32 30 25 32 32 6c 6f 67 4c 65 76 65 6c 25 32 32 25 32 30 3a 25 32 30 25 32 32 49 4e 46 4f 25 32 32 2c 25 32 30 25 32 32 6c 6f 67 41 74 74 72 73 25 32 32 25 32 30 3a 25 32 30 25 37 42 25 32 32 70 61 67 65 49 64 25 32 32 3a 25 32 30 25 32 32 30 36 36 38 5a 30 30 30 30 30 30 44 62 57 70 25 32 32 2c 25 32 30 25 32 32 76 69 65 77 49 64 25 32 32 3a 25 32 30 25 32 32 25 32 32 25 37 44 25 37 44 25 35 44 Data Ascii: logLines=%5B%7B%22logName%22%20:%20%22network%22,%20%22logLevel%22%20:%20%22INFO%22,%20%22logAttrs%22%20:%20%7B%22pageId%22:%20%220668Z000000DbWp%22,%20%22viewId%22:%20%22%22%7D%7D%5D
2024-04-16 17:43:47 UTC	373	IN	HTTP/1.1 204 No Content Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: application/json; charset=UTF-8 Connection: close Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Strict-Transport-Security: max-age=63072000; includeSubDomains Expires: Thu, 01 Jan 1970 00:00:00 GMT Server: sfdcedge X-SFDC-Request-Id: 9580fccbd3d5410ac0630e4793e13caf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50273	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	767	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=14531&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 71 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	71	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 50 49 2f 61 64 64 50 61 67 65 41 63 74 69 6f 6e 2f 63 61 6c 6c 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 5d 7d Data Ascii: {"sm":[{"params":{"name":"API/addPageAction/called"},"stats":{"c":1}}]}
2024-04-16 17:43:47 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:47 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kpdk1780108-PDK
2024-04-16 17:43:47 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50272	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	763	OUT	POST /ins/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=14532&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 330 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:46 UTC	330	OUT	Data Raw: 7b 22 69 6e 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 32 34 36 36 37 2c 22 74 69 6d 65 53 69 6e 63 65 4c 6f 61 64 22 3a 31 33 2e 33 36 31 2c 22 62 72 6f 77 73 65 72 57 69 64 74 68 22 3a 37 32 2c 22 62 72 6f 77 73 65 72 48 65 69 67 68 74 22 3a 37 32 2c 22 72 65 66 65 72 72 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 22 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 6e 67 65 72 2f 6d 65 73 73 65 6e 67 65 72 2e 68 74 6d 6c 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 Data Ascii: {"ins":[{"timestamp":1713289424667,"timeSinceLoad":13.361,"browserWidth":72,"browserHeight":72,"referrerUrl":"https://support.docusign.com/","currentUrl":"https://apps.usw2.pure.cloud/messenger/messenger.html","pageUrl":"https://apps.usw2.pure.cloud/messe
2024-04-16 17:43:47 UTC	317	IN	HTTP/1.1 204 Connection: close date: Tue, 16 Apr 2024 17:43:47 GMT cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130048-PDK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50268	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	812	OUT	GET /messenger/messenger.html HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "1404b75da8e2bb3dc0247b949a748afe" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:47 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:47 GMT Connection: close Server: nginx x-amz-id-2: uvutQWR3v6Ia0KVwsMWALkCF3tQMlpmJb7EJ+kwlBpAiIk5pyqgOUJu4Vwc7XgP11BYXHz/0+No= x-amz-request-id: HFXPYK37Q5795CGG Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Egti0qFAf6IRzb_4DWuRcv7zla5vN2pe ETag: "1404b75da8e2bb3dc0247b949a748afe" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50269	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:46 UTC	821	OUT	GET /messenger/messenger-renderer.html HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5e33c9db52cede671fbd6ced2fa68603" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:47 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:47 GMT Connection: close Server: nginx x-amz-id-2: 1vqbf04UiAunxlUlGNHWFvf73CIy2xNldx95FNQl42WGBhKd0NnoyL6Mn6ZolEFVHQOSoiNTGFA= x-amz-request-id: HFXSXANW2V6HR7PT Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 2meds8fQBL5KFWr9otYXvOKXw4Grwen2 ETag: "5e33c9db52cede671fbd6ced2fa68603" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50274	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1304	OUT	POST /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/beacons?data=eyJfdiI6IjIuMTIwMi4wIiwiX2FjdG11IjoiOGNmN2MzYjctZmU3ZC00MGZmLTg5YjYtMTUwNmM2MzY3Zjk2IiwiYXR0Ijp7fSwiY2lkIjoiOGNmN2MzYjctZmU3ZC00MGZmLTg5YjYtMTUwNmM2MzY3Zjk2IiwiY3ZjIjoiMSIsImRrIjpudWxsLCJkbCI6Imh0dHBzOi8vc3VwcG9ydC5kb2N1c2lnbi5jb20vcy8%2FbGFuZ3VhZ2U9ZW5fVVMiLCJkbiI6ImVuLVVTIiwiZHJ1IjpudWxsLCJkdCI6IkhvbWUiLCJmZiI6ZmFsc2UsImZqIjpmYWxzZSwiZnAiOnRydWUsImZ3Ijp0cnVlLCJzYmMiOjIsInNoIjoxMDI0LCJzaWQiOiJkNjE1Nzg1MC1mYzE4LTExZWUtYTg2MC02NWQzMmU1NzJlODciLCJzcGMiOjIsInNydSI6bnVsbCwic3NmIjowLCJzc3AiOjAsInN3IjoxMjgwLCJ0IjoicGFnZXZpZXciLCJ0YmMiOjIsInRwYyI6MiwidHRzIjp7fSwidmgiOjkwNywidnciOjEyODB9&type=pageview HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	853	IN	HTTP/1.1 204 No Content Connection: close Date: Tue, 16 Apr 2024 17:43:47 GMT ININ-Correlation-Id: a0ea160b-21c3-4f20-9eb9-82b3dd55fb4e Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: https://support.docusign.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 9768d3869cd25955b086c1904f7610fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: 4B4tFJL9Qvv4EzsUQg0g3zVlasfM1XeaQgTpuu-nwyfst5asrapmsQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50276	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1608	OUT	GET /visitor/v200/svrGP?pps=70&siteid=566810826&ms=121&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: application/javascript; charset=utf-8 Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:46 GMT Connection: close Content-Length: 79
2024-04-16 17:43:47 UTC	79	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 71 43 75 73 74 6f 6d 65 72 47 55 49 44 28 29 7b 20 72 65 74 75 72 6e 20 27 36 34 30 30 61 31 33 38 2d 32 33 32 63 2d 34 32 38 65 2d 38 37 38 36 2d 36 61 66 33 38 33 32 31 35 63 36 65 27 3b 20 7d Data Ascii: function GetElqCustomerGUID(){ return '6400a138-232c-428e-8786-6af383215c6e'; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50275	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1768	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&ref2=elqNone&tzo=-60&ms=121&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:46 GMT Connection: close Content-Length: 49
2024-04-16 17:43:47 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50281	130.211.34.183	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713289425049 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:47 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50282	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	648	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=2&ClientTime=1713289425091&PageStart=1713289420652&PrevBundleTime=1713289423665&LastActivity=2543&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:47 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50283	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	630	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=8&ClientTime=1713289425097&PageStart=1713289404678&PrevBundleTime=1713289424681&LastActivity=7856&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:47 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50278	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1802	OUT	GET /s/sfsites/aura?r=5&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 72e4a36d44739a1bf9a876f9f78d9ca4
2024-04-16 17:43:47 UTC	1584	IN	Data Raw: 36 32 34 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 624<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50279	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1802	OUT	GET /s/sfsites/aura?r=4&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 934c67d70d3c224dba8b7ab1b694a453
2024-04-16 17:43:47 UTC	1584	IN	Data Raw: 36 32 34 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 624<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50280	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1802	OUT	GET /s/sfsites/aura?r=3&aura.NavigationMenu.getCommunityNavigationMenu=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 1f9f962ea708b333262cd8c1a49cd7d4
2024-04-16 17:43:47 UTC	1584	IN	Data Raw: 36 32 34 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 624<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50284	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1857	OUT	GET /s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: 5974673cc0012d2d770d4a63d30a91f8
2024-04-16 17:43:47 UTC	1749	IN	Data Raw: 36 63 39 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 6c9<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50285	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1823	OUT	GET /s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:47 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: d26f8f05cfde1fd74af9818da39ac8dd
2024-04-16 17:43:47 UTC	1647	IN	Data Raw: 36 36 33 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 663<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50288	130.211.34.183	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	380	OUT	GET /track/?verbose=1&ip=1&_=1713289425785 HTTP/1.1 Host: api-js.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	557	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 45 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-16 17:43:47 UTC	45	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 64 61 74 61 2c 20 6d 69 73 73 69 6e 67 20 6f 72 20 65 6d 70 74 79 22 2c 22 73 74 61 74 75 73 22 3a 30 7d Data Ascii: {"error":"data, missing or empty","status":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50290	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	911	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=3&ClientTime=1713289426572&PageStart=1713289420652&PrevBundleTime=1713289426426&LastActivity=1309&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 5944 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	5944	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 3c 8b 72 db b6 96 bf c2 ab 9d 68 e2 0e 29 13 20 08 92 f2 6a bb 79 38 ad b7 49 da ad 9d db ed f5 ed 78 28 12 92 19 53 24 43 52 7e a4 93 6f bb 9f b4 bf b0 e7 80 a4 08 52 92 25 3b 49 f7 ee 6c 93 56 a1 0e 80 83 f3 3e 07 20 a0 df 07 a7 e2 c3 60 6c e9 83 5f 2e 45 32 18 db 26 67 fa e0 f8 ba 2c 06 e3 f3 df 07 3f 44 49 38 18 13 d3 d4 07 cf f2 39 c2 06 d7 51 11 4d 63 31 f8 4d 1d f2 49 6f fa da 74 d5 55 ed c1 db 1e ee aa 03 67 96 ce 2c 57 77 98 d9 f6 25 44 e9 db 22 63 ba 41 f4 f3 73 8b 3a ba 0d 9d 47 41 ba 58 18 65 14 0b 63 21 92 e5 c5 45 54 8a 85 11 47 c9 d5 28 be 09 0c 96 a6 f6 fb 4b 9a 25 74 a1 fd 3e 4d f3 50 e4 63 2d 49 13 71 74 13 85 e5 e5 58 03 96 9e 1c 85 51 91 c5 fe dd 58 8b 12 18 29 8c 69 9c 06 57 47 0b ff d6 a8 7b 59 cc cc Data Ascii: <rh) jy8Ix(S$CR~oR%;IlV> `l_.E2&g,?DI89QMc1MIotUg,Ww%D"cAs:GAXec!ETG(K%t>MPc-IqtXQX)iWG{Y
2024-04-16 17:43:47 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:47 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 37 36 34 37 7d 0a Data Ascii: {"BundleTime":1713289427647}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50277	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	686	OUT	GET /messenger/newrelic/newrelic-agent.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "bef52ea8bdb8c39fa5bc9bc09918e7ef" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:47 GMT Connection: close Server: nginx x-amz-id-2: akX2+Uz6q6lHvj3A4YzssR4KyG+z44XBgzmKI7AOiYtrb0F2ISkw0tT8V8B4wQhaTGzU5W/zksc= x-amz-request-id: RS1WJCTE3XV1MN38 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: NzubLuoKu1Bjg1k1MjanL1tB2.dmTRV_ ETag: "bef52ea8bdb8c39fa5bc9bc09918e7ef" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50289	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	889	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=9&ClientTime=1713289426590&PageStart=1713289404678&PrevBundleTime=1713289426428&LastActivity=0&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	712	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 94 6d 6f d3 30 10 c7 bf 4a f0 8b 0a 24 3b f1 53 fc 50 28 d3 36 c6 83 c6 d8 44 3b 4d 08 a1 c9 49 dc d6 5a 9a 74 b1 5b 36 a6 7d 77 bc 07 ba 76 80 40 bc 26 8e a2 e8 f2 bb 73 ee fe 77 be 02 43 7b 0e fa 1a 82 93 a9 6d 40 9f 52 85 25 04 7b cb e0 41 ff f3 15 d8 77 4d 05 fa 79 34 6d 77 93 1b 13 21 10 78 5b 8f 01 64 98 13 9a e6 90 30 f6 65 c3 fd 1a fe c2 8f 42 30 0d 61 ee fb 59 d6 f9 74 bc a8 6b 1f da ee 32 2d db 59 d6 d9 32 2b 16 4d 55 db 6c 49 b7 0e bb c9 bb 6a d0 22 a2 5f bd de 39 40 8d 21 bd 63 6f bb 68 b3 85 21 a5 90 1c 19 8d 73 c4 b9 2a 51 61 30 47 79 c1 0b 41 88 26 4c e7 bd a1 f5 de b5 4d c4 71 65 95 e2 7c 8c b0 60 32 e2 b4 40 4a 4b 89 2a c6 18 1d 63 6e 31 35 bd 23 33 b1 91 25 d6 c8 8a 48 8d 08 37 91 25 96 a2 42 1b 86 08 c9 Data Ascii: mo0J$;SP(6D;MIZt[6}wv@&swC{m@R%{AwMy4mw!x[d0eB0aYtk2-Y2+MUlIj"_9@!coh!sQa0GyA&LMqe\|`2@JKcn15#3%H7%B
2024-04-16 17:43:47 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:47 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 37 36 35 35 7d 0a Data Ascii: {"BundleTime":1713289427655}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50292	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	912	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=3&ClientTime=1713289426565&PageStart=1713289420652&PrevBundleTime=1713289426426&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 24371 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	16384	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 35 30 36 34 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 35 30 36 34 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 35 30 36 36 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 34 33 2c 34 33 38 2c 37 34 30 5d 2c 22 57 68 65 6e 22 3a 35 31 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 32 2c 22 41 72 67 73 22 3a 5b 34 2c 2d 31 2c 5b 5b 33 32 37 2c 35 5d 2c 22 2e 63 6f 6d 6d 2d 74 69 6c 65 2d 6d 65 6e 75 5f 5f 69 74 65 6d 2d 6c 69 6e 6b 2e 6c 77 63 2d 34 6f 6f 35 6a 68 32 70 6e 32 6d 20 7b 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 Data Ascii: {"Seq":3,"When":5064,"Evts":[{"Kind":100,"Args":["visible"],"When":5064},{"Kind":52,"Args":[],"When":5066},{"Kind":8,"Args":[643,438,740],"When":5116},{"Kind":2,"Args":[4,-1,[[327,5],".comm-tile-menu__item-link.lwc-4oo5jh2pn2m {border: none;width: 100%;di
2024-04-16 17:43:47 UTC	7987	OUT	Data Raw: 29 20 66 72 6f 6d 20 31 35 30 25 5c 6e 20 20 20 20 64 65 73 6b 74 6f 70 73 20 2a 2f 5c 6e 5c 6e 20 20 20 20 20 20 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 31 2e 35 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 2e 6d 78 67 2d 64 65 73 6b 74 6f 70 2d 77 69 6e 64 6f 77 73 2d 63 68 72 6f 6d 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 37 30 25 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 2e 6d 78 67 2d 64 65 73 6b 74 6f 70 2d 6d 61 63 2d 63 68 72 6f 6d 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 38 30 25 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 7d 5c 6e Data Ascii: ) from 150%\n desktops */\n\n @media all and (-webkit-min-device-pixel-ratio: 1.5) {\n .mxg-desktop-windows-chrome {\n max-height: 70%;\n }\n .mxg-desktop-mac-chrome {\n max-height: 80%;\n }\n }\n
2024-04-16 17:43:47 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50291	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	893	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=9&ClientTime=1713289426590&PageStart=1713289404678&PrevBundleTime=1713289426428&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1618 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:47 UTC	1618	OUT	Data Raw: 7b 22 53 65 71 22 3a 39 2c 22 57 68 65 6e 22 3a 32 32 38 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 31 2c 22 73 65 6c 66 22 2c 33 30 34 31 32 2e 35 2c 31 33 33 5d 2c 22 57 68 65 6e 22 3a 32 32 38 30 37 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 6f 2d 31 39 44 46 42 4d 2d 6e 61 31 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 Data Ascii: {"Seq":9,"When":22807,"Evts":[{"Kind":57,"Args":[11,"self",30412.5,133],"When":22807},{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02
2024-04-16 17:43:47 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:47 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50295	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:47 UTC	1529	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&ref2=elqNone&tzo=-60&ms=121&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:48 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:47 GMT Connection: close Content-Length: 49
2024-04-16 17:43:48 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50297	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	910	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=4&ClientTime=1713289427153&PageStart=1713289420652&PrevBundleTime=1713289427647&LastActivity=507&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	1516	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 56 fb 6f e2 46 10 fe 57 a8 a5 a2 56 b2 cd 3e ec b5 9d 96 46 09 21 1c b9 00 69 78 1d 54 a7 93 bd 5e c3 82 5f f1 03 02 a7 fe ef 1d 73 97 40 92 5e 5b 55 ea 4f b5 2d b1 cc 7e 33 3b f3 cd ce ec 7e 56 86 e2 41 39 33 54 65 ba 14 b1 72 c6 4c 8a 55 a5 bd 29 72 e5 ec b7 cf ca 7b 19 fb ca 19 46 48 55 2e b2 45 25 53 36 32 97 5e 28 94 8f a7 2a bf ab 4f 58 fb 19 c9 0c aa 1a d4 56 6d 84 4e b1 f4 88 35 ad 67 30 51 95 65 51 a4 f9 59 a3 e1 a6 52 2f f3 2d d1 d3 32 13 3a 0f 93 d2 af 64 8d 0d 69 ac 92 32 8b c5 ae e1 8b 34 4c 76 91 88 8b bc 41 04 c2 06 0f 88 e6 31 ce 34 c3 44 86 66 5b 24 d0 28 e1 81 ed 1a 1e 45 98 35 78 99 17 49 24 b2 bc 61 f3 c0 e2 d4 b3 b4 40 58 be 66 a0 20 d0 6c c7 63 1a 36 11 e8 53 66 05 0e 6b 78 c2 e5 49 9c 9f fb 6e e1 36 Data Ascii: VoFWV>F!ixT^_s@^[UO-~3;~VA93TerLU)r{FHU.E%S62^(*OXVmN5g0QeQYR/-2:di24LvA14Df[$(E5xI$a@Xf lc6SfkxIn6
2024-04-16 17:43:48 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 38 32 34 38 7d 0a Data Ascii: {"BundleTime":1713289428248}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50298	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	891	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=10&ClientTime=1713289427167&PageStart=1713289404678&PrevBundleTime=1713289427655&LastActivity=18&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 975 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	975	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 9a 8b 6e db 36 14 86 5f 45 e3 00 a3 05 28 99 37 f1 e2 ce 2b 92 34 eb 86 34 6b 30 27 08 b6 22 08 28 89 76 84 c8 a2 22 c9 5e 92 a2 ef 3e da 4e 1c 39 35 d6 35 58 36 a0 a0 65 10 c2 f1 cf f3 f9 f0 a7 08 c2 f4 47 30 32 57 60 80 11 04 a7 17 a6 04 03 42 29 53 10 ec cf db 06 0c 3e 7c 04 07 79 99 81 41 2c 20 d8 a9 27 8b 10 87 04 0b c2 99 62 82 40 8c 98 94 4a 49 06 25 17 8a 52 ca cf 36 12 7d 82 5b 32 10 08 2e da b6 6a 06 fd 7e dd 44 e3 59 51 34 ad ad 6f a2 d4 4e fb b5 49 fb c9 ac cc 0a d3 9f 93 d7 ef eb c9 2f d9 d0 86 58 bd f9 69 f7 30 2c 35 ee 9d 34 a6 76 31 93 68 9c 72 c1 42 ad 50 1c 32 26 d3 30 d1 88 85 71 c2 12 8e b1 c2 54 c5 bd 91 69 9a dc 96 4e 8e 32 23 25 63 e3 10 71 2a 9c 9c 24 a1 54 42 84 99 fb ca 64 8c 98 41 44 f7 8e f4 c4 Data Ascii: n6_E(7+44k0'"(v"^>N955X6eG02W`B)S>\|yA, 'b@JI%R6}[2.j~DYQ4oNI/Xi0,54v1hrBP2&0qTiN2#%cq*$TBdAD
2024-04-16 17:43:48 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 38 32 34 38 7d 0a Data Ascii: {"BundleTime":1713289428248}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50300	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	765	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=15862&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 16 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	16	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 63 38 34 2c Data Ascii: bel.6;e,'fp,c84,
2024-04-16 17:43:48 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:48 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130032-PDK
2024-04-16 17:43:48 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50299	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	911	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=4&ClientTime=1713289427152&PageStart=1713289420652&PrevBundleTime=1713289427647&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	3189	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 35 33 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 35 33 31 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 34 33 2c 34 33 38 2c 38 30 30 5d 2c 22 57 68 65 6e 22 3a 36 35 33 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 61 70 69 2f 76 32 2f 6a 6f 75 72 6e 65 79 2f 64 65 70 6c 6f 79 6d 65 6e 74 73 2f 32 65 30 31 34 63 66 32 2d 62 36 63 36 2d 34 35 30 34 2d 38 37 32 66 2d 33 32 63 66 38 61 34 62 33 30 31 36 2f 63 75 73 74 6f 6d 65 72 73 2f 38 63 66 37 63 33 62 37 2d 66 65 37 64 2d Data Ascii: {"Seq":4,"When":6531,"Evts":[{"Kind":100,"Args":["visible"],"When":6531},{"Kind":8,"Args":[643,438,800],"When":6533},{"Kind":57,"Args":[2,"https://api.usw2.pure.cloud/api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-
2024-04-16 17:43:48 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50301	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	894	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=10&ClientTime=1713289427167&PageStart=1713289404678&PrevBundleTime=1713289427655&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 9291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	9291	OUT	Data Raw: 7b 22 53 65 71 22 3a 31 30 2c 22 57 68 65 6e 22 3a 32 33 33 34 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 31 30 34 38 38 39 39 38 34 2c 38 36 37 39 33 33 33 36 5d 2c 22 57 68 65 6e 22 3a 32 33 33 34 39 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 6f 2d 31 39 44 46 42 4d 2d 6e 61 31 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d Data Ascii: {"Seq":10,"When":23349,"Evts":[{"Kind":57,"Args":[6,2172649472,104889984,86793336],"When":23349},{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-
2024-04-16 17:43:48 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50302	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	627	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=9&ClientTime=1713289426590&PageStart=1713289404678&PrevBundleTime=1713289426428&LastActivity=0&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50303	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	648	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=3&ClientTime=1713289426572&PageStart=1713289420652&PrevBundleTime=1713289426426&LastActivity=1309&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50293	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	677	OUT	GET /cxbus/cxbus.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "db8d92de3c253178a1b250bfc17106e6" If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:48 GMT Connection: close Server: nginx x-amz-id-2: VN/qJRgzuwcdUs9CPRhakQMnIr/MjAsgglbEiU2YjSDbFYyVstX1OLe0IErtgDNahj0IidWAuF0= x-amz-request-id: B7SD623MZCT137G9 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 12 Sep 2023 08:53:11 GMT x-amz-version-id: Gz6x1Dz1QjVdKSyy.XKzzGvf5X5EX9XE ETag: "db8d92de3c253178a1b250bfc17106e6" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50304	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	629	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1ea7d179-14a7-41e2-b9a3-115604c6ad2f&Seq=10&ClientTime=1713289427167&PageStart=1713289404678&PrevBundleTime=1713289427655&LastActivity=18&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50305	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	647	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=4&ClientTime=1713289427153&PageStart=1713289420652&PrevBundleTime=1713289427647&LastActivity=507&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:48 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:48 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50306	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:48 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289427913&PageStart=1713289396931&PrevBundleTime=1713289424682&LastActivity=17499&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:48 UTC	872	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 96 6d 6f db 36 10 c7 bf 8a 46 a0 42 0b 50 32 9f 29 a6 f3 8a 24 cb d6 22 4d 1b cc e9 82 ae 28 0a 4a a2 6d 35 b2 a4 88 b4 dd b4 e8 77 1f e5 26 8e 9f d2 14 7b d1 01 ad a8 17 d2 f9 7f c7 f3 fd 78 22 3f 81 81 b9 04 7b 18 41 70 3e 36 95 7f a2 88 29 08 8e 66 ce 82 bd 37 9f c0 71 51 e5 60 8f 4b 08 f6 db 51 67 22 10 8c 9d 6b ec 5e af e7 f4 c8 c6 b6 9d c5 d6 e9 ec 42 e7 ba 71 71 56 4f 7a ef ed 3b d7 7a 4b 51 8d 9e 4c db b2 bf d0 3f a0 fb 0f c8 1f fe 9e cf e7 71 5e 67 53 5b 8c aa 4e ee 4d 4d 5b cc 74 76 15 4e 8b bc af df 3f ad 5e a7 ff 98 bf a7 cc 95 bc 41 d4 8d 4f c8 28 9c f5 71 38 ae ad bb 27 18 80 04 71 a5 62 85 6e 2e 42 21 4b 70 2c d5 cd 95 24 54 40 f0 61 52 76 91 5a 73 39 35 d6 01 88 fc d8 e1 8a d6 06 c1 a8 0b b5 14 e0 2f f6 b7 Data Ascii: mo6FBP2)$"M(Jm5w&{x"?{Ap>6)f7qQ`KQg"k^BqqVOz;zKQL?q^gS[NMM[tvN?^AO(q8'qbn.B!Kp,$T@aRvZs95/
2024-04-16 17:43:49 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:49 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:49 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 32 38 39 38 33 7d 0a Data Ascii: {"BundleTime":1713289428983}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50307	3.161.150.28	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	807	OUT	GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289428109&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&dt=Home HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 14 Connection: close Date: Tue, 16 Apr 2024 17:43:49 GMT ININ-Correlation-Id: d68dd48e-2319-4c3b-b5ea-f22823782386 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: https://support.docusign.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 bfe91825b1dd213ccc1a59181b997ae4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: SQW9g2sS3fObIOEN5y61DLMCQRU3SuS38KxG-acknpxUQLft7ljwCQ==
2024-04-16 17:43:49 UTC	14	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 7d Data Ascii: {"actions":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50309	13.109.180.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	2269	OUT	POST /s/sfsites/aura?r=8&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive Content-Length: 831 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-SFDC-Page-Scope-Id: 4fe4ac78-9f09-4aed-8c35-fa1088cabc5b X-SFDC-Request-Id: 99286000000641d659 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/s/?language=en_US Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:49 UTC	831	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 25 37 42 25 32 32 61 63 74 69 6f 6e 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 33 38 25 33 42 61 25 32 32 25 32 43 25 32 32 64 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 41 25 32 32 73 65 72 76 69 63 65 43 6f 6d 70 6f 6e 65 6e 74 25 33 41 25 32 46 25 32 46 75 69 2e 63 6f 6d 6d 2e 72 75 6e 74 69 6d 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 61 75 72 61 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 69 74 65 66 6f 72 63 65 2e 71 62 2e 51 75 61 72 74 65 72 62 61 63 6b 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 46 41 43 54 49 4f 4e 25 32 34 67 65 74 41 6c 6c 6f 77 65 64 50 6f 73 74 4d 65 73 73 61 67 65 4f 72 69 67 69 6e 73 25 32 32 25 32 43 25 32 32 63 61 6c 6c 69 6e 67 44 65 73 63 72 69 70 74 6f 72 25 32 32 25 33 Data Ascii: message=%7B%22actions%22%3A%5B%7B%22id%22%3A%22338%3Ba%22%2C%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.qb.QuarterbackController%2FACTION%24getAllowedPostMessageOrigins%22%2C%22callingDescriptor%22%3
2024-04-16 17:43:49 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Expires: Mon, 17 Apr 2023 17:43:49 GMT Vary: Origin, Accept-Encoding Last-Modified: Mon, 17 Apr 2023 17:43:49 GMT Server-Timing: Total;dur=16 Timing-Allow-Origin: * Server: sfdcedge X-SFDC-Request-Id: 99286000000641d659
2024-04-16 17:43:49 UTC	1411	IN	Data Raw: 35 37 37 0d 0a 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 33 33 38 3b 61 22 2c 22 73 74 61 74 65 22 3a 22 53 55 43 43 45 53 53 22 2c 22 72 65 74 75 72 6e 56 61 6c 75 65 22 3a 5b 22 22 5d 2c 22 65 72 72 6f 72 22 3a 5b 5d 7d 5d 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 6d 6f 64 65 22 3a 22 50 52 4f 44 22 2c 22 61 70 70 22 3a 22 73 69 74 65 66 6f 72 63 65 3a 63 6f 6d 6d 75 6e 69 74 79 41 70 70 22 2c 22 63 6f 6e 74 65 78 74 50 61 74 68 22 3a 22 2f 73 2f 73 66 73 69 74 65 73 22 2c 22 70 61 74 68 50 72 65 66 69 78 22 3a 22 22 2c 22 66 77 75 69 64 22 3a 22 5a 44 52 4f 57 44 64 4c 4f 47 74 58 63 54 5a 71 53 57 5a 69 55 31 39 5a 61 44 4a 46 64 7a 6b 34 62 6b 6b 30 62 56 4a 68 5a 47 4a 43 57 45 39 6d 55 43 31 49 5a 58 5a 52 62 6d 63 79 4e 44 67 75 4d 54 Data Ascii: 577{"actions":[{"id":"338;a","state":"SUCCESS","returnValue":[""],"error":[]}],"context":{"mode":"PROD","app":"siteforce:communityApp","contextPath":"/s/sfsites","pathPrefix":"","fwuid":"ZDROWDdLOGtXcTZqSWZiU19ZaDJFdzk4bkk0bVJhZGJCWE9mUC1IZXZRbmcyNDguMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50308	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	668	OUT	GET /cxbus/cxbus.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "db8d92de3c253178a1b250bfc17106e6" If-Modified-Since: Tue, 12 Sep 2023 08:53:11 GMT
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:49 GMT Connection: close Server: nginx x-amz-id-2: VgJxuo13F7gzSJ+J2k632JKTY4KB6laqACh+9Mx+GtA23ZIoRovJuqEjCosNVDzfWPCUvRD5auo= x-amz-request-id: CT802FYRKEYRQ4JR Cache-Control: max-age=0, no-cache Last-Modified: Tue, 12 Sep 2023 08:53:11 GMT x-amz-version-id: Gz6x1Dz1QjVdKSyy.XKzzGvf5X5EX9XE ETag: "db8d92de3c253178a1b250bfc17106e6" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50312	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	695	OUT	GET /messenger/messagingMiddleware.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "020a1227b513dcb833482e5f322a09b1" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:49 GMT Connection: close Server: nginx x-amz-id-2: EsqFAAZDnW9FgxTwahrIJQvMfopUOQuxkhK0vmzNcOMujm90cIIPPB6l36gKwFyE2yzuuWVOfbY= x-amz-request-id: 7Y3NWPCW23K6262P Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 82d3Gc.Qzs5.mCvabKm1QvqiKFWbLulV ETag: "020a1227b513dcb833482e5f322a09b1" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50313	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	690	OUT	GET /messenger/defaultVendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:49 GMT Connection: close Server: nginx x-amz-id-2: /7M8nus3xN7hisMiAlE8bhUe7ghmH793qt8JuERWt5HZYTxGcthUW2yiVUGMak39kHViDT9Y8lQ= x-amz-request-id: GWD2TTMPA7DN9KP8 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: W1TMtBBx4kZ_cpFkD5SoYEiYHCTzxLbY ETag: "10f8d6d1314d8f24ce392dcfaabc242f" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50310	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	683	OUT	GET /messenger/vendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:49 GMT Connection: close Server: nginx x-amz-id-2: Acw2vtLg1S5sW5Cy1Z4Gv/ERGv/ZVfK+LX3GB22AUL254OS8hDNIaXGWeR7gyoNzu2XQNvjS+nU= x-amz-request-id: 7Y3SN3HQZQP2W937 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: illAxlFITPjW5xShztSlJcO1d8iuDa3E ETag: "d3b727da8b0bbff49f1983a706c13dc9" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50314	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	644	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289427913&PageStart=1713289396931&PrevBundleTime=1713289424682&LastActivity=17499&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:49 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:49 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50311	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	693	OUT	GET /messenger/messengerrenderer.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "813595c713c9bbfa2821b3169e3b8523" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:49 GMT Connection: close Server: nginx x-amz-id-2: /22QrUFaCiBJ2p6uPx3nlSCQ8U8kXDHx27oI8JWI/O4js7n7W2Y8aNviN7X9UAubXlNWAUoy0M4= x-amz-request-id: GWD0XBV5HD4JWZ1C Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: aAmKzFp5e.hwPTYaUYpYtFig0FRCmHsD ETag: "813595c713c9bbfa2821b3169e3b8523" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50315	3.161.150.72	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	593	OUT	GET /api/v2/journey/deployments/2e014cf2-b6c6-4504-872f-32cf8a4b3016/customers/8cf7c3b7-fe7d-40ff-89b6-1506c6367f96/ping?sessionId=d6157850-fc18-11ee-a860-65d32e572e87&t=1713289428109&dl=https%3A%2F%2Fsupport.docusign.com%2Fs%2F%3Flanguage%3Den_US&dt=Home HTTP/1.1 Host: api.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:49 UTC	870	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 14 Connection: close Date: Tue, 16 Apr 2024 17:43:49 GMT ININ-Correlation-Id: 506c3f74-6dd1-4c16-b1d5-8be72b42260a Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, DNT, User-Agent, Keep-Alive, Cache-Control, ININ-Client-Path, Genesys-App Access-Control-Expose-Headers: Retry-After,inin-correlation-id Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 91853f8dc83bc719de6524b8581512d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: KEIB_MySGR0iH5716VIi7k3yxfTlAi5GEEuTADAd1bq_rLd8_XPd6w==
2024-04-16 17:43:49 UTC	14	IN	Data Raw: 7b 22 61 63 74 69 6f 6e 73 22 3a 5b 5d 7d Data Ascii: {"actions":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50316	13.109.180.6	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:49 UTC	1852	OUT	GET /s/sfsites/aura?r=8&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.getAllowedPostMessageOrigins=1 HTTP/1.1 Host: support.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: renderCtx=%7B%22pageId%22%3A%22bfd6e0ae-cd7e-4358-90c8-87f8de2344ca%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%2252bff5e6-866e-4e63-8c44-d79144c0db18%22%2C%22audienceIds%22%3A%22%22%7D; optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _fbp=fb.1.1713289397443.1522943348; sfdc-stream=!SeoGGTaV6nN6Cz2fa0Z5F35sAsSoZprUW4NVAi8iXMMaue7rbCnGYhQpE9qRgWVX9DHMmKMEFoUiiw==; pctrk=d4cc93a6-707e-47e4-baa5-0bb7f1ecb6ae; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:43:50 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=63072000; includeSubDomains Content-Security-Policy: upgrade-insecure-requests Access-Control-Allow-Origin: * Cache-Control: must-revalidate,no-cache,no-store Vary: Accept-Encoding Server: sfdcedge X-SFDC-Request-Id: dee4642bc2a1168a53b58e8bb1912aa9
2024-04-16 17:43:50 UTC	1734	IN	Data Raw: 36 62 61 0d 0a 0a 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 48 54 54 50 2d 45 51 55 49 56 3d 22 50 52 41 47 4d 41 22 20 43 4f 4e 54 45 4e 54 3d 22 4e 4f 2d 43 41 43 48 45 22 3e 0a 0a 0a 0a 0a 0a 3c 73 63 72 69 70 74 3e 0a 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 4f 6e 4c 6f 61 64 28 29 20 7b 0a 69 66 20 28 74 68 69 73 2e 53 66 64 63 41 70 70 20 26 26 20 74 68 69 73 2e 53 66 64 63 41 70 70 2e 70 72 6f 6a Data Ascii: 6ba<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head> <meta HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE"><script>function redirectOnLoad() {if (this.SfdcApp && this.SfdcApp.proj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50321	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	686	OUT	GET /messenger/messagingMiddleware.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "020a1227b513dcb833482e5f322a09b1" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:50 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:50 GMT Connection: close Server: nginx x-amz-id-2: cGlXju7DCckkiIonQTBrOuLNbvYOMFRa8TKxG18S5dV/BWltzTvyqE3tWLBhh1VJcb4qxFIx3xE= x-amz-request-id: CT889YBXKY72QVGY Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 82d3Gc.Qzs5.mCvabKm1QvqiKFWbLulV ETag: "020a1227b513dcb833482e5f322a09b1" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50320	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	681	OUT	GET /messenger/defaultVendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "10f8d6d1314d8f24ce392dcfaabc242f" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:50 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:50 GMT Connection: close Server: nginx x-amz-id-2: GSie7ppsab49latYYHOgZRPUMxBUYkodV9eRwdPegjnBPp1hSRGc0cUfVpPb0eKmWcp+t+EH9R4= x-amz-request-id: GWD9R6WNSJYJW7X2 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: W1TMtBBx4kZ_cpFkD5SoYEiYHCTzxLbY ETag: "10f8d6d1314d8f24ce392dcfaabc242f" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50319	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	674	OUT	GET /messenger/vendors.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "d3b727da8b0bbff49f1983a706c13dc9" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:50 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:50 GMT Connection: close Server: nginx x-amz-id-2: AOBEPRYeAuDBpjmENoXV3ZXs7gxb6ME70IHmD+AGneXWhfzxcu0kn5TvPzNmiFKaGu4EH/KhVl8= x-amz-request-id: GWDBGXMHFN42CQT1 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: illAxlFITPjW5xShztSlJcO1d8iuDa3E ETag: "d3b727da8b0bbff49f1983a706c13dc9" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50317	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	671	OUT	GET /messenger/main.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "59acf392aa2c87d95d6ef613d1006f16" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:50 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:50 GMT Connection: close Server: nginx x-amz-id-2: zFioLBzzKDck7/rU8l5w+N52/1nIZosIObwLo37SOxOCxw/zEc6fY0k179SVZbrbdohtJ0YVqsE= x-amz-request-id: CT889S2RA4WDYD8V Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: rbUuzdI752EACo98HjCpTo90eLZ7rVQz ETag: "59acf392aa2c87d95d6ef613d1006f16" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50318	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	673	OUT	GET /messenger/engage.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "71718bec692e211bc3ea5fc2d18f4284" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:50 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:50 GMT Connection: close Server: nginx x-amz-id-2: 2t7hH9sJoJpqbg6TY+jdytUOiRFZJo3Hn6YnrxC7/+y86J/JGc2sLLjP5GXxOw5w8L5gEk2+9to= x-amz-request-id: RJQQDF2H9NKR17SN Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: xx0U2QJPfS_GLP.J024uNcMeCQmpzThK ETag: "71718bec692e211bc3ea5fc2d18f4284" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50322	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:50 UTC	1064	OUT	POST /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=4167&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=748&fe=3408&dc=732&perf=%7B%22timing%22:%7B%22of%22:1713289425677,%22n%22:0,%22f%22:1,%22dn%22:43,%22dne%22:43,%22c%22:43,%22s%22:45,%22ce%22:406,%22rq%22:406,%22rp%22:748,%22rpe%22:749,%22di%22:1480,%22ds%22:1480,%22de%22:1480,%22dc%22:4154,%22l%22:4155,%22le%22:4156%7D,%22navigation%22:%7B%7D%7D HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:51 UTC	452	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Tue, 16 Apr 2024 17:43:51 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud access-control-expose-headers: Date timing-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130054-PDK
2024-04-16 17:43:51 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 31 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4f 44 45 78 4e 44 55 33 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4d 54 4d 34 4e 6a 45 30 4e 44 45 7a 4f 41 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":1,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"ODExNDU3fEJST1dTRVJ8QVBQTElDQVRJT058MTM4NjE0NDEzOA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50323	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:51 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:51 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 32 34 36 37 32 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289424672,"level":"INFO","message":"WS Reconnec
2024-04-16 17:43:51 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:43:51 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 64 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50324	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:51 UTC	671	OUT	GET /messenger/i18n/en-us.json HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c7a28573ad8e4e0572990059d433fae2" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:51 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:51 GMT Connection: close Server: nginx x-amz-id-2: cKh7D9RSWSnlGxXY4Sd9zpHIvBSpZ+SOJUZQkgZtPkJiBfDpRUvC6Rn4nTs2qR71GKLatvXywko= x-amz-request-id: 7Y3MGARC520WRZTH Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 5VxhXH0bSZ0fp1CH2FPkZtKFcDQTAhP_ ETag: "c7a28573ad8e4e0572990059d433fae2" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50325	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:51 UTC	804	OUT	GET /1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=4167&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html&af=err,xhr,stn,ins,spa&be=748&fe=3408&dc=732&perf=%7B%22timing%22:%7B%22of%22:1713289425677,%22n%22:0,%22f%22:1,%22dn%22:43,%22dne%22:43,%22c%22:43,%22s%22:45,%22ce%22:406,%22rq%22:406,%22rp%22:748,%22rpe%22:749,%22di%22:1480,%22ds%22:1480,%22de%22:1480,%22dc%22:4154,%22l%22:4155,%22le%22:4156%7D,%22navigation%22:%7B%7D%7D HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:51 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Tue, 16 Apr 2024 17:43:51 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-pdk-kfty2130063-PDK
2024-04-16 17:43:51 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50326	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:51 UTC	911	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=5&ClientTime=1713289430689&PageStart=1713289420652&PrevBundleTime=1713289428248&LastActivity=1249&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1277 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:51 UTC	1277	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 56 eb 6f 9c 46 10 ff 57 ae 54 39 35 12 0b fb 7e 38 bd 5a ce 3b 4a 9c b8 b5 a3 a8 8d 2c 0b 96 e5 4c cc 01 66 c1 8f 44 f9 df 3b 9c e3 7b f8 1c 3b 6a 3f f4 43 01 21 98 9d d9 9d f9 fd 66 66 f7 4b b0 ef 4e 83 2d 11 06 1f 8e 5d 15 6c 29 4a 70 18 3c 3b eb 7c b0 f5 f1 4b f0 ba a8 32 18 a5 61 b0 d3 4e 07 d1 e1 aa e2 d7 f0 5a 83 60 bc 50 09 ce 0a 5f a4 a5 0b 56 75 c9 52 57 2f 34 25 67 21 67 3a d4 18 af e8 d2 95 79 f9 42 57 63 12 06 b6 4c bc 0f c2 a0 3c b7 a8 cd 6b 76 7a fc 49 f5 7c 64 eb d9 0c 75 45 e9 d0 cc 55 fd d1 51 d1 b9 e1 bf 2b dd c8 97 99 47 9d bb e8 50 52 16 d3 ea c8 ba aa 73 ed 1d 16 a8 af 32 d7 96 45 b5 ea 3f c7 62 e9 93 5a 06 f0 11 87 24 14 e1 30 1e e2 c3 ef e8 0b b5 d0 07 1c 8f bb ae f1 5b 71 dc fa 28 ef cb d2 77 75 7b Data Ascii: VoFWT95~8Z;J,LfD;{;j?C!ffKN-]l)Jp<;\|K2aNZ`P_VuRW/4%g!g:yBWcL<kvzI\|duEUQ+GPRs2E?bZ$0[q(wu{
2024-04-16 17:43:51 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:51 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:51 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 33 31 37 35 37 7d 0a Data Ascii: {"BundleTime":1713289431757}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50327	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:52 UTC	687	OUT	GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5f4f7675750c433cd6fac71ba12dba62" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:52 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:52 GMT Connection: close Server: nginx x-amz-id-2: p4m3kqxiqhJ7ozqHh20Phul22u5T6AXCpJWKWXaw5MDEp6zkkAZQyMON85IqSFtsuutKamFfOg8= x-amz-request-id: QDHBWQQQG5BGJFJM Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Do6GzKcbdBLZHu8HmZ2SrItvQGsI2UND ETag: "5f4f7675750c433cd6fac71ba12dba62" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50329	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:52 UTC	648	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=5&ClientTime=1713289430689&PageStart=1713289420652&PrevBundleTime=1713289428248&LastActivity=1249&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:52 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:52 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:52 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50331	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:52 UTC	748	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6168&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:52 UTC	273	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 31 2c 2c 34 30 65 2c 33 67 6c 2c 34 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 6e 67 65 72 2f 6d 65 73 73 65 6e 67 65 72 2e 68 74 6d 6c 2c 31 2c 31 2c 2c 2c 21 21 21 21 27 61 63 63 39 32 34 39 39 2d 35 63 36 62 2d 34 61 65 63 2d 39 37 66 62 2d 31 30 35 39 63 34 39 62 30 32 34 38 2c 27 31 2c 21 21 3b 32 2c 2c 33 67 6c 2c 6a 73 2c 31 2c 32 2c 27 47 45 54 2c 35 6b 2c 27 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 3a 34 34 33 2c 27 2f 6d 65 73 73 65 6e 67 65 72 2f 69 31 38 6e 2f 65 6e 2d 75 73 2e 6a 73 6f 6e 2c 2c 36 39 6a 2c 2c 27 33 2c 21 21 21 3b 62 2c 2c 2c 2c 2c 31 2c 31 36 2c 2c 2c 32 2c 61 31 2c 2c Data Ascii: bel.7;1,1,,40e,3gl,4,'initialPageLoad,'https://apps.usw2.pure.cloud/messenger/messenger.html,1,1,,,!!!!'acc92499-5c6b-4aec-97fb-1059c49b0248,'1,!!;2,,3gl,js,1,2,'GET,5k,'apps.usw2.pure.cloud:443,'/messenger/i18n/en-us.json,,69j,,'3,!!!;b,,,,,1,16,,,2,a1,,
2024-04-16 17:43:53 UTC	318	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:53 GMT content-type: image/gif access-control-allow-origin: https://apps.usw2.pure.cloud access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130049-PDK
2024-04-16 17:43:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50328	52.32.27.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:53 UTC	470	OUT	GET /messenger/i18n/en-us.json HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c7a28573ad8e4e0572990059d433fae2" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT
2024-04-16 17:43:53 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:53 GMT Connection: close Server: nginx x-amz-id-2: spaGlS7whG9aUmwDfSXvGwJF4E4fef/XRz1dlpfU+/8iyxfGlFiPtKvvUJGO6RYu6JB6HKyiGkw= x-amz-request-id: WFZ04975DNTHGNW9 Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: 5VxhXH0bSZ0fp1CH2FPkZtKFcDQTAhP_ ETag: "c7a28573ad8e4e0572990059d433fae2" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50332	52.24.171.147	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:53 UTC	696	OUT	GET /messenger/i18n/vendors/date-en.min.js HTTP/1.1 Host: apps.usw2.pure.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "5f4f7675750c433cd6fac71ba12dba62" If-Modified-Since: Tue, 02 Apr 2024 13:35:57 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://apps.usw2.pure.cloud/messenger/messenger-renderer.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:54 UTC	466	IN	HTTP/1.1 304 Not Modified Date: Tue, 16 Apr 2024 17:43:54 GMT Connection: close Server: nginx x-amz-id-2: p4m3kqxiqhJ7ozqHh20Phul22u5T6AXCpJWKWXaw5MDEp6zkkAZQyMON85IqSFtsuutKamFfOg8= x-amz-request-id: QDHBWQQQG5BGJFJM Cache-Control: max-age=0, no-cache Last-Modified: Tue, 02 Apr 2024 13:35:57 GMT x-amz-version-id: Do6GzKcbdBLZHu8HmZ2SrItvQGsI2UND ETag: "5f4f7675750c433cd6fac71ba12dba62" Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50333	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:53 UTC	486	OUT	GET /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=6168&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:53 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:53 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130021-PDK
2024-04-16 17:43:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50334	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:53 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289432911&PageStart=1713289396931&PrevBundleTime=1713289428983&LastActivity=22497&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:53 UTC	782	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 95 69 6f d3 40 10 86 ff 8a d9 0f 11 48 6b 67 ef a3 10 50 8f 08 50 81 46 24 a8 42 08 21 1f 9b 64 55 c7 4e 6d 27 a1 1c ff 9d 71 69 93 26 2d 08 f8 82 04 de c8 b2 67 df 99 9d cc b3 e3 fd 8c 86 ee 1c ed 51 8a d1 e9 d4 15 f0 24 b4 30 18 f5 97 4d 8d f6 de 7d 46 c7 be c8 d0 5e 6b da af 26 ad 09 a5 65 51 97 b9 43 18 e5 e5 04 ee 47 c3 0f 47 af 47 5f 06 27 c3 2f 7d d0 be df 8a f4 15 5f 87 90 7a 1d 82 61 34 6d 9a 79 bd d7 ed 56 75 34 5e e4 79 dd 94 d5 45 94 96 b3 6e e5 d2 6e b2 28 b2 dc 75 97 ec c9 49 35 79 9e f5 28 3b 18 88 7e e7 4d ed 2a 78 73 49 4c 53 a5 45 18 5b 22 43 21 4c 1a 26 31 11 a1 4c 44 a2 28 b5 94 5b d9 19 ba ba f6 65 01 72 92 39 63 84 18 87 44 71 0d 72 96 84 c6 6a 1d 66 9c 73 36 26 c2 11 16 77 06 f1 c4 b5 0b 65 96 59 c6 Data Ascii: io@HkgPPF$B!dUNm'qi&-gQ$0M}F^k&eQCGGG_'/}_za4myVu4^yEnn(uI5y(;~M*xsILSE["C!L&1LD([er9cDqrjfs6&weY
2024-04-16 17:43:54 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:54 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:54 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 33 33 39 38 31 7d 0a Data Ascii: {"BundleTime":1713289433981}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50335	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:54 UTC	644	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289432911&PageStart=1713289396931&PrevBundleTime=1713289428983&LastActivity=22497&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:54 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:54 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:54 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50336	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:55 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: VXBtykR4GW4SW3+zV1RIvQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:43:56 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:43:56 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50337	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:56 UTC	909	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=6&ClientTime=1713289435690&PageStart=1713289420652&PrevBundleTime=1713289431757&LastActivity=939&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:56 UTC	885	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a c5 55 0d 6f db 36 10 fd 2b ac 06 18 2d 40 ca 24 45 52 a2 33 af 48 d3 b4 2b d2 b4 01 9c 20 d8 82 c0 a0 a4 93 ad 45 1f 8e 48 e7 ab e8 7f 2f e5 34 71 5c b8 5d 07 14 98 28 09 22 75 ef ee de f1 e9 f4 29 98 c0 65 30 52 38 38 9d 43 13 8c 18 d5 34 c2 c1 fe 95 b3 c1 e8 ec 53 70 50 36 79 30 12 38 d8 ed 66 fd 4a 22 39 0e ac bb ad 20 c0 41 05 85 1b a1 65 63 c1 ed a0 ae 9c cd fd 8c d3 c5 cd 0e 4a 5b e7 da 7a 84 18 f7 b3 e0 7c c3 fb 67 bc cd ad f8 75 6e e3 e4 d1 ef 19 c5 0c 4b 7c cf 8a 9e 7f 0f 21 e3 47 84 a7 37 77 6e 61 47 c3 61 67 c3 62 59 55 d6 b5 dd 6d 98 b5 f5 b0 83 6c 98 2e 9b bc 82 e1 15 7f f9 b1 9b bd cb c7 2d 61 fa f5 9b 57 87 a4 31 6c 70 62 a1 f3 6b 71 14 67 a9 04 45 b4 56 09 11 09 14 24 4d 23 43 24 d3 59 26 d2 54 2b c9 07 13 b0 Data Ascii: Uo6+-@$ER3H+ EH/4q\]("u)e0R88C4SpP6y08fJ"9 AecJ[z\|gunK\|!G7wnaGagbYUml.-aW1lpbkqgEV$M#C$Y&T+
2024-04-16 17:43:56 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:56 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:56 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 33 36 37 36 32 7d 0a Data Ascii: {"BundleTime":1713289436762}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50339	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	647	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=6&ClientTime=1713289435690&PageStart=1713289420652&PrevBundleTime=1713289431757&LastActivity=939&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:57 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:57 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50342	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	909	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=7&ClientTime=1713289436386&PageStart=1713289420652&PrevBundleTime=1713289436762&LastActivity=222&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 739 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	739	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a b5 54 db 6e db 38 10 fd 15 95 0f 46 0b 90 32 29 de 44 b7 6e 91 a6 d9 dd 22 4d 1b c0 09 82 45 51 04 12 35 b2 d5 d0 92 23 52 49 da a2 ff be b4 9b da 71 2f 8b 7d 59 51 0f d2 cc 99 cb 99 0b bf a0 19 5c a3 89 c6 e8 62 01 2d 9a 30 69 54 86 d1 d1 4d f0 68 f2 fe 0b 3a 6e da 0a 4d 64 14 1d f4 f3 b5 e8 c3 1e f2 2b fe 0e c9 b7 08 25 39 16 22 c7 39 a5 3b b0 a2 2a df 81 a5 de a2 a3 e7 45 08 2b 3f 19 8f 7b 9f d6 83 73 3e 74 fd a7 d4 76 cb 71 0f 76 5c 0e 6d e5 60 7c 93 bd 78 d7 cf 5f 57 d3 8e 30 f3 ea 8f 97 27 a4 2d d8 e8 dc 43 1f 65 9a 6b 5b 4a 50 c4 18 95 13 91 43 4d ca 92 17 44 32 63 ad 28 4b a3 64 36 9a 81 f7 4d d7 46 78 56 b3 c2 08 ab 48 51 70 20 42 64 35 c9 85 aa 88 aa ac e6 22 2b 41 aa 72 74 5a cc 21 62 a9 ad a4 91 5a 93 0c f2 8a 88 Data Ascii: Tn8F2)Dn"MEQ5#RIq/}YQ\b-0iTMh:nMd+%9"9;*E+?{s>tvqv\m`\|x_W0'-Cek[JPCMD2c(Kd6MFxVHQp Bd5"+ArtZ!bZ
2024-04-16 17:43:57 UTC	315	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:43:57 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:57 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 33 37 34 39 39 7d 0a Data Ascii: {"BundleTime":1713289437499}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50343	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	911	OUT	POST /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=7&ClientTime=1713289436379&PageStart=1713289420652&PrevBundleTime=1713289436762&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1405 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	1405	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 31 35 39 36 32 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 31 35 39 36 32 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 35 33 2c 34 34 38 2c 38 30 30 5d 2c 22 57 68 65 6e 22 3a 31 36 30 36 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 6f 2d 31 39 44 46 42 4d 2d 6e 61 31 26 55 73 65 72 49 64 3d 37 33 37 63 62 35 65 36 2d 39 39 36 38 2d 34 38 65 66 2d 62 62 33 61 2d 35 31 39 63 63 34 62 62 39 36 35 32 26 53 65 73 73 69 6f 6e 49 64 3d 32 66 31 61 39 34 63 36 2d 61 61 Data Ascii: {"Seq":7,"When":15962,"Evts":[{"Kind":52,"Args":[],"When":15962},{"Kind":8,"Args":[653,448,800],"When":16068},{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa
2024-04-16 17:43:57 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://support.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:43:57 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50344	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	765	OUT	POST /events/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11079&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 85 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	85	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 6c 6f 61 64 2c 33 37 67 2c 3b 65 2c 27 66 70 2c 34 73 6d 2c 3b 65 2c 27 66 63 70 2c 34 73 6d 2c 3b 65 2c 27 70 61 67 65 48 69 64 65 2c 38 6a 71 2c 31 3b 36 2c 27 63 6c 73 2c 30 2e 39 35 38 33 33 33 33 33 33 33 33 33 33 33 33 34 Data Ascii: bel.6;e,'load,37g,;e,'fp,4sm,;e,'fcp,4sm,;e,'pageHide,8jq,1;6,'cls,0.9583333333333334
2024-04-16 17:43:58 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:58 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130087-PDK
2024-04-16 17:43:58 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50345	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	769	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11081&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	1159	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 56 65 72 73 69 6f 6e 2f 31 2e 32 33 38 2e 30 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 73 70 61 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 Data Ascii: {"sm":[{"params":{"name":"Generic/Version/1.238.0/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/LoaderType/spa/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Ajax/Events/Exclud
2024-04-16 17:43:58 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:58 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kpdk1780117-PDK
2024-04-16 17:43:58 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50347	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	768	OUT	POST /jserrors/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11082&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 825 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	825	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 31 2f 37 61 35 62 30 64 65 33 38 65 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 35 30 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 35 30 31 7d 2c 22 63 62 54 69 6d 65 22 3a 7b 22 74 22 3a 31 7d 2c 22 74 69 6d 65 22 3a 7b 22 74 22 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/1/7a5b0de38e","status":200},"metrics":{"count":1,"rxSize":{"t":150},"duration":{"t":501},"cbTime":{"t":1},"time":{"t"
2024-04-16 17:43:58 UTC	362	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Tue, 16 Apr 2024 17:43:58 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130034-PDK
2024-04-16 17:43:58 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50346	162.247.243.29	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	763	OUT	POST /ins/1/7a5b0de38e?a=1386144138&sa=1&v=1.238.0&t=Unnamed%20Transaction&rst=11083&ck=0&s=0&ref=https://apps.usw2.pure.cloud/messenger/messenger.html HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 329 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://apps.usw2.pure.cloud Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://apps.usw2.pure.cloud/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:57 UTC	329	OUT	Data Raw: 7b 22 69 6e 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 33 33 35 30 32 2c 22 74 69 6d 65 53 69 6e 63 65 4c 6f 61 64 22 3a 37 2e 38 32 35 2c 22 62 72 6f 77 73 65 72 57 69 64 74 68 22 3a 37 32 2c 22 62 72 6f 77 73 65 72 48 65 69 67 68 74 22 3a 37 32 2c 22 72 65 66 65 72 72 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 22 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 6e 67 65 72 2f 6d 65 73 73 65 6e 67 65 72 2e 68 74 6d 6c 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 73 2e 75 73 77 32 2e 70 75 72 65 2e 63 6c 6f 75 64 2f 6d 65 73 73 65 6e Data Ascii: {"ins":[{"timestamp":1713289433502,"timeSinceLoad":7.825,"browserWidth":72,"browserHeight":72,"referrerUrl":"https://support.docusign.com/","currentUrl":"https://apps.usw2.pure.cloud/messenger/messenger.html","pageUrl":"https://apps.usw2.pure.cloud/messen
2024-04-16 17:43:58 UTC	317	IN	HTTP/1.1 204 Connection: close date: Tue, 16 Apr 2024 17:43:58 GMT cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://apps.usw2.pure.cloud x-served-by: cache-pdk-kfty2130037-PDK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50348	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:57 UTC	647	OUT	GET /rec/bundle/v2?OrgId=o-19DFBM-na1&UserId=737cb5e6-9968-48ef-bb3a-519cc4bb9652&SessionId=2f1a94c6-aa3e-442f-846d-6dc7342be56b&PageId=0cd59577-2e8d-4a5e-949c-ddbde725698f&Seq=7&ClientTime=1713289436386&PageStart=1713289420652&PrevBundleTime=1713289436762&LastActivity=222&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:58 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:43:58 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:43:58 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50358	172.64.155.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:59 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:59 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:59 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fb153fe0672d-ATL
2024-04-16 17:43:59 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50357	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:43:59 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:43:59 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:43:59 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:43:59 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50364	34.111.140.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1230 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:00 UTC	1230	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 36 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 32 38 39 33 38 38 37 32 35 72 30 2e 38 31 39 30 37 32 32 38 31 39 38 33 33 36 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7260","visitors":[{"visitor_id":"oeu1713289388725r0.819072281983362","session_id":"AUTO","att
2024-04-16 17:44:00 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Tue, 16 Apr 2024 17:43:59 GMT server: istio-envoy x-envoy-upstream-service-time: 3 x-request-id: 666e26fe-8001-49e4-8661-7dccf95d2acf x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50365	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	1744	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=181&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _fbp=fb.1.1713289397443.1522943348; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.0.1713289420.35.0.0; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A41+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga=GA1.2.426113818.1713289394
2024-04-16 17:44:00 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:00 GMT Connection: close Content-Length: 49
2024-04-16 17:44:00 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50366	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	850	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1479294654.1713289439&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:00 UTC	839	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1479294654.1713289439&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50368	151.101.12.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	629	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-16 17:44:00 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 16 Apr 2024 17:44:00 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840087-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50367	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	1232	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:00 UTC	192	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:00 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-16 17:44:00 UTC	3918	IN	Data Raw: 66 34 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 75 6c 76 72 33 75 6a 37 30 6a 68 67 6a 46 77 33 42 68 61 4c 34 37 4f 78 30 49 6e 44 47 41 69 33 50 73 33 4c 6e 36 50 67 48 58 51 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 Data Ascii: f47(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ" var userIdCookieV
2024-04-16 17:44:00 UTC	14091	IN	Data Raw: 33 37 30 33 0d 0a 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 26 26 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 2e 69 6e 64 65 78 4f 66 28 67 6c 6f 62 61 6c 73 2e 73 61 5f 64 65 62 75 67 5f 6b 65 79 29 3e 2d 31 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 41 2f 52 54 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 73 61 5f 75 72 6c 2c 65 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 65 2c 6f 29 7b 76 61 72 20 74 3d 6e 65 77 20 49 6d 61 67 65 3b 72 65 73 3d 63 75 72 72 65 6e 74 4c 61 6e 64 69 6e 67 55 52 4c 28 Data Ascii: 3703t.body.appendChild(t),current_window_url_param&&current_window_url_param.indexOf(globals.sa_debug_key)>-1&&console.log("SA/RT"))}function loadLal(e){return loadLalHelper(sa_url,e),!0}function loadLalHelper(e,o){var t=new Image;res=currentLandingURL(
2024-04-16 17:44:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50372	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	833	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:00 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-16 17:44:01 UTC	956	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 4305 Connection: close Date: Tue, 16 Apr 2024 17:44:01 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CACHE Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 15 Apr 2024 17:44:01 GMT Vary: Accept-Encoding, Origin Request-ID: b40ebdb3-59e4-45a6-832d-aa267ea0cf7e X-Cache: Miss from cloudfront Via: 1.1 73e7048a510ad164cffbfc6851460ebe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: l4jlamlMYih2iJ0l-GEF-MYg8Xer8uL5E5pVy8qc6Gk2kMiLgbW0XQ==
2024-04-16 17:44:01 UTC	4305	IN	Data Raw: 7b 22 68 71 22 3a 7b 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 69 6f 6e 61 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 64 65 6d 61 6e 64 62 61 73 65 5f 73 69 64 22 3a 39 34 34 33 30 31 32 31 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 27 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 42 69 6f 74 65 63 68 22 2c 22 73 75 62 5f 69 6e 64 75 73 74 72 79 22 3a Data Ascii: {"hq":{"company_name":"Institutul National De Cercetare - Dezvoltare in Informatica - Ici Bucurest","demandbase_sid":94430121,"marketing_alias":"Institutul Nat'l De Cercetare - Dezvoltare in Informatica - Ici Bucurest","industry":"Biotech","sub_industry":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50374	142.251.15.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	849	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1479294654.1713289439&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-16 17:44:01 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmXhua7vb6SinSkvNx5UeKIgAUXTW5HprnUXPgmObKtVGn5cyCpLmazLXys; expires=Thu, 16-Apr-2026 17:44:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50376	34.96.71.22	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	786	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289397\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:01 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Tue, 16 Apr 2024 17:44:01 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:01 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50377	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	989	OUT	GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c If-None-Match: "10c460a7d0b096d5b5072c73672e31b6-ssl"
2024-04-16 17:44:01 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:01 GMT Etag: "10c460a7d0b096d5b5072c73672e31b6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04BVZHGYCY297ANASW63D Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50378	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:00 UTC	677	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=S6zhNPsl4WsNi4uIprRgge8HPjkpJnXD93yRfB59YbU=; pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA
2024-04-16 17:44:01 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=b1zfexNfMztluMQylbDpAu8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:44:01 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:44:01 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:01 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50375	68.67.153.60	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:01 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:01 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Tue, 16 Apr 2024 17:44:01 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-16 17:44:01 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50381	104.244.42.67	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:01 UTC	1055	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
2024-04-16 17:44:01 UTC	401	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:01 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 0840b0033156d4cf strict-transport-security: max-age=631138519 x-response-time: 80 x-connection-hash: a102ecfb9119ce85685a29d6c7b517a886e05e66f9a0ad6425ab15438158787e connection: close
2024-04-16 17:44:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50380	104.244.42.197	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:01 UTC	918	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
2024-04-16 17:44:01 UTC	392	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:00 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5b3bc86fbe582f9f strict-transport-security: max-age=0 x-response-time: 7 x-connection-hash: 29365f87d84705e20ff1d77e27cbf54a03fbb5d5ad712a7adeccfbab2a39a3ca connection: close
2024-04-16 17:44:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50383	18.245.124.24	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	643	OUT	GET /bg9s?x-amz-cf-id=l4jlamlMYih2iJ0l-GEF-MYg8Xer8uL5E5pVy8qc6Gk2kMiLgbW0XQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 12:11:12 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 7dab7ab1c07dbcdfe384ef375b349996.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P9 X-Amz-Cf-Id: pP-CRA6U8nt1oC_xILD-ECkXrq-wcbRT03xn0L2luFMdLs3Zr63luQ== Age: 27101 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50385	68.67.160.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	840	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
2024-04-16 17:44:02 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 16 Apr 2024 17:44:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=6380132047284574994 AN-X-Request-Uuid: 1e3d17a8-5bd4-4627-b1d6-209c7adced7d Set-Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:44:02 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 04-Apr-2034 17:44:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6380132047284574994; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:44:02 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50387	34.111.140.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1134 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	1134	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 36 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 32 38 39 33 38 38 37 32 35 72 30 2e 38 31 39 30 37 32 32 38 31 39 38 33 33 36 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7260","visitors":[{"visitor_id":"oeu1713289388725r0.819072281983362","session_id":"AUTO","att
2024-04-16 17:44:02 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Tue, 16 Apr 2024 17:44:02 GMT server: istio-envoy x-envoy-upstream-service-time: 3 x-request-id: a51a8346-fb80-4301-ac00-09d50af8fc7a x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50389	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	887	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:44:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50388	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	997	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:44:02 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:44:02 UTC	1507	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-16 17:44:02 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50391	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	877	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGVZ1ZSTE4G58BJ6G4M Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50394	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	875	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGZCFYEYB18HZW7RRDY Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50396	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	872	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGNEA76B4CPZHFEGMEH Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50393	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	878	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGPZNZSM7ZXR4YRDD12 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.5	50392	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	879	OUT	GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "38b66efda4b7a2f4a37d3065793a65e2-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "38b66efda4b7a2f4a37d3065793a65e2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGYBGY4V34QK496H9VX Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50395	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	871	OUT	GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "bd342ef2d4a80457fa21dbc3be6ee406-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:02 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:02 GMT Etag: "bd342ef2d4a80457fa21dbc3be6ee406-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04DGXPYH3E28GPB0XZTED Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50397	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	857	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289441680&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	630	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 38 35 35 31 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 34 38 2c 22 41 72 67 73 22 3a 5b 22 63 6f 6e 73 6f 6c 65 22 2c 22 6c 6f 67 22 2c 22 44 53 5f 44 52 54 7c 52 45 53 7c 45 6e 64 22 5d 2c 22 57 68 65 6e 22 3a 38 35 35 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 32 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 34 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 31 34 38 2c 34 32 34 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 35 33 2c 22 41 72 67 73 22 3a 5b 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 38 37 30 35 7d 2c 7b 22 4b 69 Data Ascii: {"Seq":6,"When":8551,"Evts":[{"Kind":48,"Args":["console","log","DS_DRT\|RES\|End"],"When":8551},{"Kind":52,"Args":[],"When":8704},{"Kind":8,"Args":[148,424,943],"When":8705},{"Kind":53,"Args":[],"When":8705},{"Kind":100,"Args":["visible"],"When":8705},{"Ki
2024-04-16 17:44:02 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:02 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:02 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 32 37 37 33 7d 0a Data Ascii: {"BundleTime":1713289442773}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50398	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 438 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:02 UTC	438	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 23 2d 2d 62 6c 6f 63 6b 65 64 2d 2d 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 Data Ascii: {"OrgId":"12BP4E","UserId":"eba1c674-a905-448c-ba04-5b4b61191395","Url":"https://www.docusign.com/privacy#main-content","Base":"https://www.docusign.com/privacy#--blocked--","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion"
2024-04-16 17:44:02 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:44:02 UTC	936	IN	Data Raw: 31 34 65 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 14eb{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-16 17:44:02 UTC	1255	IN	Data Raw: 22 3a 33 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 62 61 73 65 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 33 7d 5d 2c 22 45 6c 65 6d 65 6e 74 44 65 66 65 72 72 65 64 73 22 3a 5b 5d 2c 22 45 6c 65 6d 65 6e 74 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 45 6c 65 6d 65 6e 74 57 61 74 63 68 65 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 69 6e 76 61 6c 69 64 22 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 23 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 48 69 6e 74 22 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 23 70 72 6f 6d 6f 43 6f 64 65 5b 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 22 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 5c 22 5d 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 72 6f 6d 6f 20 Data Ascii: ":3},{"Selector":"base","Consent":false,"Type":3}],"ElementDeferreds":[],"ElementKeeps":null,"ElementWatches":[{"Selector":".invalid"},{"Selector":"#promocodeErrorHint"},{"Selector":"input#promoCode[aria-describedby=\"promocodeError\"][aria-label=\"Promo
2024-04-16 17:44:02 UTC	1255	IN	Data Raw: 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 68 72 65 66 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 73 72 63 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 73 72 63 73 65 74 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 73 74 79 6c 65 22 Data Ascii: "data","Action":0},{"Target":1,"Tag":"","Name":"href","Action":0},{"Target":1,"Tag":"","Name":"placeholder","Action":0},{"Target":1,"Tag":"","Name":"src","Action":0},{"Target":1,"Tag":"","Name":"srcset","Action":0},{"Target":1,"Tag":"*","Name":"style"
2024-04-16 17:44:02 UTC	1255	IN	Data Raw: 65 64 22 2c 22 66 72 6f 6d 22 2c 22 68 6f 73 74 22 2c 22 69 66 2d 6d 61 74 63 68 22 2c 22 69 66 2d 6d 6f 64 69 66 69 65 64 2d 73 69 6e 63 65 22 2c 22 69 66 2d 6e 6f 6e 65 2d 6d 61 74 63 68 22 2c 22 69 66 2d 72 61 6e 67 65 22 2c 22 69 66 2d 75 6e 6d 6f 64 69 66 69 65 64 2d 73 69 6e 63 65 22 2c 22 6d 61 78 2d 66 6f 72 77 61 72 64 73 22 2c 22 6f 72 69 67 69 6e 22 2c 22 70 72 61 67 6d 61 22 2c 22 72 61 6e 67 65 22 2c 22 72 65 66 65 72 65 72 22 2c 22 74 65 22 2c 22 75 73 65 72 2d 61 67 65 6e 74 22 2c 22 75 70 67 72 61 64 65 22 2c 22 76 69 61 22 2c 22 77 61 72 6e 69 6e 67 22 2c 22 78 2d 62 33 2d 74 72 61 63 65 69 64 22 5d 2c 22 48 74 74 70 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 41 6c 6c 6f 77 6c 69 73 74 22 3a 5b 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f Data Ascii: ed","from","host","if-match","if-modified-since","if-none-match","if-range","if-unmodified-since","max-forwards","origin","pragma","range","referer","te","user-agent","upgrade","via","warning","x-b3-traceid"],"HttpResponseHeadersAllowlist":["access-contro
2024-04-16 17:44:02 UTC	667	IN	Data Raw: 2e 2a 22 7d 5d 2c 22 51 75 65 72 79 50 61 72 61 6d 22 3a 5b 7b 22 45 78 70 72 65 73 73 69 6f 6e 22 3a 22 28 70 61 73 73 77 6f 72 64 2e 2a 3d 29 28 2e 2a 29 22 7d 2c 7b 22 45 78 70 72 65 73 73 69 6f 6e 22 3a 22 28 74 6f 6b 65 6e 2e 2a 3d 29 28 2e 2a 29 22 7d 2c 7b 22 45 78 70 72 65 73 73 69 6f 6e 22 3a 22 5e 28 63 6f 64 65 3d 29 28 2e 2a 29 22 7d 2c 7b 22 45 78 70 72 65 73 73 69 6f 6e 22 3a 22 5e 28 6a 77 74 3d 29 28 2e 2a 29 22 7d 5d 7d 7d 5d 2c 22 55 72 6c 51 75 65 72 79 53 74 72 69 6e 67 42 6c 6f 63 6b 6c 69 73 74 22 3a 5b 22 28 70 61 73 73 77 6f 72 64 2e 2a 3d 29 28 2e 2a 29 22 2c 22 28 74 6f 6b 65 6e 2e 2a 3d 29 28 2e 2a 29 22 2c 22 5e 28 63 6f 64 65 3d 29 28 2e 2a 29 22 2c 22 5e 28 6a 77 74 3d 29 28 2e 2a 29 22 5d 7d 2c 22 42 65 68 61 76 69 6f 72 53 Data Ascii: ."}],"QueryParam":[{"Expression":"(password.=)(.)"},{"Expression":"(token.=)(.)"},{"Expression":"^(code=)(.)"},{"Expression":"^(jwt=)(.)"}]}}],"UrlQueryStringBlocklist":["(password.=)(.)","(token.=)(.)","^(code=)(.)","^(jwt=)(.*)"]},"BehaviorS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50399	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	3243	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&t=Privacy%20Notice%20%7C%20DocuSign&tip=ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:02 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-16 17:44:02 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50400	104.18.32.137	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fb2a9aa47b99-ATL
2024-04-16 17:44:03 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50406	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	566	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:03 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Tue, 16 Apr 2024 17:44:02 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: a90c7ff2-c812-4f2e-9354-eb613335af4a Vary: Origin X-Cache: Error from cloudfront Via: 1.1 57674a900f587a3a1f1571205e001c6c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: N1F6Rr4W9VAr6gBAyIXeu4RWjqLNBKEVUbXSVYAMFz6n25NqV_h2CA==
2024-04-16 17:44:03 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50408	104.244.42.133	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	682	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
2024-04-16 17:44:03 UTC	393	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:03 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4e321952b2b03f2c strict-transport-security: max-age=0 x-response-time: 80 x-connection-hash: 42f66f431367edf838d30f58b7313c7ab785e61735ac6de5073423e5affee975 connection: close
2024-04-16 17:44:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50409	104.244.42.195	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	819	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=71041255-e07a-4c44-b08b-55752b234da3&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=eb92b6c0-3285-41a4-9732-d97565480177&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
2024-04-16 17:44:03 UTC	400	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:02 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 72a10ce33a844d43 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: ebe8013c29379835fcb0df26af50f2d19acf09f38136be9c7866b7ea28b5c08f connection: close
2024-04-16 17:44:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50403	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:02 UTC	1509	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=181&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0
2024-04-16 17:44:03 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:02 GMT Connection: close Content-Length: 49
2024-04-16 17:44:03 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50402	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 33 35 33 38 33 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289435383,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:03 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:03 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50411	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=b1zfexNfMztluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
2024-04-16 17:44:03 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=vzXteGtxqXZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:44:03 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:44:03 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50401	44.234.203.160	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	1302	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; fs_lua=1.1713289420645; fs_uid=#o-19DFBM-na1#737cb5e6-9968-48ef-bb3a-519cc4bb9652:2f1a94c6-aa3e-442f-846d-6dc7342be56b:1713289420645::1#/1744825422; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0
2024-04-16 17:44:03 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:44:03 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50412	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	651	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:44:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50413	18.160.10.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	618	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:44:03 GMT Apigw-Requestid: WVHTjjyBIAMEaBw= X-Cache: Miss from cloudfront Via: 1.1 7c77abdf1c625c25627fe2a24e660a34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dBTlbt7CUyJBsR10_RuRn9PYbIe7Dz_vKpaZL67hQhy-8fXd2EyhQA==
2024-04-16 17:44:03 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50414	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	688	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&rl=&if=false&ts=1713289441485&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289439595&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:44:03 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:44:03 UTC	1540	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50415	13.32.151.16	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	437	OUT	GET /bg9s?x-amz-cf-id=l4jlamlMYih2iJ0l-GEF-MYg8Xer8uL5E5pVy8qc6Gk2kMiLgbW0XQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 07:25:17 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 ede1802516dab8225770d22f89eefe52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: ZcvZBSHpguj_n-xPHwu2Xbj_iJcqq_c4ho8t8A3ciwY3U17jkOZ_tA== Age: 37127 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50417	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	880	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ab355fa9d59b4c79fe46574dec4d49e6-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:03 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:03 GMT Etag: "ab355fa9d59b4c79fe46574dec4d49e6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04E13BDZR457M37JB0JXP Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50416	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	878	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:03 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:03 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04E13QWHMJ7YXN5VVTDWC Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50418	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	858	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289442213&PageStart=1713289396931&PrevBundleTime=1713289442773&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2536 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	2536	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 39 31 30 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 31 64 39 32 39 32 33 39 2d 35 30 66 35 2d 34 34 33 34 2d 62 39 62 32 2d 35 33 39 61 35 66 37 39 34 38 64 37 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":7,"When":9107,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=2&ClientTime=
2024-04-16 17:44:03 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 33 32 39 30 7d 0a Data Ascii: {"BundleTime":1713289443290}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50420	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:44:03 UTC	988	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 20 3d 20 7b 0a 09 09 09 64 6c 6f 5f 69 6e 69 74 5f 73 70 61 6e 3a 20 27 49 4e 49 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 72 75 6c 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 73 70 61 6e 3a 20 27 52 55 4c 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e Data Ascii: function(FS) {const eventNameMap = {dlo_init_span: 'INIT_DURATION',dlo_rule_registration_span: 'RULE_REGISTRATION_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEven
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 61 64 6f 62 65 5f 61 6d 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 65 64 64 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 67 6f 6f 67 6c 65 5f 65 63 27 5d 20 3d 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 70 61 67 65 76 69 65 77 22 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 70 61 67 65 54 79 70 65 2c 20 70 61 67 65 4e 61 6d 65 29 5d 22 20 7d 2c 0a 20 Data Ascii: window['_dlo_rules_adobe_am'] = [];window['_dlo_rules_ceddl'] = [];window['_dlo_rules_google_ec'] = [ { "id": "fs-ga-pageview", "source": "dataLayer", "operators": [ { "name": "query", "select": "$[?(pageType, pageName)]" },
2024-04-16 17:44:03 UTC	425	IN	Data Raw: 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 63 6c 69 63 6b 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 63 6c 69 63 6b 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 Data Ascii: "operators": [ { "name": "query", "select": "$.ecommerce.click.products[0]" }, { "name": "insert", "value": "click_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-action", "source
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 32 36 38 30 0d 0a 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 70 72 6f 64 75 Data Ascii: 2680destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.add.products[0]" }, { "name": "insert", "value": "add_produ
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 72 6f 6d 6f 5f 63 6c 69 63 6b 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 Data Ascii: { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert", "value": "promo_click_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-checkout-action", "sour
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a Data Ascii: an-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-action", "source": "dataLayer", "operators": [ { "name": "query", "select":
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 Data Ascii: t": "$[?(event=view_item)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "FS.event" }, {
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 34 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 Data Ascii: { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga4-e-commerce-select_promotion", "source": "dataLayer", "operator
2024-04-16 17:44:03 UTC	1255	IN	Data Raw: 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 74 67 34 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 76 69 65 77 5f 69 74 65 6d 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 Data Ascii: [0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_item" } ], "destination": "FS.event" }, { "id": "fs-gtg4-e-commerce-view_item", "source": "dataLayer", "operators"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50419	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	656	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "d320e83a1b98d0793815b4e22b96825b" If-Modified-Since: Thu, 04 Apr 2024 20:13:54 GMT
2024-04-16 17:44:03 UTC	852	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Tue, 16 Apr 2024 17:44:03 GMT Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 13 ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0c4024c249c7bc0948cf981ba6a5def2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: jGvXgJxphm_zspktEXg8_-E4xdnY04tO4xYTkFSSUkIbRWfBCndobQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50421	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	603	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=6&ClientTime=1713289441680&PageStart=1713289396931&PrevBundleTime=1713289409054&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50422	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50424	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	3037	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content&t=Privacy%20Notice%20%7C%20DocuSign&tip=ulvr3uj70jhgjFw3BhaL47Ox0InDGAi3Ps3Ln6PgHXQ&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:03 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-16 17:44:03 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50425	18.160.10.75	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	382	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:44:03 GMT Apigw-Requestid: WVHTph8toAMES-w= X-Cache: Miss from cloudfront Via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: spWxGmvA981-e107_qiw2Zjzj_QyTlxCit3w3J_LbhUFj-Mjj39deA==
2024-04-16 17:44:04 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50426	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289442710&PageStart=1713289396931&PrevBundleTime=1713289443290&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 490 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	490	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 97 5d 6b db 30 14 86 ff 8a a6 ab 16 34 59 b2 6c 59 72 cb a0 74 65 83 ac db 20 19 a1 94 5e b8 b1 da 88 2a 96 e7 af 6c 2b fd ef 53 da 25 b1 59 e9 d7 c5 58 41 b6 31 e6 f8 3d ef 73 2c d0 e1 f8 1a 8e d5 77 98 0a 04 a7 73 55 c0 54 8a 98 23 78 d4 35 35 4c 4f af e1 48 17 39 4c 29 21 08 1e 54 97 ab 18 ec 74 ad cf 8d 82 67 fd 94 1b b4 d6 c6 c9 46 4a 43 04 4b ab 8b 46 55 b6 53 15 44 94 73 49 71 8c 22 e1 1e 13 26 b0 20 eb 83 26 b7 21 89 48 cf 37 89 1f f3 55 ab db 5f c6 d2 7b 79 2f ef f5 98 d7 c2 b6 b5 ba 77 67 be ac 28 db 36 6b 27 b9 d9 d8 21 db 98 e2 70 bb dd ef 89 3c 0f 66 54 d6 29 8f f3 38 8f f3 b8 57 87 bb 6b bd ff b2 5f de c1 12 11 c6 c3 a9 cb 8d 7b 2e 2a 08 4e fa b0 db c8 40 f7 b2 75 7c 80 37 9c fd 3c d0 03 3d d0 03 ff 63 60 af Data Ascii: ]k04YlYrte ^l+S%YXA1=s,wsUT#x55LOH9L)!TtgFJCKFUSDsIq"& &!H7U_{y/wg(6k'!p<fT)8Wk_{.N@u\|7<=c`
2024-04-16 17:44:03 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 33 37 38 34 7d 0a Data Ascii: {"BundleTime":1713289443784}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50427	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	603	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=7&ClientTime=1713289442213&PageStart=1713289396931&PrevBundleTime=1713289442773&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:03 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:03 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:03 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50428	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	1163	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=14f18f21-5e5a-4d14-815f-84932f0d5f20&sessionStarted=1713289442.911&campaignRefreshToken=15fd7d8d-e8b8-432e-b6de-28db75075323&hideController=false&pageLoadStartTime=1713289441539&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 15 Date: Tue, 16 Apr 2024 17:44:04 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 aaf016fef66eecea8770da00a4c0e9d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: Jd1a1oA9pO3Z2F8FPVS9_s3ShHxMOD9sjsC5L9-4W6KfWiEn8LxvrQ==
2024-04-16 17:44:04 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50429	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:03 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289441539 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Tue, 16 Apr 2024 17:44:04 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3f8050fbf1460156d177f2d3d6a03332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: ffQvlhyBDcqyv8je34T6LSZq7yOqFHHD7WM4Bgt3hxl1FjPX03-UIw==
2024-04-16 17:44:04 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50430	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:04 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289443207&PageStart=1713289396931&PrevBundleTime=1713289443784&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 924 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	924	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 97 5b 8f da 38 14 c7 bf 4a ea 07 d4 4a 4e f0 2d b6 0f 5d 76 35 33 3b ea 56 d3 cb a8 4c 35 aa 56 7d c8 c5 40 34 21 61 92 00 9d 56 fd ee 6b a6 33 40 08 d0 aa 52 e9 0a e2 bc c4 3e c7 97 f3 f3 df 3e f9 82 7a e6 16 75 00 a3 eb a1 c9 50 87 12 ae 09 46 e7 d3 aa 44 9d 7f bf a0 8b 24 8b 51 c7 57 18 9d 14 83 79 15 c3 68 58 55 e3 b2 d3 6e 17 a5 d7 9f a4 69 59 e5 c5 9d 17 e5 a3 76 61 a2 76 38 c9 e2 d4 b4 a7 ec af b7 c5 e0 65 dc a5 ec f4 52 9c b7 de 97 a6 b0 5f 26 0c 68 24 95 70 03 20 be 2b 84 8e dc 30 20 c2 f5 43 11 4a 4a 81 72 f0 5b 3d 53 96 49 9e 59 73 12 1b ad 85 e8 bb 44 72 65 cd 59 e8 6a 50 ca 8d 39 e7 ac 4f 84 21 2c 68 5d 06 03 33 1f 28 06 06 8c 83 eb 93 fe bc 6b 2e dc 10 42 e6 fa 1c 02 bf af 40 e8 58 d9 ae 6f bb bc 75 96 26 26 Data Ascii: [8JJN-]v53;VL5V}@4!aVk3@R>>zuPFD$QWyhXUniYvav8eR_&h$p +0 CJJr[=SIYsDreYjP9O!,h]3(k.B@Xou&&
2024-04-16 17:44:04 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:04 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:04 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 34 33 32 38 7d 0a Data Ascii: {"BundleTime":1713289444328}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50431	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:04 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=8&ClientTime=1713289442710&PageStart=1713289396931&PrevBundleTime=1713289443290&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:04 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:04 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50432	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:04 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289443715&PageStart=1713289396931&PrevBundleTime=1713289444328&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	872	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 96 6d 6f db 36 10 c7 bf 8a 46 a0 42 0b 50 32 9f 29 a6 f3 8a 24 cb d6 22 4d 1b cc e9 82 ae 28 0a 4a a2 6d 35 b2 a4 88 b4 dd b4 e8 77 1f e5 26 8e 9f d2 14 7b d1 01 ad a8 17 d2 f9 7f c7 f3 fd 78 22 3f 81 81 b9 04 7b 18 41 70 3e 36 95 7f a2 88 29 08 8e 66 ce 82 bd 37 9f c0 71 51 e5 60 8f 4b 08 f6 db 51 67 22 10 8c 9d 6b ec 5e af e7 f4 c8 c6 b6 9d c5 d6 e9 ec 42 e7 ba 71 71 56 4f 7a ef ed 3b d7 7a 4b 51 8d 9e 4c db b2 bf d0 3f a0 fb 0f c8 1f fe 9e cf e7 71 5e 67 53 5b 8c aa 4e ee 4d 4d 5b cc 74 76 15 4e 8b bc af df 3f ad 5e a7 ff 98 bf a7 cc 95 bc 41 d4 8d 4f c8 28 9c f5 71 38 ae ad bb 27 18 80 04 71 a5 62 85 6e 2e 42 21 4b 70 2c d5 cd 95 24 54 40 f0 61 52 76 91 5a 73 39 35 d6 01 88 fc d8 e1 8a d6 06 c1 a8 0b b5 14 e0 2f f6 b7 Data Ascii: mo6FBP2)$"M(Jm5w&{x"?{Ap>6)f7qQ`KQg"k^BqqVOz;zKQL?q^gS[NMM[tvN?^AO(q8'qbn.B!Kp,$T@aRvZs95/
2024-04-16 17:44:04 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:04 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:04 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 34 37 39 31 7d 0a Data Ascii: {"BundleTime":1713289444791}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50433	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:04 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 133 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:04 UTC	133	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 33 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fprivacy%23main-content%22%7D
2024-04-16 17:44:05 UTC	889	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Tue, 16 Apr 2024 17:44:05 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 3d6dc33f715d4ff5 vary: Accept-Encoding x-envoy-upstream-service-time: 10 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 2f58b5586b40002efa57d2542863b53e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: y8dZKWUi_24yhpBy94v2wngfN-1F9Z6CN4s2Af-3Hrh6-Ctq8r4neg==
2024-04-16 17:44:05 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50434	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=9&ClientTime=1713289443207&PageStart=1713289396931&PrevBundleTime=1713289443784&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:05 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:05 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50435	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	892	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289444208&PageStart=1713289396931&PrevBundleTime=1713289444791&IsNewSession=true&DeltaT=33794&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	782	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 95 69 6f d3 40 10 86 ff 8a d9 0f 11 48 6b 67 ef a3 10 50 8f 08 50 81 46 24 a8 42 08 21 1f 9b 64 55 c7 4e 6d 27 a1 1c ff 9d 71 69 93 26 2d 08 f8 82 04 de c8 b2 67 df 99 9d cc b3 e3 fd 8c 86 ee 1c ed 51 8a d1 e9 d4 15 f0 24 b4 30 18 f5 97 4d 8d f6 de 7d 46 c7 be c8 d0 5e 6b da af 26 ad 09 a5 65 51 97 b9 43 18 e5 e5 04 ee 47 c3 0f 47 af 47 5f 06 27 c3 2f 7d d0 be df 8a f4 15 5f 87 90 7a 1d 82 61 34 6d 9a 79 bd d7 ed 56 75 34 5e e4 79 dd 94 d5 45 94 96 b3 6e e5 d2 6e b2 28 b2 dc 75 97 ec c9 49 35 79 9e f5 28 3b 18 88 7e e7 4d ed 2a 78 73 49 4c 53 a5 45 18 5b 22 43 21 4c 1a 26 31 11 a1 4c 44 a2 28 b5 94 5b d9 19 ba ba f6 65 01 72 92 39 63 84 18 87 44 71 0d 72 96 84 c6 6a 1d 66 9c 73 36 26 c2 11 16 77 06 f1 c4 b5 0b 65 96 59 c6 Data Ascii: io@HkgPPF$B!dUNm'qi&-gQ$0M}F^k&eQCGGG_'/}_za4myVu4^yEnn(uI5y(;~M*xsILSE["C!L&1LD([er9cDqrjfs6&weY
2024-04-16 17:44:05 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:05 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:05 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 35 33 30 32 7d 0a Data Ascii: {"BundleTime":1713289445302}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50436	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	625	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=10&ClientTime=1713289443715&PageStart=1713289396931&PrevBundleTime=1713289444328&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:05 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:05 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50438	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift575f1a84aceb5c89175515231c2 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:05 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 4b14054a85dbd772fa74b3629899476c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: 456-bWsw7S7IKYTA-ooolV8iPng6cML6XDXSGFRlaJ3zyV5oaptbzA==
2024-04-16 17:44:05 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50437	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	795	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 52 4f 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,"countryCode":"RO"},"userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-16 17:44:05 UTC	670	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:05 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: d4a29e9519de75d3 content-length: 941 x-envoy-upstream-service-time: 128 server: istio-envoy connection: close
2024-04-16 17:44:05 UTC	941	IN	Data Raw: 7b 22 69 64 22 3a 22 33 34 64 32 30 66 36 66 35 32 39 64 33 61 38 62 37 64 39 37 39 32 33 39 61 63 31 62 64 39 32 33 22 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"34d20f6f529d3a8b7d979239ac1bd923","userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","companyId":null,"internal":false,"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50440	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	638	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=1d929239-50f5-4434-b9b2-539a5f7948d7&Seq=11&ClientTime=1713289444208&PageStart=1713289396931&PrevBundleTime=1713289444791&IsNewSession=true&DeltaT=33794&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:05 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:05 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50441	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:05 UTC	868	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=1&ClientTime=1713289444802&PageStart=1713289442223&PrevBundleTime=0&LastActivity=2366&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 58840 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:05 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 92 db 46 b2 28 fa 2b 38 ad 70 8c da 26 28 ec 24 bb 67 fc 8e 46 b6 9f 7d 46 f6 4c 8c 3d 3e 8b ec 70 80 24 48 42 0d 2e 02 c0 de 18 3a bf 76 3f e9 fd c2 cb da 80 5a b1 90 6c 59 f6 b5 34 63 81 b5 64 65 65 65 65 65 65 65 65 1d 2e be 4f de 5d 5c b9 83 8b ff 5c 25 9b 8b 2b 6f 70 f1 e5 6d 59 5c 5c bd 39 5c fc 2d dd cc 21 25 1c 5c bc cc 97 28 e9 62 55 96 bb e2 ea c5 8b bb bb bb e1 7c 3b db 17 e9 72 33 9c 6d d7 2f 76 79 7a 1b cf 1e 9e d9 f6 34 db ce 6e 92 b9 6d 5f 0c 2e fe fc 6f 5f fc fd d5 0f ff fd 8f 2f ad 55 b9 ce 3e 87 94 56 00 eb 38 dd d8 b3 ed a6 4c 36 25 94 bf f8 b9 42 ec fd 80 61 34 76 27 e3 0a a7 45 9c 15 c9 c0 d5 97 eb 81 b9 d4 f0 26 be 4d 97 71 99 68 11 e0 9a bf 98 27 8b 78 9f 41 95 cd 3e cb 06 17 f3 ed 9a 7e 62 c4 Data Ascii: F(+8p&($gF}FL=>p$HB.:v?ZlY4cdeeeeeeee.O]\\%+opmY\\9\-!%\(bU\|;r3m/vyz4nm_.o_/U>V8L6%Ba4v'E&Mqh'xA>~b
2024-04-16 17:44:05 UTC	16384	OUT	Data Raw: f6 fc 4f ab b2 dc 15 57 2f 5e cc e6 9b e1 6c bb bd 49 93 2c be 1b 6e f3 e5 0b 74 6e 5c bc 20 a7 87 2f b6 e5 2f 00 3e c9 61 f7 fd 0b 7e 37 a6 b8 5d fe e9 b2 7d 47 ad 27 ee a7 84 6a f8 2c 6b 11 af d3 ec e1 ca fa 3a c9 6e 13 f4 02 c9 c0 7a 09 0b 6a 36 b0 0a 10 8e 48 29 4f 17 fc 91 d3 4f 1b 68 e2 a7 8d 7e 07 5d 9d 7d 63 f8 1a 81 e6 4e dc b1 e7 ab 40 1a 87 fe b7 a9 74 3c 8d 9e 21 09 7a a2 1e e8 c6 07 b4 ce 64 87 fa 38 db ae 61 b9 07 2c 05 d7 2f 04 8b 1d 4a 5a bc 37 b0 04 0b 8b ed f9 8d 4d 78 d3 de c1 74 9a 3d 1c 78 ce 61 2f 44 71 a7 c5 e8 01 41 6d 45 48 fc 67 92 7d 05 25 a5 b7 83 f4 c5 91 39 d4 90 11 98 32 22 43 c6 ce 90 9e a5 86 8c d8 90 5e ae 0c 19 cf 84 9f 78 97 9c a7 3b c4 58 86 0a da 54 1b bf 00 d5 ad 09 e2 36 21 c6 b6 ef 8b 9b 1c e5 cc 3c 16 81 f0 66 94 Data Ascii: OW/^lI,ntn\ //>a~7]}G'j,k:nzj6H)OOh~]}cN@t<!zd8a,/JZ7Mxt=xa/DqAmEHg}%92"C^x;XT6!<f
2024-04-16 17:44:05 UTC	16384	OUT	Data Raw: f9 bc c6 74 98 e8 76 50 a1 63 01 fa b8 dd d6 c1 0e 3a 9f d4 dd ba 7d 57 2b b0 70 22 5a f8 bb c3 9b 81 8e 07 ed 6a 71 17 a0 0f 18 4e ae 7e 5f 4d b7 f0 37 9a 7b e8 ed aa ae 67 44 5b 5c 4f 91 1f e6 1f de 97 1c 75 fe 90 90 2d 29 17 87 1a 23 12 e6 ea d9 95 b3 21 9f 93 26 00 b3 30 bf 73 33 65 02 bd 49 c4 d7 ac 40 f0 1f 0b 40 71 77 26 e4 24 41 f5 24 bb e3 fd b8 03 ac 10 54 c1 6f d0 6b 9d 5f 95 8c 48 b3 98 3d a5 62 f4 1d 48 1d 28 43 5d 0c a3 70 20 41 39 e9 7a fc 85 56 c5 bb aa 6e f6 20 be fc 31 6a 3f f0 e3 a4 97 e3 21 bc d9 74 d1 74 19 d4 37 cd 0f c9 f8 6e 2c fa dd ac db 5e bd cf 2e 9f 5f 35 b7 5f ec 92 cb d7 17 bf f9 4d fc e5 92 52 0a 27 45 99 d9 f5 e2 0f 9b 76 f3 f7 f0 1f e3 52 77 2e 6b 37 ae fb 61 cc d7 28 29 33 49 fb 9b d2 27 1c 5f 4e e3 c6 dd 8b 45 fa f5 f3 Data Ascii: tvPc:}W+p"ZjqN~_M7{gD[\Ou-)#!&0s3eI@@qw&$A$Tok_H=bH(C]p A9zVn 1j?!tt7n,^._5_MR'EvRw.k7a()3I'_NE
2024-04-16 17:44:05 UTC	9688	OUT	Data Raw: 05 5e a3 8c 03 78 a8 b0 cb ed ed ed 10 5d 15 31 e9 7d 37 4c 01 05 6e 86 f3 ba 9e 4d aa e9 bb 93 c1 c9 af 3f ff ea ab b7 cf df 9c 38 de 7d e1 f5 2a bf e9 7e a0 47 e5 e0 64 55 dd 08 3b f6 39 f9 8b d3 5d 65 9b 09 35 8f ca 55 92 ed 82 3a 5c 97 59 37 ff 10 d2 7b 89 65 0c 13 8e 90 e3 7e ab 04 24 f1 22 a8 f3 1f 92 e5 87 09 da f8 bc f7 79 d3 fc 70 fb 83 fb 3a 4a b8 54 0d 7f be dd 2d e3 f1 0f 56 c9 fc fb 28 4c 44 dc 49 39 88 92 db 8d b3 32 2f c8 8c 3e 2e 39 74 3a 0a 99 df 87 86 1c 1f cd 0d 9b f7 d9 a2 83 01 d7 e9 bb 7a b6 1c e3 82 8b 6c 70 c2 6e f1 43 f4 98 1f a2 c9 6b b8 6c f1 60 76 4b 71 98 27 5f fa 4f 02 4d bd 16 34 d5 12 9d 2d eb e0 f7 46 32 1e a0 6b e0 2a b0 5b f7 0f e8 17 08 e0 c3 28 2e 0a b9 e0 8a b3 e7 f5 d5 38 1a ff a8 73 c1 4d 4c 0a d9 c4 28 4d 0a f5 9f Data Ascii: ^x]1}7LnM?8}~GdU;9]e5U:\Y7{e~$"yp:JT-V(LDI92/>.9t:zlpnCkl`vKq'_OM4-F2k[(.8sML(M
2024-04-16 17:44:06 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:06 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:06 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 35 38 37 33 7d 0a Data Ascii: {"BundleTime":1713289445873}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50444	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 458 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:06 UTC	458	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 32 38 39 34 34 32 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 31 35 66 64 37 64 38 64 2d 65 38 62 38 2d 34 33 32 65 2d 62 36 64 65 2d 32 38 64 62 37 35 30 37 35 33 32 33 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=305622db-cab4-46c0-8a17-15a582e0ed4c&sessionStarted=1713289442&targeting_context=%7B%22sessionId%22%3A%2215fd7d8d-e8b8-432e-b6de-28db75075323%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-16 17:44:06 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Tue, 16 Apr 2024 17:44:06 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: d0f02d0216ac9018 vary: Accept-Encoding x-envoy-upstream-service-time: 212 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 657550dfe2740440cd2d2c5a84cf231e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: oAkjwexG_laagG4Nei8QiVy3xmiI3Nm52rbSEeHifrU9BO3LWeEy-g==
2024-04-16 17:44:06 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 69 74 79 22 3a 22 41 74 6c 61 6e 74 61 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 32 34 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 33 30 33 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 33 2e 37 34 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 38 34 2e 33 38 37 31 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e 22 3a Data Ascii: 4151{"location":{"ip":"81.181.57.52","city":"Atlanta","subdivision":"Georgia","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":524,"postalCode":"30301","latitude":33.7485,"longitude":-84.3871},"tokenResult":{"accessToken":
2024-04-16 17:44:06 UTC	1242	IN	Data Raw: 74 44 65 63 6c 69 6e 65 64 4d 65 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 68 61 74 65 61 6e 64 6f 2e 20 50 75 65 64 65 73 20 68 61 62 69 Data Ascii: tDeclinedMessage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests chateando. Puedes habi
2024-04-16 17:44:06 UTC	16384	IN	Data Raw: 36 65 33 65 0d 0a 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 c3 a9 73 20 64 65 20 6e 6f 74 72 65 20 43 68 61 74 62 6f 74 2c 20 76 6f 75 73 20 64 65 76 65 7a 20 61 63 74 69 76 65 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 2e 20 54 6f 75 74 65 66 6f 69 73 2c 20 76 6f 75 73 20 70 6f 75 76 65 7a 20 6c 65 73 20 64 c3 a9 73 61 63 74 69 76 65 72 20 6c 6f 72 73 71 75 65 20 6c 65 20 63 6c 61 76 61 72 64 61 67 65 20 65 73 74 20 74 65 72 6d 69 6e c3 a9 2e 20 41 63 74 69 76 65 7a 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 20 65 6e 20 61 6c 6c 61 6e 74 20 64 61 6e 73 20 c2 ab c2 a0 50 61 72 61 6d c3 a8 74 72 65 73 20 64 65 73 20 63 6f 6f 6b 69 65 73 c2 a0 c2 bb 20 61 75 20 62 61 73 20 64 65 20 6c Data Ascii: 6e3ees fonctionnalits de notre Chatbot, vous devez activer les cookies fonctionnels. Toutefois, vous pouvez les dsactiver lorsque le clavardage est termin. Activez les cookies fonctionnels en allant dans Paramtres des cookies au bas de l
2024-04-16 17:44:06 UTC	11846	IN	Data Raw: 72 64 70 72 65 73 73 22 3a 66 61 6c 73 65 2c 22 6c 65 61 6e 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 56 32 22 3a 66 61 6c 73 65 2c 22 66 69 76 65 5f 62 79 5f 66 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 6e 6b 65 64 69 6e 22 3a 66 61 6c 73 65 2c 22 6d 61 64 6b 75 64 75 22 3a 66 61 6c 73 65 2c 22 73 61 6c 65 73 6c 6f 66 74 22 3a 66 61 6c 73 65 2c 22 63 6c 65 61 72 62 69 74 5f 72 65 76 65 61 6c 5f 76 32 22 3a 66 61 6c 73 65 2c 22 76 69 64 79 61 72 64 22 3a 66 61 6c 73 65 2c 22 68 65 6c 70 6a 75 69 63 65 22 3a 66 61 6c 73 65 2c 22 73 61 6c 65 73 66 6f 72 63 65 22 3a 74 72 75 65 2c 22 6d 69 63 72 6f 73 6f 66 74 44 79 6e 61 6d 69 63 73 22 3a 66 61 6c 73 65 2c 22 6f 6e 32 34 22 3a 66 61 6c 73 65 2c 22 73 65 67 6d 65 6e 74 45 76 65 6e 74 Data Ascii: rdpress":false,"leandata":false,"wordpressV2":false,"five_by_five":false,"linkedin":false,"madkudu":false,"salesloft":false,"clearbit_reveal_v2":false,"vidyard":false,"helpjuice":false,"salesforce":true,"microsoftDynamics":false,"on24":false,"segmentEvent
2024-04-16 17:44:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.5	50442	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:06 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifta325189432fbe2eca657f8d193a cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:06 GMT server: istio-envoy connection: close
2024-04-16 17:44:06 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.5	50443	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 587 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:06 UTC	587	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 31 34 66 31 38 66 32 31 2d 35 65 35 61 2d 34 64 31 34 2d 38 31 35 66 2d 38 34 39 33 32 66 30 64 35 66 32 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 63 36 34 30 38 65 63 37 2d 66 64 32 34 2d 34 39 63 30 2d 38 65 62 32 2d 36 30 64 61 32 33 39 35 38 61 31 35 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%2214f18f21-5e5a-4d14-815f-84932f0d5f20%22%2C%22instanceId%22%3A%22c6408ec7-fd24-49c0-8eb2-60da23958a15%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-16 17:44:06 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:06 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 9251f12180d8bc43 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 11 server: istio-envoy connection: close
2024-04-16 17:44:06 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.5	50445	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	612	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=1&ClientTime=1713289444802&PageStart=1713289442223&PrevBundleTime=0&LastActivity=2366&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:06 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:06 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:06 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.5	50446	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:07 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift09a02c7420cb99d83b4964b8a43 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:06 GMT server: istio-envoy connection: close
2024-04-16 17:44:07 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.5	50447	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 578 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:06 UTC	578	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 35 61 64 31 61 32 31 39 2d 30 38 62 36 2d 34 39 31 34 2d 39 30 35 36 2d 64 61 64 63 38 32 63 30 38 61 32 65 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 31 34 66 31 38 66 32 31 2d 35 65 35 61 2d 34 64 31 34 2d 38 31 35 66 2d 38 34 39 33 32 66 30 64 35 66 32 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 63 36 34 30 38 65 63 37 2d 66 64 32 34 2d Data Ascii: metric_payload=%7B%22id%22%3A%225ad1a219-08b6-4914-9056-dadc82c08a2e%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%2214f18f21-5e5a-4d14-815f-84932f0d5f20%22%2C%22instanceId%22%3A%22c6408ec7-fd24-
2024-04-16 17:44:07 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:07 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 91a46d72c19e90fa vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-04-16 17:44:07 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.5	50448	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:06 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 0dfH+CRUWSxQOisj5ESUzA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:07 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:07 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.5	50449	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:07 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:07 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift6e2c20348e6868ca2661cf1c240 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:06 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 86150a7b1da76d1a806dc0cdda8debc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: QVzuPthhI3aHGIN8SR-bIQdE1xRmgOgMuO0n6MEwJdqRzbn9hGW0OQ==
2024-04-16 17:44:07 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.5	50452	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:07 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=2&ClientTime=1713289446378&PageStart=1713289442223&PrevBundleTime=1713289445873&LastActivity=400&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 13247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:07 UTC	13247	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 7d 89 96 db b6 b2 e0 af e8 69 8e 95 e4 3c 51 22 36 82 74 46 e3 b1 db 4b 9c 78 4b 6c 27 37 b9 c9 e9 03 92 a0 9a 6d 8a 54 48 aa 17 df 97 f9 f6 29 80 5a 48 50 6b 2f b1 93 74 3a a6 24 b0 00 14 6a 43 15 00 16 ff d3 7d 2b 7f ef de c7 fd ee 4f 27 32 ed de 77 1c af df 7d 72 56 16 dd fb ff fe 4f f7 bb 38 0d bb f7 b9 db ef 3e cc c7 aa e8 df 76 1f c1 9f 82 c2 f6 6f bf d5 6a fd d1 df 04 ce 2a 70 b4 01 dc b3 57 e0 a8 8f 5d ba 01 ce 69 c1 f5 ff dd 1d 04 45 61 a1 e9 65 10 9f e4 9d ff 74 c2 b8 98 26 e2 f2 7e 27 4a e4 c5 d7 fa 6a 85 71 2e 83 32 ce d2 fb 9d 20 4b 66 93 f4 eb ce 58 4c ef 77 ec 01 cb e5 e4 eb ce 1f dd 7e b3 99 59 d2 f9 ef ce 09 86 e6 26 22 1f c7 a9 55 66 00 8e 4c f0 f2 f7 4b f2 e1 e3 75 3b 9d b7 b2 67 9f 3c 8e 4f cf 4f 97 50 Data Ascii: }i<Q"6tFKxKl'7mTH)ZHPk/t:$jC}+O'2w}rVO8>voj*pW]iEaet&~'Jjq.2 KfXLw~Y&"UfLKu;g<OOP
2024-04-16 17:44:07 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:07 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:07 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 34 37 34 35 34 7d 0a Data Ascii: {"BundleTime":1713289447454}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.5	50453	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:07 UTC	809	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: R8rfybuC+pEIJsoCXcTbig== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:07 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:07 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.5	50454	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:07 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:07 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift85cd0764019894231adac6328bc cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:07 GMT server: istio-envoy connection: close
2024-04-16 17:44:07 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.5	50456	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	672	OUT	GET /0jnmtsdzg6p5/5njZgbUWn7OkNcxpuSgmD2/e3d0d77f6b7db47c01045121e5a13573/illo-agreement-trap.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:09 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4877 Connection: close Date: Tue, 16 Apr 2024 17:44:10 GMT Last-Modified: Wed, 20 Mar 2024 17:51:50 GMT ETag: "8ebff36118550ab72bb17778c3e39c15" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1b0f041f103652001e37f5806000d24a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: zP5RB6sgrUuDDmmPZLMjshd2WduOB4yzYuVaJGoWHEZMT0ctefvXUQ==
2024-04-16 17:44:09 UTC	4877	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 35 31 36 22 20 68 65 69 67 68 74 3d 22 36 38 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 36 20 36 38 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 30 33 5f 38 39 38 37 37 29 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 31 36 22 20 68 65 69 67 68 74 3d 22 36 38 38 22 20 66 69 6c 6c 3d 22 23 34 43 30 30 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 39 39 2e 37 38 37 20 34 30 39 2e 32 36 34 4c 33 31 2e 37 37 37 33 20 35 34 30 2e 32 36 39 4c 32 39 39 2e 37 38 37 20 36 35 31 2e 33 33 38 4c 35 36 37 2e 37 39 37 20 35 32 Data Ascii: <svg width="516" height="688" viewBox="0 0 516 688" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_1503_89877)"><rect width="516" height="688" fill="#4C00FF"/><path d="M299.787 409.264L31.7773 540.269L299.787 651.338L567.797 52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.5	50457	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	695	OUT	GET /0jnmtsdzg6p5/1UD43hoOxdWkZZPcTG64KN/aebf586f98a5dff7c5132401db92ea13/Woman-working-remote-on-phone.png?fm=webp&q=50 HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:09 UTC	504	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 8000 Connection: close ETag: "c102c6d1bf0df972b011fd49f4e894e7" Last-Modified: Tue, 09 Apr 2024 13:53:21 GMT Date: Tue, 16 Apr 2024 17:44:09 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 0c482288431692a08571c47359ca2c80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: fjBeUktWIcVu6pnNMknL826dqNS_vVswsyAIh75002izpLA8abuqPA==
2024-04-16 17:44:09 UTC	8000	IN	Data Raw: 52 49 46 46 38 1f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 95 02 00 f0 01 00 41 4c 50 48 b8 01 00 00 01 90 a3 6d db b1 47 ef 8f d8 a8 6c 63 09 b6 8d f2 af 63 75 e9 5c 26 bd 59 71 ba 7f 36 a0 ee ab fe 6a bc 80 d8 7c 77 90 e3 ae e6 8a 88 09 30 1f f9 58 df 96 73 61 95 7c e1 6c f5 47 1a f5 7a e3 4b 66 0e 03 57 52 ba 0a 1c 0e e5 46 ba a5 e3 49 19 3c bc b1 8a 3e 5b 29 8f 17 4e 68 c7 a9 95 f5 cf d9 1c b7 6a c2 9a bf bc e9 ca de ac 65 7b 34 13 dc fa fd c5 2a fb 6e 27 5d 32 9e ea 2f 2f 56 db 0f 07 e1 8a 49 39 78 b1 ea 7e 18 17 4c 68 ef a3 d5 f7 55 8a 5e 0a fc 56 e1 ab 72 71 b7 5a 89 5f c4 aa 25 72 59 63 d6 a7 96 44 bf c8 b6 d4 92 f4 43 64 8e 5a d2 6e 44 76 a1 96 0c ab 72 fc 87 ff f0 1f fe c3 7f f8 0f ff e1 3f fc 87 ff f0 1f fe c3 7f f8 0f ff e1 3f fc Data Ascii: RIFF8WEBPVP8XALPHmGlccu\&Yq6j\|w0Xsa\|lGzKfWRFI<>[)Nhje{4*n']2//VI9x~LhU^VrqZ_%rYcDCdZnDvr??

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.5	50465	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	681	OUT	GET /0jnmtsdzg6p5/3DK107HA72YisXutlRAbk3/fe56a48aa0ae33bcaccb287e47715374/productUI-docusign-navigator.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:09 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 71782 Connection: close Date: Mon, 15 Apr 2024 17:52:08 GMT Last-Modified: Thu, 04 Apr 2024 22:15:07 GMT ETag: "d45931e558f345e8ce7c252b7aea0cf2" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 1b0f041f103652001e37f5806000d24a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: pouPP4RKltspblbuCOfwF9TfHtQD9FzuTQSX923AAZ3IpOqsHQCK8Q== Age: 85922
2024-04-16 17:44:09 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 17 fb 49 44 41 54 78 01 ec dd 0b bc 25 55 79 e7 fd 55 0d 28 30 20 08 4e 82 80 88 23 dd bc 89 c8 4d 54 24 72 69 3e ef 67 a2 dd 82 18 11 10 bc 20 26 42 d4 09 90 91 51 d4 c8 25 11 70 20 01 8c 66 c0 44 c4 60 8b 10 8d 08 76 23 99 19 9a 8b 1a 8d 28 57 27 03 4d 5e 91 ab 9f 19 41 10 42 13 91 b3 de fa af aa a7 6a 55 ed da b7 73 f6 a9 da a7 cf ef 0b bb cf 39 7b d7 ae fb 6d 3d b5 d6 b3 9c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaIDATx%UyU(0 N#MT$ri>g &BQ%p fD`v#(W'M^ABjUs9{m=
2024-04-16 17:44:09 UTC	16384	IN	Data Raw: 00 00 68 17 35 08 3a 97 e5 1e b0 e0 40 89 d6 1f 00 00 00 00 80 f6 10 20 e8 5c 1e 08 a0 79 01 00 00 00 00 a0 43 04 08 ba e7 93 ac 7d 41 08 0c cc b8 a2 53 03 00 00 00 00 00 5a 43 80 a0 63 ca 37 10 82 02 c9 92 c4 e7 6f 84 9f b4 30 00 00 00 00 00 b4 88 00 41 e7 8a 14 85 d1 3b e9 7f 9e a6 06 00 00 00 00 80 f6 10 20 e8 58 12 fa 2e c8 82 04 16 14 f0 d9 8b 3a 04 00 00 00 00 80 d6 10 20 e8 98 2f b2 13 a6 a1 82 24 49 48 52 08 00 00 00 00 e8 02 01 82 ae e5 d5 05 f2 1c 85 21 48 e0 49 42 00 00 00 00 00 68 19 01 82 ae 65 71 00 af ac 03 3e 0b 16 50 83 00 00 00 00 00 d0 ba 8d 1d 3a 95 57 1c 08 8d 0b 2a fd 1b 52 81 00 00 00 00 00 d0 22 6a 10 4c 01 25 27 54 f5 81 38 39 a1 a7 1e 01 00 00 00 00 a0 45 04 08 ba 16 92 13 ba 3c 3d a1 77 59 ce c2 f0 86 03 00 00 00 00 a0 2d 04 08 Data Ascii: h5:@ \yC}ASZCc7o0A; X.: /$IHR!HIBheq>P:W*R"jL%'T89E<=wY-
2024-04-16 17:44:09 UTC	16384	IN	Data Raw: ee b8 43 fa 73 9b f0 73 a1 5a ff f4 7a 77 cf ba 7b c3 76 7f 20 dd 07 84 7d 60 3c 9b 6d ba 59 d8 0f 36 db 7c 53 b7 74 e9 2e ee 25 e9 fe b0 d9 e6 9b b9 85 aa 7e 4e d0 3e b2 fe 99 f5 0e 68 8b ce b1 9b 6f 96 1e 57 2f 7a a1 db 61 87 1d dc b2 65 bb b8 b9 20 40 d0 b9 2c df 40 96 a4 d0 e7 31 02 e2 03 93 f2 b9 6b 9d bb e5 5e 07 00 58 20 fe f9 81 2c b8 fb 86 57 b9 a9 a0 9b fd db ef b8 d3 7d ef 1f 7f e0 1e 7a e8 21 f7 74 fa b7 0a bb bb a4 05 9b 70 43 b6 f4 e5 0e 83 69 1d aa 00 75 c7 ed 77 a6 3f 1f 76 9b a7 85 c1 5d 76 d9 c5 ed b1 e7 6e 6e df 7d 5f e3 a6 dd 3d f7 dc eb d6 ad fb 97 7c fe 1f 0a f3 bf c3 0e db bb 6d b6 dd 26 14 74 b5 3f 60 3c 8f 3e fa 58 ba 2e 1f 74 37 ac bd 29 1c 53 0a 1a 29 58 70 f0 c1 07 84 f5 3a cd b4 3f 3f 90 ee 07 df fb de 0f dc 9d e9 b9 c1 ce 09 Data Ascii: CssZzw{v }`<mY6\|St.%~N>hoW/zae @,@1k^X ,W}z!tpCiuw?v]vnn}_=\|m&t?`<>X.t7)S)Xp:??
2024-04-16 17:44:09 UTC	16384	IN	Data Raw: 30 0c 21 44 b9 06 c6 d2 86 e7 3e db 3f 22 ee bb ff 01 77 df 7d 0f 78 cf 81 38 14 01 00 00 e0 70 05 81 a0 61 a6 0b cf 81 7c 44 3c 71 d3 69 6a d9 0a 1d 94 63 de 03 93 78 8a 64 98 9a 91 9c 27 fa cb 47 b8 ab f2 0f 94 21 63 af cc 75 dc 8c dd 90 3c 89 60 e2 e3 fe cb 18 94 14 50 89 fb ea f6 15 c7 b6 6f 0b 5c f7 8d 7c 84 3e 5f 4e a2 85 8d da c7 94 ad 3b 1b 74 4e 25 8e 68 e4 3c 1e a9 57 78 87 e6 49 40 90 a7 c0 20 6f 81 32 14 7a 51 26 be 6c 9f 85 20 33 d3 7d ea 58 25 00 18 e1 f5 92 c8 73 85 4f a2 78 7c a7 0a 06 40 5b d1 e8 be 92 16 3e 16 89 04 32 e4 95 ac 70 14 c2 ca 08 21 12 21 ce ce 7e 4b 0a 2d 50 48 c3 8a 28 af c1 7c 42 78 01 00 00 b4 0d 04 82 16 a0 bc 84 56 ea d0 06 be e9 33 f4 13 e7 21 98 c4 73 24 03 d9 72 0f 68 94 59 25 ea 54 8a 4e 46 e5 b0 f5 ea 95 7c 4e cb Data Ascii: 0!D>?"w}x8pa\|D<qijcxd'G!cu<`Po\\|>_N;tN%h<WxI@ o2zQ&l 3}X%sOx\|@[>2p!!~K-PH(\|BxV3!s$rhY%TNF\|N
2024-04-16 17:44:09 UTC	6246	IN	Data Raw: 4c d8 11 03 ac ba a1 c2 0c 1c 00 00 00 00 00 00 c0 3c 81 07 41 c3 f4 aa 00 49 57 18 20 cc 00 00 00 00 00 00 00 e6 11 04 82 c6 49 93 4e 5c 41 21 17 24 d9 f7 14 ff 01 00 00 00 00 00 00 98 47 10 08 da 80 17 03 12 9f 80 40 1f 53 d4 01 00 00 00 00 00 00 98 67 10 08 1a c7 7b 0f e4 55 0d 53 4b 4e 58 4c 03 00 00 00 00 00 00 98 27 10 08 1a a6 93 93 30 2d aa 18 14 d3 d2 34 25 07 01 00 00 00 00 00 00 cc 1b 08 04 2d c0 b2 12 9a 48 90 7f 9b c2 83 00 00 00 00 00 00 00 e6 0d 04 82 96 90 16 c1 05 c5 17 9f ba d0 01 00 00 00 00 00 00 cc 13 08 04 ad 21 d4 03 92 94 32 06 00 00 00 00 00 00 30 9f 20 10 34 8d 52 0d a4 49 27 15 81 fd 9b 24 38 10 00 00 00 00 00 00 c0 fc 81 40 d0 30 5e 1b 48 f2 24 85 c5 04 37 ad a9 38 10 00 00 00 00 00 00 c0 3c 82 40 d0 34 71 b1 02 15 39 4c a6 d0 Data Ascii: L<AIW IN\A!$G@Sg{USKNXL'0-4%-H!20 4RI'$8@0^H$78<@4q9L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.5	50458	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	679	OUT	GET /0jnmtsdzg6p5/3P8Il3939FVKkbMzMvQNTL/23a1dd0f90a8001ff30959f33336b5f1/productUI-docusign-maestro.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:09 UTC	533	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 24735 Connection: close Last-Modified: Wed, 20 Mar 2024 17:57:41 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:10 GMT Cache-Control: max-age=31536000 ETag: "7a6c6802aa3c2d92e0f951de9e9154a1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b39f5dfde27c7e8a1bb43bcbc2256904.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: ewybB4UBaMfzVRmuM9XDuRSZQWE3VNjpYhoi6cRyQq6dk-bXJGP3IA==
2024-04-16 17:44:09 UTC	15851	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 60 34 49 44 41 54 78 01 ed fd 0f bc 5c 77 5d 27 fe bf 27 09 b4 50 da a6 ab b4 fb a5 28 29 a8 28 82 94 ef b6 fc d3 9f a4 56 45 f7 b7 b4 61 05 ff a1 26 45 5c 17 dc b5 29 28 b8 2e 98 04 d1 85 2a 34 d5 a5 e8 57 24 a9 8a 8a c0 97 14 74 97 aa 98 d4 c7 ae 82 f8 fd 36 ca 1f 65 05 92 0a ad b6 e8 e6 5f ff a4 7f 92 f9 9e f7 cc 7c 6e 4e 26 33 77 e6 ce 9d b9 77 ee 9d e7 f3 d1 e9 bd 99 3b 73 e6 9c 33 33 e7 f3 39 af f3 f9 13 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAa`4IDATx\w]''P()(VEa&E\)(.*4W$t6e_\|nN&3ww;s339
2024-04-16 17:44:09 UTC	8884	IN	Data Raw: e4 8d 43 15 3a ad 70 20 1f db 49 00 eb fd 6e eb 23 79 e7 d4 43 f3 55 aa 73 39 f5 39 c6 17 5b 79 ad cf 8d 9c 2d 23 06 55 e8 af af 42 91 5e 23 ce 5e fd 3d 1b 87 9a 1a 2c e5 dc cc b9 8c 1c 6d b9 7b 39 f5 26 3f 39 50 dd a8 f2 ea f6 b0 eb 93 e1 40 af f5 59 c8 d4 85 f5 3e f6 97 8f 71 ca 97 c5 7c 1e f2 b3 5a f6 c1 7c 49 6d 7d 4a c8 41 4a c2 9f 57 0d 32 dd 2f 9f e7 5e db dc 3d eb c5 a0 ef 49 7e 2e 5e 3e e4 f7 69 a5 9b 86 cf d6 a4 d4 c3 b9 61 be 7b 83 5a 10 74 5f 29 1c c5 42 8e 4f f5 ef c3 65 5a bd b0 0a e5 b1 b9 9c 9c 0c 73 6c 7e fd ab 17 36 3e d1 30 1e d7 29 eb 47 3d de e7 36 5c d1 39 d6 0c da 86 d6 d5 ed 6a 1b 72 20 bc 51 2e 4e 2c e4 98 d1 1d 96 d7 67 01 7a cb f6 9b e7 2d cf 73 39 65 0a dc 49 5a c8 95 f6 61 de 9f 7a 20 b2 90 a9 96 87 69 2d 51 8e c1 77 d5 5a 75 Data Ascii: C:p In#yCUs99[y-#UB^#^=,m{9&?9P@Y>q\|Z\|Im}JAJW2/^=I~.^>ia{Zt_)BOeZsl~6>0)G=6\9jr Q.N,gz-s9eIZaz i-QwZu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.5	50464	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	674	OUT	GET /0jnmtsdzg6p5/7lEyMAosQLMPNV3ciF9dmK/7cc6df4946379ff407d55727a5bc2f46/productUI-docusign-ai.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:09 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 283286 Connection: close Date: Tue, 16 Apr 2024 17:44:10 GMT Last-Modified: Wed, 20 Mar 2024 18:00:22 GMT ETag: "9ba65284b01e652f093da5062f7a6487" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 65566883560611dde36b4dfe13fd3272.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: zAzmnGU8l_e1H5P1zcjobtduF9lKRGeiuR509x6RyWST0ZV1tCnk2w==
2024-04-16 17:44:09 UTC	15879	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 04 52 2b 49 44 41 54 78 01 ec bd 7b b0 77 49 59 df db fd 7b 07 18 23 97 19 84 a2 0e e1 f2 72 c2 49 ea 04 95 f1 fa c7 d1 84 01 d4 1c 8d 97 99 78 89 1a c3 45 ad 94 a6 80 01 d4 a0 a6 64 06 63 a2 a5 95 00 5e 52 95 68 00 89 49 38 c1 64 06 49 8c e8 91 01 b5 4e 9d 3f c4 41 13 eb 24 11 98 01 89 3a 46 e5 ae c3 5c 76 9f f5 ed d5 4f af 6f 3f ab d7 fa ad bd df bd df bd df 77 7f 3f 33 fb 5d b7 be 77 af f5 eb e7 e9 a7 bb 43 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaR+IDATx{wIY{#rIxEdc^RhI8dIN?A$:F\vOo?w?3]wCB!B!B!B!B!B!B
2024-04-16 17:44:09 UTC	10968	IN	Data Raw: dd 50 8d 58 94 b0 a8 08 32 43 26 d3 bd f7 7d fc 7f fb a5 2f 79 e2 dd 10 fa b9 1c 18 2e 23 8a b7 9b 9e a5 bc f9 74 d9 b5 e5 19 f5 c2 f5 81 6b 8b 13 f7 de f6 b6 b7 7d df 85 0b 17 5e d9 13 5c 8e c2 92 50 bc 34 ea ea 95 0e 6b 71 f3 73 2f d4 ed 8b d7 1f d7 c2 34 0e 53 0e bf f2 2b bf 12 9e fb dc e7 76 fd 71 1c 0f 3e f8 60 bd ff 45 5f f4 45 b9 0d f7 d2 68 fc fa af ff 7a 16 a8 bd 9b a7 3f fd e9 59 a8 f4 65 68 f1 41 60 ff 17 ff e2 5f e4 6b b8 83 fb 25 c1 d6 ee bf f7 bd ef cd 82 82 2f a7 6f f9 96 6f e9 8e a6 33 ff ee df fd bb c5 91 62 9f be 5e 59 f9 7a f8 ab 7f f5 af e6 75 04 18 28 45 90 16 9f 6e ce 0b 3a c9 58 ef 80 d7 19 58 02 0a 00 74 58 7d 59 70 5a d6 3a bc cf 79 ce 73 6a b9 2c b5 6d ac 7f c0 c2 7a af dc 11 8e 6f 07 ec 06 42 2a c2 39 0c 10 06 20 d8 2e e5 0d 47 Data Ascii: PX2C&}/y.#tk}^\P4kqs/4S+vq>`E_Ehz?YehA`_k%/oo3b^Yzu(En:XXtX}YpZ:ysj,mzoB*9 .G
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: c2 c4 3d 0b 63 e8 d4 56 21 16 e1 98 b2 c1 c2 e2 78 e0 87 e3 b6 78 cc ad c5 e3 9b 8f f9 61 c5 00 c7 53 04 ec 40 f1 5b da 76 39 78 b4 b3 2a 7a 47 ec 66 90 ad 07 70 ef fe fb 43 cd 23 9e 96 70 1a 45 8a c5 8f e7 26 c4 93 9b fa 83 9a 46 e5 48 b4 6b 94 0d c2 e5 ba a0 b0 9a f2 b1 7c 53 19 37 6e d0 ce fc 88 bc 91 d2 fe 91 f6 a5 e7 de 9d 17 c0 53 9a 9b f9 f7 e2 e5 eb 9e 05 43 6f 3a 43 4f 59 61 cf 97 9e 79 41 91 f3 b1 54 2e bd 38 7b f8 fb be 9c 7a 8a 18 13 fe 7b a3 dd e6 0e 3b 1e a4 05 61 b8 97 ce 5e 7a 52 4a 8b 8a 02 fe c3 77 08 f3 de bf ed db be 6d b1 9c 52 47 70 b5 7b 5f f0 05 5f 90 95 0c ff e8 1f fd a3 2c b0 f2 a2 89 69 41 70 87 a5 80 d1 9b 3e 01 cb 06 4c 63 80 32 05 61 fa 74 f9 b2 58 ba 07 f7 58 d0 10 8b 22 62 0a 83 8d de f3 f3 b4 22 d4 ff e4 4f fe 64 f8 a9 9f Data Ascii: =cV!xxaS@[v9x*zGfpC#pE&FHk\|S7nSCo:COYayAT.8{z{;a^zRJwmRGp{__,iAp>Lc2atXX"b"Od
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 16 7e b8 75 f7 d2 17 10 31 23 0d 33 e8 b5 5f a4 2d bd b4 3f cd 92 61 30 18 0c fd 00 23 08 fa 1c 0d 31 ab 12 4b 5a 93 ba 8e 69 0e 65 c6 a7 88 fb 8a 18 62 10 42 0b 58 4b 16 03 8a 69 fd 81 3d 94 30 21 a1 05 8b 17 2f 76 a4 36 64 01 9e 18 40 e8 30 6c cf 9a 35 ab 20 bd 21 d8 61 87 1d aa 36 ac 5c b9 92 ec 05 e1 33 de 03 ab 57 af 66 81 18 20 bc a0 9c 36 6d 5a b9 69 60 93 16 44 d3 28 73 83 54 69 6b fb 8e 62 c8 63 60 28 6e 3c 1c 9b 34 65 b2 db 76 e2 44 67 30 18 0c e3 11 2f 7b d9 cb 82 88 5f d1 a0 67 a0 bd aa ba d5 55 e4 35 27 b4 5e 43 e5 d2 af 5d f7 c9 68 20 ae ff e0 8e 3b ee 48 eb a8 6d 73 fe 6b 5f fb da b6 32 a9 4e 80 36 e8 59 66 ce 9c 59 cd 3c cb be 94 24 57 ff d7 da ea 48 db a2 31 1c a5 fa 5e 0d ee e1 18 e6 23 25 08 f4 fd e6 d0 eb 4c 7d 8a 34 23 44 0e dd c8 89 Data Ascii: ~u1#3_-?a0#1KZiebBXKi=0!/v6d@0l5 !a6\3Wf 6mZi`D(sTikbc`(n<4evDg0/{_gU5'^C]h ;Hmsk_2N6YfY<$WH1^#%L}4#D
2024-04-16 17:44:10 UTC	1002	IN	Data Raw: f5 be e4 fc a0 69 d0 05 c3 f1 a0 18 4d f0 fe 61 68 a7 29 16 45 68 b0 09 69 7b 79 47 e9 bf dc bb 34 da e0 3d c3 83 86 85 67 8e d0 63 1a 76 21 d9 47 08 6b d0 ef a2 08 16 f6 7a 1d ee 89 f7 57 d7 71 df c2 87 dc d6 02 65 34 17 68 02 64 0c ff 4a 54 20 31 da 8b 22 9f 6a b0 c8 cd e4 77 9b 9d cf 11 02 45 83 d0 a1 de 97 ab a7 29 f4 40 ea cd 11 15 fa da 06 83 c1 60 30 8c 37 98 07 81 a1 a6 e6 2f db c5 d0 e8 27 ac d1 20 48 cf c3 7b 20 7a 10 08 39 10 70 e0 81 07 92 e5 c0 2d 5a b4 a8 8c 21 06 15 08 33 40 87 80 6d 11 29 e4 9a 92 e6 50 ca ad 58 b1 22 b4 67 e5 ca 95 85 90 03 02 4d 0e 38 25 4e e8 5c 7b 06 06 7d 0f 6e 28 8b c1 90 e7 40 5b 1c ac 0e 3c 55 e7 bd 44 3a 04 bd 00 37 6b 66 a0 31 0e 31 92 c4 dd 39 37 23 7b 94 9f 11 15 51 43 d6 2d 41 c2 2f d5 8c 33 c4 d8 70 69 be f9 Data Ascii: iMah)Ehi{yG4=gcv!GkzWqe4hdJT 1"jwE)@`07/' H{ z9p-Z!3@m)PX"gM8%N\{}n(@[<UD:7kf1197#{QC-A/3pi
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 72 d5 ee 14 3c ff 67 96 af 08 fd 44 1f a2 21 40 5d dc 47 fa 4c e6 c7 99 fd a6 b6 53 8e f3 a5 4f 9a de b9 c1 f8 ce f1 dc 68 2b ef 2b d7 0e 69 21 4f 39 36 eb f1 22 ef 01 7a 20 3c e7 39 bb ed 12 9e 87 d4 4f 48 8c f4 93 46 fa 3e af 8d 22 9a f2 2e f1 fd 44 5f a1 29 15 e4 8b 09 7e 8f 59 5c 3d 54 a0 5a a2 00 41 2d 74 ad 54 59 72 92 f3 6a 50 84 43 f8 2c da 01 ac 53 23 3f b7 2f f5 22 90 63 b9 75 d3 76 ea 49 90 0b 7d 48 f7 f7 e2 f1 60 30 18 0c 06 c3 58 82 fd 57 eb 73 24 6a d4 61 33 2d 23 ae a0 3a c5 21 6b 39 4e 8a 43 3c 08 d0 20 40 7f 20 66 33 28 24 c4 40 b2 18 80 c7 1e 7b 8c 34 87 e1 5c 84 0a 21 0e 38 7f f6 ec 96 81 bc 6c d9 b2 01 4f 0e 14 cf 3e fb 6c 35 90 f4 e4 c0 80 52 c5 96 29 9e 30 10 85 5c 70 51 a0 90 f5 ba 75 eb 06 2e fc cc 85 bb 9d f6 f1 d3 7e 21 b7 e8 54 Data Ascii: r<gD!@]GLSOh++i!O96"z <9OHF>".D_)~Y\=TZA-tTYrjPC,S#?/"cuvI}H`0XWs$ja3-#:!k9NC< @ f3($@{4\!8lO>l5R)0\pQu.~!T
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 45 af 00 15 46 20 9e 03 72 df e5 8b 91 da 10 f1 3d 48 00 8c 31 5c 9b 5b 33 fc cf 05 f1 39 0c 15 0c 2a c4 d3 e4 b8 88 c9 1d 7f e2 5b 3a d6 1b b2 1c dc 7e 6f 30 b2 38 4f c0 0c ec f5 41 0c 6e ef da 3e e2 c1 f5 3e 54 e8 29 07 99 40 1d 2d 91 bb 1b 3b ce a8 73 0c 25 78 7d 3f 9c 8f 18 5d 2a 66 97 96 bf 39 88 1f b6 32 08 68 f1 39 71 63 c7 35 5e f7 01 5a 08 e2 f6 1f 0c df 23 5f d3 12 b9 53 2e ee b9 fe a3 0c 75 e9 90 81 dc 3d cb b3 08 fa 03 c9 ac 38 fb 74 7b e9 3b 32 15 8c 04 b4 1d a5 ff b4 8d 90 44 dd 08 19 0d 21 79 38 3f 27 08 c9 3d d1 cf f2 3e b0 6e 91 06 93 6b 7d 2c c7 e9 63 84 fd d6 74 f1 22 69 85 4f ec 1d 9e 07 fa 0d 4d ef 07 cf f9 1b 49 bf 89 50 a3 f4 01 75 e4 fa a0 25 20 f8 c5 70 ae b4 0f 4f 11 de db 5c 7b 78 17 f4 3b 48 5d 22 50 d8 2b 72 ef 25 df 55 43 1b Data Ascii: EF r=H1\[39[:~o08OAn>>T)@-;s%x}?]f92h9qc5^Z#_S.u=8t{;2D!y8?'=>nk},ct"iOMIPu% pO\{x;H]"P+r%UC
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 02 e0 80 f8 6d 07 ea 0a 7e db ea f3 5c 24 b4 d1 0d 0a f4 b8 f4 47 57 a4 3e 78 6c d1 e3 e9 7d 1f 05 94 79 ae 10 4d d1 8c 7c 47 4d b5 a5 61 dc d8 c0 55 16 69 2e 4b 53 ca 4b ce 78 76 c3 0d 37 c8 79 97 5d 76 11 6d 02 68 0f fc ec 67 3f 1b 58 21 45 18 09 00 01 26 e6 30 2f 60 7e 1e 20 96 f3 c9 27 9f 6c fe e1 1f fe a1 96 de d5 35 e5 8a 94 f3 09 b3 01 4c da 6e be f9 e6 5a 38 34 13 30 f9 9b 88 bd e6 b9 a2 55 5a 7d 84 e0 da e6 25 1b 13 44 9a 28 68 a2 e0 35 1e 95 53 4c 7a 4b 42 3e f2 a2 30 47 0d 88 52 fd c7 0b 10 a0 5c 94 91 0b 07 9c 94 37 09 15 14 9c 20 7c 69 95 e7 3c 1f b4 23 81 00 c4 e1 96 80 54 f7 5f 1e 34 4a 5b 2e 4f 62 db 00 18 d1 6d 33 91 9e ce a9 0e 5f 6a 43 08 31 50 e7 c6 96 8b da 5b 3f da 45 af 2c 8f 87 1f 0a 9b f9 b6 7a e3 11 24 b9 fa 5a 32 25 68 32 59 d0 Data Ascii: m~\$GW>xl}yM\|GMaUi.KSKxv7y]vmhg?X!E&0/`~ 'l5LnZ840UZ}%D(h5SLzKB>0GR\7 \|i<#T_4J[.Obm3_jC1P[?E,z$Z2%h2Y
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: b3 f8 40 5e 7f fd f5 08 93 2c 70 86 f3 41 6c 57 88 00 8f b2 42 0b c0 de 73 cf 3d 62 2b ea 05 7c d9 e2 10 67 68 0f 2c 59 b2 44 d2 ad b1 c6 1a 88 2f 5b 1c ae be fa ea 72 8d 63 b5 d5 56 93 03 e6 05 fe 0c 70 40 d2 f2 39 b4 08 b0 a5 e2 1e 7b ec b1 ce ce 3b ef 7c 68 56 5d cb 7a e9 7b 93 43 00 0d 73 cd 49 ab 4c 92 63 22 e8 6f 5f 3d 43 04 8f 8b ce ff 85 08 22 f0 3e 0f 41 0e 2b 89 b4 d3 de de 0b 8f b7 df 36 db fc e0 8c 1f 9b cb 2f fd 95 84 c1 91 da 7a eb 87 ad 61 a6 6f be b1 79 78 fe a3 a2 72 8e e7 7b ed f7 7a 11 38 d7 5b 7f 6d 9f e7 15 92 37 54 9e ff e9 84 23 cc ec bf cc 11 5b ee d5 56 5b d5 dc e2 57 6d 51 3e e2 41 a8 7f c9 cb b6 f2 79 6d 12 85 97 eb c4 93 3c f2 83 4f 84 7d 3d 4f 48 93 13 ec d3 35 ff e4 4d 6f 1d f8 f0 c3 0b 6a 36 e7 25 da d6 97 fd eb ab 7f 2b 75 Data Ascii: @^,pAlWBs=b+\|gh,YD/[rcVp@9{;\|hV]z{CsILc"o_=C">A+6/zaoyxr{z8[m7T#[V[WmQ>Aym<O}=OH5Moj6%+u
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 3f c6 ad 0b 5b f1 d3 62 9b 84 3d da 60 33 2e bf 23 f1 a3 91 f8 40 59 e4 31 32 11 b5 e5 ab 1d 51 74 1f 64 7d 96 7f 63 ab 95 d1 aa 43 a4 1e d5 ad a3 cd 88 51 fd 51 c9 85 b1 ad fb d1 cf 06 ab 1d 40 b1 7e f0 18 1a 85 39 97 46 83 e6 21 8c af 58 7f 49 0f 53 1c f6 4f d5 d2 b1 1d d3 90 71 bc ab 8f db 7e df 54 ed 6f 06 80 3c a3 56 9d c9 9f 12 d2 5d 7f 29 ec e1 6b 63 38 d4 2d 0a a2 38 2f c5 bb 1d 04 f1 f4 7e ab 17 39 8c e5 f8 fe 8b 17 fe c4 43 04 88 33 ff 07 f9 38 d6 ef bf 60 06 6d ef 3f 71 15 66 e1 b2 5d 75 e2 78 d5 ef 8e 55 08 a5 63 9f 43 e5 5f 8d 67 02 27 32 a6 1d bf 71 1c 4b d5 6f 1d a8 cf f6 08 05 a5 fe 49 ef 8a ee a0 aa 6b 62 da e0 c0 14 63 a4 ef 2a 57 40 c4 c9 53 1b c9 a7 d7 3a 0d 38 24 5e 41 bd 27 03 b0 ca fa c6 33 cd 33 28 ec f3 8c b8 3c ab b6 ad 09 ef b9 Data Ascii: ?[b=`3.#@Y12Qtd}cCQQ@~9F!XISOq~To<V])kc8-8/~9C38`m?qf]uxUcC_g'2qKoIkbc*W@S:8$^A'33(<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.5	50467	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:09 UTC	675	OUT	GET /0jnmtsdzg6p5/1tfVMQlUQ5vXChMqZ4Medl/cc629beb987d310b19d2657671ec6daf/productUI-docusign-clm.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 394714 Connection: close Date: Tue, 16 Apr 2024 17:44:11 GMT Last-Modified: Wed, 20 Mar 2024 18:01:13 GMT ETag: "9da4789e0313a20dd4dbc19adbcfb333" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 fc5ebd2517d85e358aa686aaadd64c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: eGFqZH-_4KQJE4rz2FPCSaBdU5VE32W2xzKzAGxi8kQh2jIQRAZxoA==
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 06 05 6f 49 44 41 54 78 01 ec fd 09 78 65 d9 59 1e 8c 7e eb 9c a3 92 aa 4a 73 49 a5 ae b2 aa 5a b4 55 c6 6e d9 0d 8e 80 e0 81 58 90 0b c4 c0 cf f0 27 e5 c4 0e 26 98 00 81 10 92 90 e4 0f dc cb 7d 2e f2 13 6e 62 08 61 0a 43 70 f2 c7 80 b1 21 d6 13 ec 60 87 39 46 10 c0 10 47 d8 6e a3 b6 e9 96 cb ea 6a 51 d5 aa a3 d2 58 83 86 73 ce fa d7 bb be f5 ed fd ed 75 f6 51 a9 bb ab ed ae ee f5 56 ab f7 b4 f6 9a f6 de 67 ad ef 5d df 60 28 21 21 21 e1 2e c0 5a 6b ca ce bf f5 ad 6f 35 3f f0 03 3f 60 8d 31 92 8e b0 8f ad 86 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaoIDATxxeY~JsIZUnX'&}.nbaCp!`9FGnjQXsuQVg]`(!!!.Zko5??`1
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 19 31 70 94 f1 df 96 38 2a 4e da 03 09 09 09 47 41 22 08 12 12 9e e3 50 0e 87 c4 77 40 76 2d 8e 60 d0 89 24 08 db d2 d5 08 ad 21 20 10 b3 02 ec cb 64 46 42 17 b2 b3 c1 be 60 5e 50 f4 33 00 78 93 82 9e 9e 9c 24 58 7c 84 44 4b 00 a4 c0 8c 23 05 7c 78 c2 e0 55 ba 91 99 0e 38 42 60 82 1d 4c 35 c2 04 0e 1a 04 a2 25 00 52 40 e2 65 43 63 00 a6 02 7a e5 48 1c 5c e9 78 e6 80 8e 69 ee 6d 04 46 d9 3e 16 d7 bc 27 7e 1b 1c 89 91 b2 4f ae e4 76 d7 32 d1 95 d5 46 ec 63 c5 51 42 a4 61 8b 55 b7 96 9b 30 c7 42 53 dc af 5a 58 d8 34 4e 18 76 82 2a ce 43 68 da dc dc f4 02 9c 08 e4 c4 17 72 b8 f3 fd 03 bd 66 db dc b0 d9 3d 2a 71 bf ed 35 15 47 48 f8 73 9b ea de b2 fb 36 37 f3 fc 43 5a dc ef d3 44 f7 c6 75 90 63 e4 03 81 45 da e0 ef df e2 32 74 79 6d 79 a8 fa 22 bd a4 85 70 d4 Data Ascii: 1p8NGA"Pw@v-`$! dFB`^P3x$X\|DK#\|xU8B`L5%R@eCczH\ximF>'~Ov2FcQBaU0BSZX4NvChrf=*q5GHs67CZDucE2tymy"p
2024-04-16 17:44:10 UTC	11977	IN	Data Raw: 5d 5d 06 f6 a2 09 09 09 09 09 77 17 d0 1a d8 f8 d9 9f a3 b5 b7 fe 2b b2 b7 6e 3a 21 9d 57 e8 21 f0 67 ab f4 80 cd fc ea b0 a9 00 8f 6c 7c 2d 58 12 40 d0 f6 8e 07 61 32 a0 7c 0e b0 6f 82 aa 27 15 d8 91 01 65 64 80 30 c1 15 2d 73 87 5d e6 00 f2 3c 28 14 69 54 f1 62 c6 60 9b 2d da fd e8 c7 1c 49 f0 7f d1 8d df fe 5d 7a aa 40 18 c4 10 15 a7 20 dc 9a c8 2f 81 aa 8b 2d 51 a3 2f 3b f6 55 ed ea aa bd 76 fe c3 ef 7a d3 b6 67 06 1c 06 82 b9 de 60 f0 e7 e3 30 e8 49 82 55 13 f8 01 86 e3 3b 30 2e c3 59 e1 d9 d6 18 6b f8 b9 b1 1b 66 81 30 15 bc 0a a7 85 cb 6e f1 a0 31 6e 1a 13 81 60 58 62 d3 42 cc 07 76 77 77 cd c2 c2 94 3f 8f 39 02 b6 b2 98 00 53 45 65 56 00 93 03 23 24 01 b6 a2 45 10 13 03 d0 82 c4 16 a4 41 81 4d 39 c4 77 50 42 42 c2 bd 8d 44 10 24 24 3c 4d 60 20 14 Data Ascii: ]]w+n:!W!gl\|-X@a2\|o'ed0-s]<(iTb`-I]z@ /-Q/;Uvzg`0IU;0.Ykf0n1n`XbBvww?9SEeV#$EAM9wPBBD$$<M`
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: f0 9f d3 7e c3 52 cf d0 18 9d 18 1c a5 46 e5 18 3d b1 7e 9b 6e df da 25 7b d0 f0 66 00 83 a3 a7 e9 35 33 5f 4c ff e7 57 7c 11 9d ad de a2 bf 7a df 49 ba af 7a 93 8e 53 93 4e 9d be 8f 46 c7 5f 4c 27 dc fd dd bd 7d 54 ab 75 79 07 87 d4 55 a3 13 3d c7 a8 c7 09 fd 53 a7 8f d3 3f fb aa cf a3 8f 5d fb 38 6d 0c ad b3 a0 df f2 0e 16 50 71 e6 40 40 8a 04 93 01 5f 75 84 6a 74 d7 7d b8 43 6b 82 13 c3 4a 30 a3 08 1a 14 a2 65 80 10 8f d2 5d 12 0a d1 6d 5b 3b 37 a8 f1 a9 4b 77 ec 7b af c5 10 c6 34 ed a0 2f 5c d3 63 62 1b 19 10 5d f3 f4 45 ad 56 3d 07 ed 01 10 f3 15 73 cb f6 f6 f5 f1 4d db 6e 3c de 26 ef 27 68 d0 fd eb 1f e8 cd f3 80 32 e0 b0 3b 0f 2d 82 3a d1 b5 ba fb 1f a2 19 60 fc 1f 23 ef 87 00 e6 87 63 67 47 b2 45 84 c6 12 cf 1f 2e b8 7f 1e c1 0f 01 82 17 2c 84 3f Data Ascii: ~RF=~n%{f53_LW\|zIzSNF_L'}TuyU=S?]8mPq@@_ujt}CkJ0e]m[;7Kw{4/\cb]EV=sMn<&'h2;-:`#cgGE.,?
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 4f d3 d2 d9 79 a9 5c 50 ae 4e 53 b5 36 43 b9 42 91 02 80 07 00 91 d9 8c 55 6c ec 67 4b 65 ca 57 cb f4 f0 b9 45 7a c9 13 5f 44 e7 1f b9 40 a7 1e 7f 88 ce 7c dd 3c 15 96 f3 26 6a 80 3b 84 12 8c 58 1f 70 df 07 e8 bb e1 26 b4 3c 04 61 44 ca 08 e2 44 19 13 97 3a c1 ff 2b 5f fa a5 94 7d e8 a1 13 8d 77 18 86 7e 08 bd cf 3b 30 69 62 3b ca 28 46 75 a2 77 30 1a 6f 52 0b f0 3c 79 de 15 4a 20 fc b1 24 c2 65 5d 36 d5 87 24 f0 ef c0 e4 0a 42 f6 f7 09 6c 1e fb b3 19 6d 49 08 80 0f 08 49 a1 13 a4 18 c0 91 00 7d 01 ef a5 cc e1 86 d9 b7 4e 20 2d 2c 8d f7 0d 44 85 ac 8f f8 11 04 88 74 bc 72 e5 a2 05 01 ae 68 a3 cb 5c b6 2f 8a a2 08 ec ba 44 54 82 bc d0 8b 1a 48 27 fd 54 52 79 40 25 05 08 52 49 e5 84 e2 47 09 f8 91 03 8c a2 cb f7 08 68 ba 52 3e f7 00 72 f6 56 b5 ab 1d 7c f1 Data Ascii: Oy\PNS6CBUlgKeWEz_D@\|<&j;Xp&<aDD:+_}w~;0ib;(Fuw0oR<yJ $e]6$BlmII}N -,Dtrh\/DTH'TRy@%RIGhR>rV\|
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 21 58 47 f8 20 7b 08 20 a7 7a b5 60 f3 f6 b6 76 20 c1 6c bf 16 dc dd da a2 d3 ac 48 6c 6e dd 51 52 f1 90 4c ea c1 8c 9e 56 bb 0c 12 e8 19 00 03 43 2f 7c 7f a8 6a 07 0c 14 b0 e9 ae eb 66 3b 00 82 46 a3 41 ba 6a 4a 1f 96 34 83 04 ec 01 29 6b 10 2e 35 14 22 09 9a 0c 06 94 a4 a2 41 49 00 02 54 34 28 b9 8a 06 68 17 80 01 83 04 5d 56 aa f2 9d 6c f0 9d 97 bf 79 e9 5b bf e3 eb 7f 39 9b 4b ac 6e 10 37 c2 e3 a9 07 6e 7c 93 42 4c dd 33 71 c7 f9 e7 46 ed e9 64 f0 20 51 c1 8c 8b 67 20 f8 40 05 51 b2 72 3a 49 c9 d6 27 e9 53 82 92 4c 44 87 d8 b8 ef 47 12 95 6a 75 b8 52 44 7c fb a1 7e d1 78 64 c6 51 fd 89 83 2f b2 4d 8f a7 92 1c f7 3c 26 b5 7f 08 50 3a c1 bd 44 6d 25 dd 5f c2 f3 f5 fb 13 1d 16 bb 1e d1 f1 06 0c 4d e8 ff 24 03 25 f1 7a 49 6d df c7 f3 48 04 e0 d4 78 89 56 Data Ascii: !XG { z`v lHlnQRLVC/\|jf;FAjJ4)k.5"AIT4(h]Vly[9Kn7n\|BL3qFd Qg @Qr:I'SLDGjuRD\|~xdQ/M<&P:Dm%_M$%zImHxV
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: e3 8f da e2 64 a6 6d b3 23 ee 20 39 8c 4a 48 3b 48 eb ea e6 c9 72 c7 82 22 c6 46 81 d9 23 51 99 06 95 07 2c 32 60 08 06 ed 6f ba 6c 8b f3 0e f0 4a d1 00 00 3c 2f 8c a7 13 00 18 e8 58 c0 a4 c8 00 33 58 6a 3b 81 e7 b1 09 24 52 60 24 bc 1f 51 03 25 94 30 c4 71 1d 5d 6e 15 15 2a ed 20 1d 4e 81 7b a0 d2 12 86 5d 54 2b a8 50 85 67 fa 5e 58 e5 ef 0f 9e 37 80 01 f0 0d d4 c8 f0 0b a8 a9 8c 46 ca 9d 80 01 d3 bc dc cf 6a 35 5b d7 48 d7 73 7c 03 72 47 01 af 6f 13 b9 c8 01 27 2e b5 20 8a 18 70 b2 e1 b8 07 d6 29 bb 92 d5 2e 72 80 e0 4b 58 e5 3f 6b ab 84 f4 82 62 b1 a8 5d e4 00 96 8e 7f 00 69 8b d7 ae 3d 65 f5 bd 05 9d 9c b6 79 59 d6 93 a2 07 3c e3 ff 90 9e 1a 3b 26 25 29 4c 25 95 4f 32 49 cb 1c de 87 68 5b ea 48 a9 f1 9a c8 ca 2b 47 e8 fd 58 46 c6 92 0f 0e 5c b6 25 06 Data Ascii: dm# 9JH;Hr"F#Q,2`olJ</X3Xj;$R`$Q%0q]n* N{]T+Pg^X7Fj5[Hs\|rGo'. p).rKX?kb]i=eyY<;&%)L%O2Ih[H+GXF\%
2024-04-16 17:44:10 UTC	13491	IN	Data Raw: cb bf 67 ca f9 55 21 bb 1b 7f bc 8d ee 49 01 91 c2 6e 18 75 e4 58 fc 48 17 31 4e 3f 67 7a 3d 44 ff 8a 28 64 e8 f9 39 2e 08 11 33 c3 9c 33 98 cc 01 69 0b cb a6 b3 29 f1 f4 f9 a6 28 f7 07 fd fd b3 97 9b e9 ff 03 0f 36 00 5e 07 d1 90 2f 84 69 34 bf 9a e3 be 95 08 5d 9a 3b 4d 97 5a 08 05 9f b7 d3 ba 2e 8c e5 cb b9 13 f0 40 00 81 42 81 02 5f 64 ec 59 77 4e 8c 74 39 07 d2 43 aa 82 ff 25 bd c7 b6 3a ee 6a 7e c3 ef a8 2e 0b f9 25 86 b8 fd a9 0e 40 57 8d 72 30 0a 66 ec e1 97 ed dd 8e c4 f5 17 ec c1 df 08 48 11 18 0d 7b ac 47 56 81 b9 cc f3 9f d3 ed 0c 40 10 30 30 2f f8 d8 ae b6 4f c0 88 22 2c a8 5d a6 09 c0 fb 76 35 b6 1f d7 d3 bd 29 51 af 30 01 6c 3f bc 6b a9 0d 2c 2c 68 2c 87 35 d1 1a c1 ba ae 1a f6 d0 16 70 99 66 1f 28 c4 a8 87 f1 df 9d 3a 61 0a 6c b0 e0 a0 89 Data Ascii: gU!InuXH1N?gz=D(d9.33i)(6^/i4];MZ.@B_dYwNt9C%:j~.%@Wr0fH{GV@00/O",]v5)Q0l?k,,h,5pf(:al
2024-04-16 17:44:10 UTC	10463	IN	Data Raw: e1 43 79 28 0f e5 ef ad fc b0 30 08 5c aa 2b d0 10 23 8c fb dd b3 ee 0e 7b 00 b4 ad 0a 10 60 06 81 d3 65 2c c5 d4 85 c8 43 2b 71 61 60 0f 40 44 e6 63 3e de 00 01 2b b2 7a a4 2c 84 54 77 60 ee 01 0e 18 63 00 e5 f7 d2 f2 cf 23 3b c1 0b 65 0e 28 02 7d 7b f8 f4 ce bd 42 18 c1 e7 4c 17 70 0c 0a 40 60 f0 65 76 12 9e 1c ef 57 6c 01 a7 21 03 48 25 78 22 c2 3a 26 2a 68 e9 fc 38 5b 40 25 c5 2f 7d c4 e1 01 bb 1c 6f cf 61 00 49 6c bf c5 ea 33 2d 9f 3e b2 3b 67 5b be e9 41 07 53 c0 e8 f7 a9 c7 9c 3d e8 89 47 1e f3 f0 a1 b3 18 3f cf 68 1d 3a 6f c7 c1 50 36 2f 40 3a 8f fd c2 05 5d 07 6c e7 cb aa 09 10 1f 32 af 7a 08 cb b7 3f e7 a9 c7 01 ed dd a2 fd 93 ba dc 56 b5 df 70 93 bc f2 57 e3 c0 f5 5f 24 f5 6e 41 18 f0 3a 6c 5d 0c b9 2d 5b 9a 52 30 aa 25 5b 85 97 f5 53 a3 be cd Data Ascii: Cy(0\+#{`e,C+qa`@Dc>+z,Tw`c#;e(}{BLp@`evWl!H%x":&*h8[@%/}oaIl3->;g[AS=G?h:oP6/@:]l2z?VpW_$nA:l]-[R0%[S
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 23 1e b1 00 d8 0f 9e 7e d4 72 ed 46 a3 ed 30 8c f7 5b c2 00 2e 2f 97 1e 31 fe e3 d1 ac 34 01 3f 94 fe 40 42 0f 10 22 00 23 9f 59 80 57 00 08 c4 d8 2e 83 d0 fd 87 0a 2c 30 f5 9f ea 42 76 80 18 32 70 35 0e a0 fb 63 df 51 36 8b 0a b3 c8 04 70 49 28 81 bf 6c 05 33 fa 2f fc 55 f8 7a 38 f0 9f fa a3 d8 3f 6c f8 3b 15 05 54 3d 00 36 fc 2f d6 c2 f9 ce 1b 87 90 00 e8 03 6c 51 fd 17 d0 0a 20 23 3a b8 5b 6f 9a 01 f0 fc 5f 66 d7 12 0a 90 84 04 b0 e3 e2 5c 0d fd dd 5d 66 38 66 9a 45 a9 4a b5 ec a2 96 00 d2 30 9f 9f 5d 87 a6 d8 32 34 05 4a cd ce 70 ba 7f 16 f6 e1 3d b1 0c 04 6e 3d bc 7c f2 8a 70 81 c7 f1 31 02 4b 00 1a 4e 60 0c ac ad bd 0a b7 47 8f 6b d9 a0 d6 8e 5f 05 77 70 20 0b 47 22 3e d8 04 05 50 f2 3c 8f a9 0b 3b 9d 4e 10 e1 e9 6f ba ba 83 48 ca fb 1c 63 f0 49 2d Data Ascii: #~rF0[./14?@B"#YW.,0Bv2p5cQ6pI(l3/Uz8?l;T=6/lQ #:[o_f\]f8fEJ0]24Jp=n=\|p1KN`Gk_wp G">P<;NoHcI-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.5	50470	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	681	OUT	GET /0jnmtsdzg6p5/7LrypGfM1BdddpRfwGZrze/3a9135c9a49064c815ad7289b052772a/woman-smiling-and-presenting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 120484 Connection: close Date: Tue, 16 Apr 2024 02:54:21 GMT Last-Modified: Thu, 04 Apr 2024 16:00:29 GMT ETag: "a1d906dd351c2b8322a3c977e5323c21" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 0ed062928320c9569a09db8a928795e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: 1pdsrgFjZXO7kjqhEjfnsfkLyMHLZWFgDXL8lkBxe6MCNSFPFqtmOA== Age: 53390
2024-04-16 17:44:10 UTC	15868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 04 03 03 cc f0 f7 c8 ef f5 db e2 e2 db e3 ea df e6 e9 d0 f2 f9 e1 f2 f9 d9 dd df cf de e4 d2 e1 e7 d5 e4 e9 e8 f1 f3 f7 fe ff d8 e7 ed e0 ee f2 33 6c 01 dd e8 ef cb da e1 16 0d 0a c1 c6 ba e3 eb ed f0 fa fe 3b 74 01 be c3 b6 09 0d 0f 43 7b 02 2e 64 01 d0 dd dd ca d7 db 2e 45 01 d5 e0 e0 e9 f6 fa b7 bb ac f5 de d0 bb be b1 c6 c9 bd 4e 82 04 21 17 13 79 37 1c ae b4 9f f4 d7 c8 c4 b5 fa 25 20 20 b0 ba a8 3f 4c 02 9d 03 04 c7 cd c3 91 03 03 b9 03 0d ab 01 08 26 5b 01 b0 ae f5 c4 eb f0 59 8a 0c 29 29 2e c7 d3 d6 94 60 44 c0 ca ca 8b 54 3a ca d1 ca 73 44 28 c3 cf d0 ab af 98 96 8d 78 8c 87 73 b4 c1 b0 9b 94 80 d8 3f 12 81 4a 31 84 02 02 81 Data Ascii: PNGIHDRRcmEPLTE3l;tC{.d.EN!y7% ?L&[Y)).`DT:sD(xs?J1
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 7a 16 23 5a 3f b5 7e 8a 3c 6a 15 12 bb b1 08 e8 0c 47 17 88 d4 47 91 c8 73 67 e6 cb 49 2b 54 02 92 94 43 e9 c3 4f 44 79 44 b9 65 e5 4c ee a8 87 50 e5 7f b2 5e ea 60 cc a8 9d 3f 61 e4 81 bb 56 d1 a5 d8 93 d6 4b 45 09 d4 9a aa da 4a 05 43 b6 54 2a 9f 18 af d4 c6 05 10 74 d2 10 c8 ce 09 74 d2 8c de 4f 83 24 92 d6 8e 54 2a 0f a2 28 29 44 72 db 0f 24 07 21 54 82 8e 8d 2b 88 07 94 33 8f d7 01 47 43 12 dc cb 0d 2e 51 7a 2b 8c 02 45 c0 c8 83 c3 2f 2a d2 85 08 11 48 8e 57 ab c1 38 b9 ee e9 57 1f 7d 9b 5d ee d0 2b 89 7f bd 6f 55 ab e2 bb 84 c8 18 b2 d1 bd 4a 87 4c 01 64 62 40 ce 49 cc 26 91 73 31 60 7f ac 38 1e 21 8f 48 b0 2d 9b 09 02 62 8a dc 06 b5 4e 1a 45 ce e3 3a c3 35 89 a4 41 5a 99 48 69 94 93 29 c3 23 a5 77 96 9f a3 3d d0 25 44 b6 a9 78 35 62 78 18 41 d9 90 Data Ascii: z#Z?~<jGGsgI+TCODyDeLP^`?aVKEJCTttO$T()Dr$!T+3GC.Qz+E/*HW8W}]+oUJLdb@I&s1`8!H-bNE:5AZHi)#w=%Dx5bxA
2024-04-16 17:44:10 UTC	9465	IN	Data Raw: af 9f d5 5b da d9 d4 de 86 6a 98 df 93 2a 11 bb 90 48 15 da 14 3d 1a 6d 48 c5 9c 0c a7 51 32 8b 1c f1 d9 be 92 f1 48 0a 28 82 36 40 ce 17 7f 9c e1 fd 74 5a 55 a6 68 fd fe d8 dc 0c 40 de 32 3b 7b c9 f0 86 d9 3b 6e b9 c5 71 1c 1e be fd 26 01 39 bd cf 27 1c 24 92 5c 10 69 42 a4 4b 22 45 e1 71 ca 88 6c 50 e3 4f 4b 3e c9 af 5c b8 16 20 61 12 20 a1 d0 88 f4 d3 81 8c 59 3f e9 90 05 c8 5f bf d9 b8 64 cb 6a be a3 9b 6d 40 26 91 19 51 43 69 9a 30 c9 6f c3 23 1b 5f 92 34 68 36 d9 59 40 e4 e4 28 44 a6 45 46 4b c0 32 91 34 22 03 48 42 b6 2c 12 87 84 c8 c4 11 05 70 09 64 f5 50 35 05 95 68 dd 0e 64 88 7b 7f c0 d5 d9 cd f9 8e 52 85 63 22 e9 a1 1b 20 35 5d bc 48 7b 88 7b 07 19 1e ef 56 71 93 7c 16 20 59 6e 58 42 36 15 28 56 f1 1a 20 b7 ed 16 8e c0 b8 63 87 b2 44 de 39 9a Data Ascii: [j*H=mHQ2H(6@tZUh@2;{;nq&9'$\iBK"EqlPOK>\ a Y?_djm@&QCi0o#_4h6Y@(DEFK24"HB,pdP5hd{Rc" 5]H{{Vq\| YnXB6(V cD9
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: df ac b7 af ba ea 8b 53 4b 45 71 55 c4 b5 3c a4 2b 5e 48 02 0b 0f 2a e0 2c 16 c0 a5 92 47 fe 07 90 07 0a 4c 16 93 1a 11 79 d4 09 e7 3d 0f bd f0 7a de 21 35 ae 31 68 92 47 32 66 5f 3f 70 b9 61 72 7d 9e 48 21 c9 43 ad c8 18 f4 63 40 96 a3 76 11 49 27 92 1a a4 88 63 f4 4c 6b 1b f6 30 bc eb c1 92 8f a9 88 cc 86 17 a1 0c 1c 21 e2 e5 32 de 72 a9 4d dc 1c 4a 55 7d e4 8e d9 28 dd 2c 62 c7 74 86 e5 af 9f 1d b2 2d 61 a1 f1 dd d1 8a 6c 50 ec d9 5b af 4c de 57 9b 39 6b df be 07 66 f6 dd 74 ec 03 0f dc 39 3e 76 e7 9d 33 33 37 2f 8d 35 fa 75 4c d4 c2 c8 6e 58 1e 56 db 45 92 43 20 8d 47 a6 e6 2f 63 67 e1 0e e6 1f 8e 08 48 3c 10 aa 53 a6 6d 40 02 7a 08 37 16 20 6d ba 6c 75 3f d6 44 9b ac fc 32 be ff cd 8b 7a 67 dd fb c5 49 07 97 42 76 29 72 cb 19 05 65 b1 8a 18 d8 25 24 Data Ascii: SKEqU<+^H*,GLy=z!51hG2f_?par}H!Cc@vI'cLk0!2rMJU}(,bt-alP[LW9kft9>v337/5uLnXVEC G/cgH<Sm@z7 mlu?D2zgIBv)re%$
2024-04-16 17:44:10 UTC	6901	IN	Data Raw: 5c 2f ba 23 1f da d2 01 c8 b5 d9 5e 1c 28 c3 24 0d c9 80 d2 8b 92 29 70 c3 24 89 a4 ea 91 04 f3 df ea d0 00 52 f5 c7 62 d8 e6 33 33 c6 a7 c8 e3 af ce a3 bd b2 4b 83 29 c8 9d 56 4e e4 e1 9c 06 a6 50 ce 3c f5 a1 f0 9e 18 39 a9 5f 21 21 59 8c f4 89 49 49 bd 86 1d dc 65 85 dc 02 c5 a8 41 66 e1 59 ce 28 26 95 52 87 1f 6a 2c 45 ae 10 a9 c0 9d 89 f6 48 1e 31 ba a7 d3 81 34 87 a4 2c 70 c3 1d 59 08 02 8c 56 7d f4 86 a3 c5 6b 46 ec f2 55 e3 4b cd 27 c7 af 6a 52 41 64 f0 98 26 23 72 b2 b6 f3 08 16 7d 86 ab d3 38 6e d7 e0 71 08 ee 38 1b 46 f7 c8 13 53 23 bb 86 86 ce ed 32 f6 6a a0 71 d0 88 c4 29 01 09 ee 2c 99 d1 b0 48 14 c3 cb 35 c8 4d 93 93 b5 99 c8 fc bc bb 54 c6 46 22 09 a0 25 da 24 12 b7 98 71 63 26 c9 b0 cd b7 68 6b 41 8b 62 f9 47 be 59 60 32 42 b6 60 14 8d f2 Data Ascii: \/#^($)p$Rb33K)VNP<9_!!YIIeAfY(&Rj,EH14,pYV}kFUK'jRAd&#r}8nq8FS#2jq),H5MTF"%$qc&hkAbGY`2B`
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 69 63 49 80 9c 6a 53 51 c3 d9 31 6d 01 20 47 f9 0d ba 15 a6 1c 95 8c c4 46 a9 c3 30 df 1e a4 38 80 a4 d4 91 f7 89 74 eb 3b ad d9 f9 cc f6 8c a5 01 f5 b4 41 05 d4 80 27 85 d4 a0 0e fc 20 8a 18 19 20 55 72 f6 2b 4b c8 6d cb fd 42 5d 2f 27 3e 3f 5b 5c a8 c6 a5 f9 0f 5b c6 c7 3f 9e fd 88 51 2e 00 f9 b1 e4 87 f4 a5 e8 25 94 02 a4 b5 0b 49 3b 95 fa b1 c9 33 8c 1e 95 2b b0 f2 d2 28 29 ab 0e 54 2a b5 7f 6c 5d 83 11 dc b6 ba 71 37 48 ec 48 1c 49 50 f2 f0 e2 7c 2e 9b 9f e9 35 2b 6f 1f d9 d8 98 a3 fb 84 45 ad 47 ce 9d 4b 3d d8 f8 5d 2b 6f f9 70 ed fe a3 6d 31 55 c4 c5 7a 1e bf a5 33 5e 5e 28 65 de 5b 9d 37 1c fd 00 b2 3f e4 f0 44 5a e3 e4 4e e3 f1 7b df fb de 8d 5b cf 1c dc b5 d9 fd f3 5d 45 33 ae 93 4d 74 9a ef 76 12 e9 ed e3 1e c6 50 d3 c6 8c 2b 1d bd 05 50 83 09 Data Ascii: icIjSQ1m GF08t;A' Ur+KmB]/'>?[\[?Q.%I;3+()T*l]q7HHIP\|.5+oEGK=]+opm1Uz3^^(e[7?DZN{[]E3MtvP+P
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 49 82 a5 ba ac 58 ca 9b bb 86 2f b8 5a 39 a4 c9 2a 37 c0 53 6b 5d ab a4 67 74 94 40 12 1d 25 83 1d 61 90 5c 4a 46 4b 89 44 30 83 64 6c e2 cd 98 cd ce 9e 8a c5 94 c0 af d7 b3 13 a5 56 a5 52 46 07 17 2a 4e 20 55 cd 53 36 6f 5a 69 19 6c 78 65 01 67 fa 49 e4 b0 c8 79 51 ca 29 89 cc 35 9e 44 14 5b 35 21 d9 58 12 90 0d 4c 76 bd b9 ba ba 1a 5d 5e fa de 17 3e f8 dc ce 80 ca 17 ed 7d f5 c1 f5 8d ad ad 1b db db 37 6f fe e2 d9 a7 bf 22 36 03 38 43 38 79 44 fd 55 68 92 19 be e3 bd 21 6f be 5f d0 f0 69 75 1f e4 c4 57 b7 f4 d0 7b 94 57 27 3f f4 69 b1 e9 37 d7 f1 46 3d 34 26 03 3d f4 94 f2 d0 2d cf 2c cd a8 3f f1 7e 1a cc a4 d3 9a 06 d5 57 97 6b 0a 7a 94 ea 25 6a 7e e2 05 dc 99 04 ee 75 2a b9 38 cf 9e bc 08 64 9a 82 1f 0d 85 99 0b a9 d5 3f a9 d2 47 be ac c2 e3 5a eb 85 Data Ascii: IX/Z97Sk]gt@%a\JFKD0dlVRFN US6oZilxegIyQ)5D[5!XLv]^>}7o"68C8yDUh!o_iuW{W'?i7F=4&=-,?~Wkz%j~u*8d?GZ
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 48 42 99 1e ad 36 9b 61 0c f5 eb 31 d9 d3 f9 e6 e9 44 68 b5 dc b8 f7 1c 50 a2 d3 94 29 6e e4 ca c3 a7 ac 10 96 39 a4 6c f6 4b ba ae 0d ba 8d 3c fc 7e b6 cf 63 3e 24 89 01 2f 3b 08 a5 f7 4f 72 34 06 e4 31 e0 e0 50 4b ce d3 5f 17 21 28 9d 29 f7 6e f8 9a 61 19 91 07 8c 64 76 cf cf 3d 73 ed 93 b6 67 06 d6 da 96 6b 6e a3 91 f7 0a 97 a6 e4 4b 80 a4 4e c2 4f 6d 9e 8a 4b 51 ea 6b 14 89 e1 2e 40 62 ba d9 9d a1 d8 22 d3 a2 88 c3 6d fd 7d 94 e4 23 8d fb 2c c5 5c 8a e9 a0 97 cf 83 9e 40 65 6e 88 2a 5a d6 a3 42 42 c4 bf 21 12 43 af a2 2e e5 91 73 e4 5b 5b 6a 44 f0 fd c7 bb 29 dc 78 f0 47 9a 75 ca 8a 48 95 62 c7 92 a5 99 78 61 f1 92 01 69 9b 6c 9a 3c 32 ae 09 48 2c b6 76 57 c0 9b 6e 94 97 72 73 d1 42 3b 9e a1 7f e4 a5 f1 c2 e5 cb e5 55 74 b1 8a 17 53 12 70 a5 12 12 09 Data Ascii: HB6a1DhP)n9lK<~c>$/;Or41PK_!()nadv=sgknKNOmKQk.@b"m}#,\@en*ZBB!C.s[[jD)xGuHbxail<2H,vWnrsB;UtSp
2024-04-16 17:44:10 UTC	6330	IN	Data Raw: 5a a3 91 80 64 08 31 e9 86 54 ef 81 46 43 d1 ae 10 50 1a 8e f5 92 c7 c4 e2 70 09 a3 2b 88 b4 87 e8 4a a6 b8 6e 71 db f2 6d 45 6e 47 52 02 49 69 7b bb 7d fe 49 fb 1f 7d 5c 77 f7 03 7b 86 fa 87 17 16 b4 2b ea b8 b6 03 d0 b8 35 db 53 50 fc 79 15 f1 91 15 c6 e5 90 74 20 ef bf 6a 8a 51 1b d0 54 29 32 e5 32 c9 11 c1 52 44 f2 6a 12 90 c1 5f 84 6c bd fa a9 2b a0 5d df 1e 75 e5 01 5e e0 e1 90 1c 36 77 bc f7 03 fd 30 80 44 19 90 ce a1 5f 9c 21 fb be fd 55 83 f6 f7 fa 80 62 b3 16 72 49 96 a8 f8 15 b7 8c 4e 2e e7 53 37 59 a4 cb 12 f5 82 3b 37 c8 f2 35 2b 45 46 d4 5e 3e 55 38 be c4 f1 7a 18 e4 fa 9a 17 8b 89 4a 78 bc 55 3c 6a ac 6f 52 3c 42 e4 e4 20 33 5e 91 30 4d e3 d2 d0 e8 35 6e b3 c6 46 09 63 43 c5 c4 08 d6 89 c7 50 81 22 57 3a 38 a3 07 29 74 5d fd 42 52 2e 69 7d Data Ascii: Zd1TFCPp+JnqmEnGRIi{}I}\w{+5SPyt jQT)22RDj_l+]u^6w0D_!UbrIN.S7Y;75+EF^>U8zJxU<joR<B 3^0M5nFcCP"W:8)t]BR.i}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.5	50471	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	671	OUT	GET /0jnmtsdzg6p5/7hPNoVpK42WsofxMBKVelX/99d08eabfa85820f15fcf7c6cc7ed73c/two-people-meeting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 124834 Connection: close Last-Modified: Wed, 20 Mar 2024 18:06:00 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 15:57:12 GMT Cache-Control: max-age=31536000 ETag: "9c4968ff679bac7c9e4cc57772c759db" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4ec656d2dfbb59cd7fab2ac94a540522.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: -RmUGf4kO8y_3XVM_2cxdPCYY34NGTk1XiGnNqZJL-dJYH3z9xakMg== Age: 6419
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 91 00 00 01 ec 08 03 00 00 00 bd a1 06 7b 00 00 03 00 50 4c 54 45 00 00 00 e4 e5 ed 0c 0f 12 e6 e8 f1 e0 e2 ea 0a 0c 0e 0f 13 17 13 16 1b d3 d7 df 15 1a 1f d0 d3 db c4 c2 c5 cd cf d6 db dc e4 1a 1e 23 30 21 1a aa a9 a5 cb cc d2 b2 b1 b0 a6 a5 9e 28 1f 1a c9 c8 cc c2 be bf 20 24 28 c4 c6 ca b4 b4 b5 bb 86 59 36 26 1f b7 b8 ba 20 1a 17 be 8b 60 bd b7 b5 ba bb bf c0 ba ba a0 a0 97 b3 bd c5 c2 90 68 fc ae 65 3e 29 1f ae ad aa bd c0 c4 4f 1c 10 d6 75 2e b6 82 57 e9 cd c4 15 11 0f f2 f6 ff db 7a 31 f8 a3 54 b0 7c 53 ba b3 b1 f2 98 47 51 28 1b a5 6d 46 a1 66 41 1d 14 11 f6 9e 4d ea 8a 39 29 15 10 fb a9 5b 43 19 10 d3 de f5 b7 7f 50 4e 32 23 36 17 10 c2 c8 d0 ad b7 bf 22 2a 35 b2 78 4c ac 71 48 c6 97 70 1b Data Ascii: PNGIHDR{PLTE#0!( $(Y6& `he>)Ou.Wz1T\|SGQ(mFfAM9)[CPN2#6"*5xLqHp
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 0a 36 d7 8e cf 24 32 20 52 ef d3 36 08 c8 0c 60 92 6a 7d 1d 6e 7b 8b ca 7f aa d6 8d 1c 86 72 b4 e6 d6 f3 17 2f c0 e4 4b 96 c8 c1 6e 25 d2 37 63 28 44 31 34 df 6b 3b e2 4c 15 3d c7 ed 95 14 59 5a dc ae a9 df 76 07 7f 20 d9 e9 02 6f 19 46 22 b0 f9 03 cd f9 2a 95 0a 9c f6 ce ce 13 22 f2 c9 f7 20 92 fa 08 64 17 e1 ae 0f 16 e7 96 10 eb 64 73 d0 d1 ca 57 cb 95 c5 d6 42 61 aa 00 22 27 0b 53 e9 78 9c 25 12 02 69 48 f2 4c e2 10 65 c9 2f 61 d3 9b 69 fd 47 13 c4 36 46 64 f4 b2 86 eb 03 42 24 0c ef 5d a3 5b f5 7e 78 2e 64 41 d6 8b 6b 04 a1 b6 d6 e5 62 1e a9 d2 c5 83 8f d0 49 56 b4 74 e1 c1 83 ef be bb f3 d1 47 77 6e 7f 7c e7 c6 fd b9 39 fc 8b a2 cc 6a ec 7c 2a 26 fb 2a 02 47 76 d6 34 ff 43 ea ca bf ef e9 a4 ea 23 2c b2 32 32 0c 58 a4 3b 06 cb b0 fc 82 54 86 2b 99 de Data Ascii: 6$2 R6`j}n{r/Kn%7c(D14k;L=YZv oF"" ddsWBa"'Sx%iHLe/aiG6FdB$][~x.dAkbIVtGwn\|9j\|&*Gv4C#,22X;T+
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 30 66 af 45 95 c6 fd 72 d3 cd 43 b1 cf 15 c8 19 88 94 e4 38 a1 b6 89 b7 61 d2 14 00 c1 23 44 5a 20 21 f2 1d a3 92 fb de 3a 54 a7 6d b8 30 a5 c8 96 5b 70 c0 c7 bc 17 57 2e 1d 57 74 ea 8d ad 0e 32 fc b9 bd ec 30 91 d9 d1 c7 3a 40 c7 5c fa cd 3a 83 71 b8 80 ea 26 d2 e3 bb 04 c8 b5 88 b4 22 a9 44 5a 56 bc 00 67 dd 84 e1 aa d9 ec 81 e6 39 02 03 17 ec 7f 6e 2f f7 f6 76 f7 f5 90 44 c2 a3 dc 75 0d c9 91 43 19 39 3c 4d 58 43 92 5c 88 c4 38 d7 a5 1a c9 d0 85 86 e2 e9 a6 21 39 b9 7d 62 61 02 d7 ec 44 32 2a 7e 8e 96 7d 2c 22 85 47 9e 57 9e c4 64 5b 9b 0c 25 8d 68 05 41 a7 8c 42 a4 4b 90 6b 7d 64 71 0e c1 f6 c2 0d f2 3f 6e 27 11 78 1c 91 ad 8e c8 0d bc b6 41 d2 b8 68 07 a2 be 3a 24 f9 3d d5 3e 9a 48 8f f6 e4 15 f6 ec 2a e9 99 3b 1b d9 d4 8b 52 ce a6 a8 32 bf 16 35 cb Data Ascii: 0fErC8a#DZ !:Tm0[pW.Wt20:@\:q&"DZVg9n/vDuC9<MXC\8!9}baD2~},"GWd[%hABKk}dq?n'xAh:$=>H;R25
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 96 2c da 94 26 37 7a 8c fc f9 85 df 4b 8b 40 67 2c f8 4b 4d 59 61 b8 ab 27 53 93 a3 ee d8 3a 8c d3 ae 2a cb 59 61 30 03 91 60 98 cb f5 f4 0c b6 d7 b7 f0 1e 71 a4 a5 da 88 e4 94 ea 26 11 f9 13 88 bc 5d 0a e9 fa 28 c5 dc 0c 91 bd 65 35 64 47 a3 33 1b 26 85 d1 15 e5 b4 ea f2 5c 0f 8f 34 a1 79 e1 c7 97 0e f9 78 61 c8 fa 39 00 b2 03 20 61 be bd 6b c0 80 54 b6 83 cf b6 e4 86 74 fb bc 22 91 ee b9 83 51 14 02 ca 99 e7 c1 e4 7b af 3e ef b2 37 8b 48 ca 3f 84 65 22 d2 cd 89 44 d2 22 91 9f 78 fd cb cf f4 f5 18 2f 50 ba 46 fa 01 49 a5 44 5a 3a 64 22 79 7a d4 48 03 d2 88 7c 95 4a e3 25 44 8a 49 a5 33 ee b5 95 d7 ec 32 22 37 dd 5c 74 db 50 b4 d0 c6 f3 b0 8c d8 7f ec f8 23 bf f9 d8 bd 36 86 1c 20 17 ad 99 68 44 4e 38 6d d9 9a 35 3b 8c 48 b2 6d 32 65 88 c4 4e d5 31 9b 17 Data Ascii: ,&7zK@g,KMYa'S:*Ya0`q&](e5dG3&\4yxa9 akTt"Q{>7H?e"D"x/PFIDZ:d"yzH\|J%DI32"7\tP#6 hDN8m5;Hm2eN1
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 7a 96 13 91 54 ee ad ea a4 31 c9 8f b0 74 20 13 9d 74 07 fe 24 22 c5 60 50 2f 11 a9 84 82 82 24 78 38 69 d9 01 ae 00 16 eb cd 51 7d 6c e9 35 ea fa ba 55 fd b1 16 35 71 2b ba e4 b5 c1 b0 fe ec 29 75 f5 23 b9 0e a4 94 cc a6 ba b3 65 10 9f 0d 90 90 18 3e aa 2f 8f e7 81 a9 41 32 b4 eb fa a2 0e 33 4c df 2b 7d 84 c5 f7 c8 a6 bc c7 b9 84 50 69 25 76 76 80 12 22 a3 45 af 9d 0c 11 07 48 b3 a2 02 be 2b 99 66 61 31 e4 58 8d c4 9c 48 ff 48 aa fd c7 24 f2 0f cf 75 1c 65 a1 cd 42 48 6e 22 6e 54 d1 c7 91 d4 1e 59 24 29 41 72 95 86 ea 60 09 91 87 6f 00 53 ef 46 8b 44 9e 62 44 5e 71 fc f7 1f fc e0 07 2f 5d 70 eb ac 4b 6f bd fb c1 1f dc b3 62 8c 46 72 f5 84 90 84 c9 0d 63 25 12 74 8e fc ea d2 59 8f 3e f8 c3 ef a3 92 f3 3f bf e7 ca 62 a6 1d 34 d2 8e 65 d4 f1 0c 56 1c 47 11 Data Ascii: zT1t t$"`P/$x8iQ}l5U5q+)u#e>/A23L+}Pi%vv"EH+fa1XHH$ueBHn"nTY$)Ar`oSFDbD^q/]pKobFrc%tY>?b4eVG
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 17 e5 4c 5d 33 74 fc 38 88 94 e7 76 99 c4 9c c8 f7 8b c8 81 2e 92 93 13 93 f7 76 22 a7 60 93 f3 40 d2 1c b7 11 59 5e 86 41 e4 48 e5 24 5f 1d 89 3e 06 f3 85 24 7e db 34 92 af 36 74 16 24 27 af 95 46 ca 3c ae 49 6d 6b 63 e9 03 0d 52 48 69 24 96 ee 8c f6 30 1a c9 cf ee c5 3f 22 d2 c3 6c 49 64 cf ee d3 f8 7c 74 9c 81 0a b4 40 e4 60 27 72 50 00 d2 e6 cd d5 4f e5 21 26 25 90 7c 8c 61 07 11 22 4f 53 1b 09 90 b2 40 24 16 4e 68 67 aa af c3 81 53 36 13 2d e4 26 be 09 db 87 cf fe ec b7 c4 3f 36 88 4e 13 62 2c ec 71 22 53 22 69 4c 86 14 39 72 cb 5c 76 46 1c 2f 37 75 14 94 06 c4 7a c6 08 73 e8 06 53 a7 2a 75 3d 53 d1 12 63 c8 44 64 37 d8 84 41 63 12 91 c4 ec 57 56 cd 45 6f 73 dc 88 24 46 55 61 52 f0 0c 92 09 98 cf 48 32 f1 e5 0b 9e 79 e7 94 af 5f 61 71 13 0f 4c b9 55 Data Ascii: L]3t8v.v"`@Y^AH$_>$~46t$'F<ImkcRHi$0?"lId\|t@`'rPO!&%\|a"OS@$NhgS6-&?6Nb,q"S"iL9r\vF/7uzsS*u=ScDd7AcWVEos$FUaRH2y_aqLU
2024-04-16 17:44:10 UTC	9084	IN	Data Raw: 94 d9 44 d4 f6 6e a4 fa 91 31 51 b7 bb e4 44 16 40 76 15 90 fa 18 29 8c 58 cc 12 b3 00 19 41 9b bc 46 ee 88 7c 4a 24 06 19 40 62 92 28 97 7e 38 3d 6c d3 04 93 1f fd db 53 27 49 bb 51 1b 28 0a 49 cf 75 60 32 d7 24 d3 5b 1e 9a 27 d7 b7 da 78 23 45 cb c4 e4 64 98 dc 33 ff f3 51 88 44 16 b5 f9 88 41 76 e4 6f fc 5e aa 92 73 d6 9a 64 9e b8 4b e3 57 a6 51 ad 38 a4 d1 61 fc 71 37 06 d5 f8 2d e2 f6 eb 85 58 28 a0 54 e0 ae 84 6d 0f dc 55 b5 89 49 4e 07 92 82 24 48 9e 7a 93 75 3a 4a 44 a6 cc 2b f5 17 0c 5f 5c 12 0e 33 94 e7 1e 33 8f 04 49 1a 74 74 52 0f cb 6a 8c 48 96 10 0e d0 9b bd 6c ba e3 bc 35 2b ba 83 e4 93 e3 0c c0 44 a3 6e 13 7a 62 97 4f 4e e0 31 55 34 87 c0 20 89 8c 6a 3e f8 24 9f 8c 49 e5 37 13 cc 1e 7f bb 2c b6 e9 db b1 63 f5 9e 3d 56 07 90 b4 61 7d 7f 9b Data Ascii: Dn1QD@v)XAF\|J$@b(~8=lS'IQ(Iu`2$['x#Ed3QDAvo^sdKWQ8aq7-X(TmUIN$Hzu:JD+_\33IttRjHl5+DnzbON1U4 j>$I7,c=Va}
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: e4 a7 03 48 04 93 cd f7 73 d5 e3 95 53 4f a3 5f de 3e 7f fb f6 9b 79 09 2b 40 92 6c 73 c0 24 54 6e 3f 71 6e b7 4b 4f 7b cc 3e ab 3e 1e 3c 52 63 69 9a b4 7a c7 06 81 a8 81 41 f4 de f7 5e 7d 79 ef 8f 58 a2 c2 81 fd 19 73 dc c8 5e f6 38 93 7b 53 b6 b3 00 6a 93 e4 8f 51 f2 29 39 64 77 37 48 e7 b1 08 d8 e0 e8 3c 5a ad 47 9d c7 61 ae e1 49 dc cd 28 f1 c8 2d c8 a3 b6 d1 27 22 ed 7e cb 7c 3c 32 13 49 3d 72 76 cb ce a9 33 6f f9 f2 ed 5b 4e 1c 7d 08 22 d3 8e 16 f1 c6 90 aa 47 6a ee 4f b5 fe e8 44 4a ff b6 47 82 6d 07 98 ab 9f ac 65 0e 17 5f 7e e3 c6 c7 8f e5 c2 8f ad d4 eb 3f b0 43 e7 df 1c 3d b4 e9 e9 a7 49 5e 7f be 6c 4d 43 87 02 46 bf dd 5d ea 47 56 53 6c 6e 55 e5 4c 46 74 06 90 15 46 c3 23 d5 66 95 c3 77 b7 c2 35 c9 b4 5f 92 12 1b bd 6d ef 12 f6 ee 08 20 95 e4 Data Ascii: HsSO_>y+@ls$Tn?qnKO{>><RcizA^}yXs^8{SjQ)9dw7H<ZGaI(-'"~\|<2I=rv3o[N}"GjODJGme_~?C=I^lMCF]GVSlnULFtF#fw5_m
2024-04-16 17:44:10 UTC	1062	IN	Data Raw: 81 a4 a7 db 2a 92 fb 9c 06 1d 5e 6a 2f 13 f9 1c 44 66 1c cd 25 a9 48 02 a3 64 20 52 22 4f fd 37 de 96 b4 bc 87 1a d0 ea db 86 e4 43 87 97 1f 4e 68 91 a9 40 32 80 74 26 85 59 81 a4 ed 32 4b c4 67 ec 10 a9 b0 8d 44 af 30 e5 d4 3b 46 36 6f 0a 1e 39 10 40 12 b5 11 50 5e ad d7 a8 49 3a 7d 3a e5 17 14 44 0a c8 89 c8 ab f5 ae 78 eb a9 75 76 49 ee 29 a5 c6 fb 32 92 32 4e 6c b0 53 77 22 c9 6a 54 77 54 57 0d 5c 0a 49 94 b2 1b c6 97 b3 44 91 3c 72 71 cf 88 9c bc 6b 5c 44 aa fc 73 c5 a4 82 36 de c8 63 81 f6 ac 1e 43 f8 ac 51 f9 49 48 fe fc d2 4b 06 24 4a 44 46 b2 ed 1e 59 5e 83 1c 14 9d 48 76 7b 0f 91 45 97 8d f5 bf ec 40 a4 a9 98 4f 11 c5 4a 3e a4 46 bf f8 44 99 c8 e8 d8 f1 5e bf 32 90 45 46 83 c4 23 22 5c 3b 88 a1 2b 84 25 38 f6 cd 69 b8 38 f3 38 48 24 0d 49 27 92 Data Ascii: *^j/Df%Hd R"O7CNh@2t&Y2KgD0;F6o9@P^I:}:DxuvI)22NlSw"jTwTW\ID<rqk\Ds6cCQIHK$JDFY^Hv{E@OJ>FD^2EF#"\;+%8i88H$I'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.5	50473	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	623	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=2&ClientTime=1713289446378&PageStart=1713289442223&PrevBundleTime=1713289445873&LastActivity=400&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:10 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:10 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.5	50474	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	809	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: sBB+mTT3OxKfiYj5vmMhPw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:10 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:10 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.5	50476	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	668	OUT	GET /0jnmtsdzg6p5/Dc0SziTJ1rmxyMSHdHWNP/c0da4fc6ab91424027973b8f9a557a81/woman-presenting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 146865 Connection: close Last-Modified: Wed, 20 Mar 2024 18:02:04 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 16:08:44 GMT Cache-Control: max-age=31536000 ETag: "f779f8de4a8bb30625908b57933bb22c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90ac509e6263ee9fa7bb3f1ed1f46118.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: gMl6RG-JjKPiyMDBZDrPFVInYoYGFXtEum6F-t25o3lpuCdq0DX0ZQ== Age: 5727
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 6f 67 5c 6b 64 5a 72 69 5f 68 61 57 12 12 12 18 17 17 64 5c 52 60 5a 50 65 5e 55 1e 1c 19 5e 57 4d 50 43 38 46 3b 31 54 4c 43 4b 3f 34 36 30 28 54 48 3d 76 6b 60 5b 54 4b 42 37 2d 58 50 47 c7 c7 ca cb cc cf 6f 64 5a a1 9b 94 64 59 4e 4f 49 41 3d 32 28 69 5e 53 6c 61 57 4d 46 3d 79 6f 64 9e 97 8f a5 9f 99 48 43 3c 90 85 7a 30 2b 25 25 20 1c 5a 4d 42 c3 c3 c6 a8 a4 9f 8c 81 75 5e 52 47 44 3f 38 3a 35 2e bf bf c2 9a 93 8b 73 6d 63 63 55 49 93 89 7f d0 d1 d3 fb bc b0 fa c1 b8 db b6 9b e1 e3 e3 b6 b7 bb b3 b3 b6 e8 e9 e9 81 78 6d 3f 3b 34 2a 26 21 98 8e 84 78 68 58 dd ba a1 72 63 52 88 7c 6f 5b 48 37 ae a9 a1 69 5b 4c b3 ae a6 aa aa ac 1f Data Ascii: PNGIHDRRcmEPLTEog\kdZri_haWd\R`ZPe^U^WMPC8F;1TLCK?460(TH=vk`[TKB7-XPGodZdYNOIA=2(i^SlaWMF=yodHC<z0+%% ZMBu^RGD?8:5.smccUIxm?;4*&!xhXrcR\|o[H7i[L
2024-04-16 17:44:10 UTC	10463	IN	Data Raw: a7 aa b8 bf 22 f1 74 80 24 9a 9a 37 95 81 f8 b7 be 89 20 9b 1a 12 44 32 f5 73 d7 b5 1b bb 97 58 fa 58 15 1b 9f 5d a7 23 18 65 af 2f c3 48 cb fc 54 1f aa dc a8 52 e5 dc 02 37 b9 74 e1 49 51 9f 0d 86 24 bb d9 8c 35 9b d6 1a b2 86 4e c4 70 8f 0a 3e 32 69 1d c8 d8 01 78 ca 08 e2 f5 e3 1b 74 9c 3a b2 35 9d e9 b0 2f 58 05 be a5 a0 d7 72 43 b0 66 0d a9 47 8e 2b 20 e3 2c 20 2b 9f ee bf 22 ae e5 a5 b2 dd 8c a6 78 4f 39 5c 7d f3 79 dc 59 01 ce c8 c5 b6 9d 8c f4 51 8d 06 40 3e f0 ff bd 91 ce e6 7b cc e3 6a 50 1f e5 9c 62 1e e9 ea e8 0d 8e 9b cb 94 16 2a bd cd 88 c5 56 c6 c1 89 f5 59 79 9a 04 ce dc 18 c8 d2 90 13 bd 02 71 3a 63 b6 6b 00 dc d8 96 bd af 60 26 e5 4b d9 6b 7c 38 50 88 24 54 28 4f 15 d7 04 f2 36 10 79 f5 0d bf ff f1 d9 57 5f 91 47 13 79 78 68 53 4d 20 e3 Data Ascii: "t$7 D2sXX]#e/HTR7tIQ$5Np>2ixt:5/XrCfG+ , +"xO9\}yYQ@>{jPb*VYyq:ck`&Kk\|8P$T(O6yW_GyxhSM
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 10 23 6b cc 4c d9 70 3d 6d 65 7f 80 9f 09 b5 5f 19 53 9c a0 09 fc 42 48 a6 ca f5 65 a0 ed 36 7a 33 7d 78 2b a5 ec a2 96 cf 84 e3 7c 1f f6 7a 63 63 55 e3 d8 cd 62 a7 db 1e b7 2c ce 5e 45 e2 a4 c2 24 a4 d7 53 aa ca c2 96 f9 e1 b5 d9 71 bc ed 31 e7 91 42 f0 56 04 2e 72 93 cd 11 b3 ba b6 38 64 2a 0f 94 22 0b 92 37 33 fb 41 53 e3 52 da 83 8d bb bf bd 88 3c 2e 8a 4b 0f ab e2 4a e9 fc 59 13 99 c5 b2 fd 47 ec dd 06 15 09 22 ef 7e fd fc 9f 34 7c f8 b3 7c c8 4f d0 96 ef b3 e6 46 4a bc 10 6c 88 3c 2a 27 f2 99 67 44 e4 63 8f 63 03 90 32 da dd 50 9b 07 ac a2 74 d9 89 b5 75 4b 28 d4 49 1e 64 e1 d8 65 d4 ce a5 dd 4c 0b b5 24 81 dc d9 39 21 1b cd c3 89 13 27 26 13 7c 5b 53 a6 26 23 09 21 6c 95 76 25 8a 99 ea 20 1e 67 11 2f cd 7a 80 23 0d 61 cd 66 a2 62 f9 dd aa 86 4c ba Data Ascii: #kLp=me_SBHe6z3}x+\|zccUb,^E$Sq1BV.r8d"73ASR<.KJYG"~4\|\|OFJl<'gDcc2PtuK(IdeL$9!'&\|[S&#!lv% g/z#afbL
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 38 bd 95 44 ee b6 23 e6 43 58 b3 40 20 45 24 1a 57 5d 22 90 0d 77 71 d3 2f d1 e8 a1 f7 b2 d1 08 f4 c6 85 16 5d 25 3f 56 c9 e7 74 18 a9 c2 f2 9d 5e 2b 44 f2 3f 3b f3 a0 bd 04 e5 79 63 89 bf ff eb 9f c6 e3 eb e4 53 58 3a 95 29 2e 6d c6 32 8b 39 42 2f b9 a0 eb f8 63 90 4c 2d ba b5 62 96 9b b7 1a cd fd b4 0f 8d 52 58 92 48 85 d9 05 90 b2 2e 20 2b 10 46 50 b7 0d e3 ec ee 56 6b 7b 73 1e 57 2b e4 3c 3e d4 0f 87 fd 38 13 6f a7 05 e4 1b f7 ef 13 48 d9 fd 47 5d fd 2b 14 dc 58 2e 45 23 c4 d0 78 42 21 1b 38 f9 ac 27 11 09 c0 32 b3 0d f3 92 2e 15 9f 49 2c c9 9c 71 43 be 19 9d de f4 f9 d2 44 00 99 4b 6f ac 8a 7d 26 17 e8 b2 ae 62 42 e9 f3 c9 da 18 16 1b e0 42 8f 5d 9b a7 c3 26 89 8b 36 82 c7 3e 08 8b b1 25 ca 39 90 77 8b 02 99 3c 72 23 71 12 79 d5 44 5e a5 46 5e 67 1b Data Ascii: 8D#CX@ E$W]"wq/]%?Vt^+D?;ycSX:).m29B/cL-bRXH. +FPVk{sW+<>8oHG]+X.E#xB!8'2.I,qCDKo}&bBB]&6>%9w<r#qyD^F^g
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: d3 9e 11 48 12 49 4f f3 b6 5f 92 d7 84 07 e6 5f 3b 44 f1 30 fc b3 4a 6c a6 5f 25 74 65 ab ba 8f 2f 9c ed 54 55 2e b1 b3 a3 59 15 78 2d b9 c0 8c 08 41 bd 16 c6 89 69 54 a7 41 58 0d c4 02 7b b0 29 e7 14 9d 17 30 3a a7 6c 42 bc ea c6 9e fa 41 26 09 24 89 54 33 12 c1 1a 12 8f a7 60 cc 38 80 9c c2 e1 1c 28 6d d5 d2 22 b7 35 20 35 f4 4c 44 7a 65 1c e7 1c 46 a7 51 1f 7c 0c 9a bd 00 3a ec 31 bb 76 47 00 39 24 20 db f2 fc 5a 34 ea 24 12 85 26 8f 14 42 e1 97 7e d6 23 51 17 e4 c5 a7 50 42 64 b7 99 f4 c6 cd f5 04 32 1b 6c ea e6 3b 81 f4 c7 ac cc 98 3d 26 22 6d 10 1a 26 42 f3 a9 a5 ce 15 8f 94 a8 24 8f 81 64 8c 17 d7 82 66 68 42 0e 23 c7 b6 c5 3a 01 e4 99 c7 1f df d1 c0 75 90 33 66 d9 78 ad 04 f6 98 79 db cf 7c 32 0b 1a 29 ba 9a cc 2e f3 e7 22 b2 91 36 4a e4 f4 13 90 Data Ascii: HIO__;D0Jl_%te/TU.Yx-AiTAX{)0:lBA&$T3`8(m"5 5LDzeFQ\|:1vG9$ Z4$&B~#QPBd2l;=&"m&B$dfhB#:u3fxy\|2)."6J
2024-04-16 17:44:10 UTC	4985	IN	Data Raw: 52 8a 36 2a d4 06 91 04 92 a1 06 89 64 9c fd d8 c6 8d 8a c7 d5 1c 98 c5 58 a2 42 88 4c b9 e2 50 09 74 a8 d9 6e 16 93 4d 51 40 52 2e 87 86 24 d1 b8 e6 ad 5e 02 51 5d e7 18 24 a3 a0 4b 8d 22 e9 1b 04 c9 ea 0d fb 2a 5f a7 fc 3f 88 a2 f3 15 97 bf 02 74 ba de 68 d9 b6 4b 21 9e e2 d6 8d a4 54 24 77 01 f4 dc a1 58 73 ee bc f6 bb 3b 64 97 0a 71 ac 04 f2 57 00 52 44 32 91 ff 17 83 9d 99 d0 bc 91 4c 01 7a ce d0 e0 2f 4e fa 9a 3b 62 81 74 16 ca ec d4 f0 f0 08 8c 6b cf c0 71 c4 36 91 60 61 37 b2 91 68 51 b4 82 a9 b1 fc 14 32 e7 9a 96 2b 58 16 07 02 47 3d 6b 75 2f d2 e4 88 74 ac 20 2c 6d 10 82 90 18 3a 32 62 f7 98 d0 c0 3a da 36 ec c0 38 2c f6 88 1d d2 d1 2b ee 1b 31 ed 22 be 3c 3e 35 55 db 11 1f ec eb 6b 6a 42 f4 c2 d5 54 ed e1 ce c6 b6 dc c0 80 99 e1 62 8a e3 b9 d4 Data Ascii: R6dXBLPtnMQ@R.$^Q]$K"_?thK!T$wXs;dqWRD2Lz/N;btkq6`a7hQ2+XG=ku/t ,m:2b:68,+1"<>5UkjBTb
2024-04-16 17:44:10 UTC	1514	IN	Data Raw: 4d a9 40 11 4e 6f b9 e2 e2 f8 7e 89 b3 69 b3 55 f9 9d 3d 95 a2 21 a5 5e 73 4e 43 c2 8d fc 11 1c c9 bb b0 23 e9 77 87 7e 72 e7 e6 cd bf 73 f2 3e cb 7f f1 fc 8c c4 cf 8a aa 97 c1 a3 89 b0 c3 d6 ef 49 92 42 f4 32 ea 55 91 a4 09 b6 10 8d 04 c6 d9 98 ad 23 e5 88 e5 cd 9b 6a c7 8c a0 e1 ad d2 ff 46 80 8b 20 aa 21 59 fd d0 7a 34 a2 85 77 a1 37 17 46 d8 2c 4c 14 62 30 ba 98 e6 d6 23 7e d3 0a ea 51 6f f4 05 dd 8c 2c 00 d6 21 e5 8f 86 10 68 67 3c 43 fa 5a 65 9f 2d c4 de 45 a4 96 b2 51 d3 d4 8b 00 a5 06 b9 1d 2b 12 49 15 72 76 2a 96 1e 1f 9f 3a bd 2d 15 19 0c f7 b7 e3 90 3a e5 47 62 9f 4a d3 e1 7c dc 6b 6f db 96 3e bc 8e f6 7c 7b 13 90 24 90 58 a8 0a ab dd d9 d7 3b 7c 89 c4 35 e0 4a 86 10 71 aa d2 e6 cd 77 1d 3b ba ea d6 8f dd 06 2f d2 b7 72 ae a8 c8 59 40 ca 36 fd Data Ascii: M@No~iU=!^sNC#w~rs>IB2U#jF !Yz4w7F,Lb0#~Qo,!hg<CZe-EQ+Irv*:-:GbJ\|ko>\|{$X;\|5Jqw;/rY@6
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: a0 27 b3 1b 61 36 5a 2d b8 90 17 f3 8a 8d ed fb 9a 40 be b7 58 ed e6 7e 96 8a 17 f9 95 c7 1f 3b 7a 93 03 64 f3 83 75 0f 3f 5c 37 1b 48 f9 43 a2 21 b9 4f e4 96 d5 e0 51 4a 29 2a 51 c8 a7 0b a5 f4 72 13 49 52 a9 32 85 08 9a 91 27 27 91 94 77 42 de 7b db 4d b0 d4 e0 13 51 15 70 74 78 bc 6c de d5 33 bd 40 48 05 30 8a 2b 97 3a 79 ad 10 d9 77 82 d7 8a 8d f5 f2 4d 17 cf 32 a3 e7 7f 20 42 8b 0d 21 90 d2 52 5c ae 65 2b 26 65 f3 b4 a3 1c 9d 3b c2 1a e6 23 45 04 c8 a7 9f 46 e2 07 38 8a dc ba e0 c7 4f fd 4f 5d 3e 91 68 71 7f 0c 2b 6b 6d 6e 9e f0 22 24 59 e6 69 99 42 22 11 75 ec 0e ac aa bd 7b c3 43 83 4f e0 24 ae c1 33 6b eb 3d 3e 2a 97 65 1a 0a d4 0c 84 42 46 b1 65 d9 67 4f ec d8 8b 58 a3 fb 81 6c 21 48 c5 17 34 fc 1a 5a 29 c6 7c 0c 98 39 94 1d 64 8d 06 c5 98 7a 96 Data Ascii: 'a6Z-@X~;zdu?\7HC!OQJ)QrIR2''wB{MQptxl3@H0+:ywM2 B!R\e+&e;#EF8OO]>hq+kmn"$YiB"u{CO$3k=>eBFegOXl!H4Z)\|9dz
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: f4 2a 72 e5 eb 00 24 71 a4 18 3c 1a 44 9a 90 38 54 27 49 06 22 15 8e fb f7 bf fe 4d ef 7d 39 81 dc 5a d3 72 c3 ea 8d de 49 21 cb 17 cb 1d bc 32 95 f2 82 c7 e8 a5 13 9f 55 59 6e b0 95 e8 ef 47 b3 93 ae 69 01 8e 97 2f ab 54 b6 f6 64 f0 8c 2b 23 94 3f fc fe 2e a8 c1 04 2a 7d 79 41 e4 08 be b5 1d fb 88 13 4d ae ea 02 2c b7 db 31 10 b3 43 75 72 d0 2e a2 37 b7 17 5a 11 41 ef a6 3d ed 0d 22 9a 89 9f 91 09 05 8a c3 eb 69 24 65 02 5c 77 8d cf e0 90 07 86 53 de 6c 7c 04 2e 0f 42 3b f3 f0 b3 bd a9 2a 57 0e 2b e7 0e 27 2c ed 68 d3 6e 43 03 83 55 d7 87 b0 49 bb 0f e1 1e 8b 25 8a 60 51 55 ce 81 75 87 23 89 61 bf 8a 8d d7 d3 1a db a8 1d 15 92 40 f4 17 b3 09 87 02 d2 37 60 de 5b 95 45 ad ae 3f 88 5f 8a 72 5d 26 10 8b 09 b7 0f e7 d9 01 93 09 cb c1 ba 06 53 56 ef ed 46 57 Data Ascii: r$q<D8T'I"M}9ZrI!2UYnGi/Td+#?.}yAM,1Cur.7ZA="i$e\wSl\|.B;*W+',hnCUI%`QUu#a@7`[E?_r]&SVFW
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 44 a2 5c 57 02 a9 6c 36 35 24 dc 6c 29 1c e2 21 81 bc ef ce bb d6 5d 82 94 97 2c 79 f8 e9 d7 8e 14 4c f6 2f be b9 01 e4 76 a9 21 af e2 2f e2 bf 10 c8 03 6f bc fb c1 4f 3f 80 7a a4 9c f8 f4 e9 95 e5 18 9e 4f b5 68 e1 50 81 f0 8b 03 c7 50 72 8e 52 9f 6e 8b 0d e5 69 e1 de 32 28 cb b6 b7 8d 20 87 4e 8d d1 58 ef 66 97 35 56 d3 78 77 41 d5 89 82 f3 c1 49 50 18 d4 c9 b0 52 3c e2 b0 50 0c f0 a9 9d 0e 90 5d eb 0f b5 da 02 95 f8 a6 35 0d 20 5d 8e 60 ff 44 33 4a c7 69 a8 b9 e9 66 13 4f 90 f5 d5 08 36 56 e1 be 89 40 8a 45 ee aa 24 ed 28 68 84 1b 83 f7 f8 18 a1 72 60 0b b5 ea 09 fa 73 65 83 d1 94 d5 3a 46 d7 a8 da 53 3f 11 eb 8f 5a 96 2c 3a b6 64 b6 6b 1b 24 b7 26 1e cd d5 c4 86 82 d6 8b 1e 31 e7 34 d3 b0 cd be ae e3 d2 86 8a ef 1f db 2c 80 7c 71 c3 f3 62 5e f1 a3 74 Data Ascii: D\Wl65$l)!],yL/v!/oO?zOhPPrRni2( NXf5VxwAIPR<P]5 ]`D3JifO6V@E$(hr`se:FS?Z,:dk$&14,\|qb^t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.5	50478	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	672	OUT	GET /0jnmtsdzg6p5/7h7Qts9Xjqh2gfBMqrxMBn/ee86b2d2bcb3bf0d93a8f3d2e6037e81/woman-holding-a-pen.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 110884 Connection: close Date: Mon, 15 Apr 2024 17:52:08 GMT Last-Modified: Wed, 20 Mar 2024 18:10:14 GMT ETag: "70a935ae1b5a8ab4cb532d72f6a6af56" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 fdcbbd5c4c7c5e8b036965d289e584e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: 0No38s2vSekuPZMJwozKPXX9IGN4zLC-Zx4J1dt2qMgtlDWz2x4_xw== Age: 85923
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 ee ef f2 19 18 1a 17 15 16 12 11 12 1b 1a 1f 1f 1f 22 5f 42 2b 58 3e 29 72 56 3a 63 46 2d 5b 40 2c d6 e1 e9 28 1f 1b 1f 1d 1a 6a 4e 31 ce db e2 d1 de e5 6e 51 36 24 23 23 c6 d3 dc 76 5b 3d 7c 5f 40 c9 d7 e0 f8 f8 f8 c2 d0 d9 66 49 31 26 1b 17 53 3a 28 66 4b 2c db e5 ec 20 21 28 bd cd d7 e8 ed f3 4d 36 26 e1 e9 ef 2f 21 1b f5 f3 ef e9 ea ed 28 27 2a 20 18 15 32 25 20 e3 e6 e9 50 43 3c bc c9 d3 f2 f3 f5 47 31 23 72 4f 30 28 2e 3f 7d 5a 3a b7 c8 d3 db df dd 77 55 36 20 24 30 ad ba c4 23 29 38 39 29 20 ac be cb 4a 3d 37 b2 c0 cb aa b4 be a4 af ba dc ca bb 95 84 78 e1 e2 e4 8b 71 55 5e 46 35 a1 94 8a 9f aa b5 b2 c4 cf 80 63 47 9a 8d 82 9a Data Ascii: PNGIHDRRcmEPLTE"_B+X>)rV:cF-[@,(jN1nQ6$##v[=\|_@fI1&S:(fK, !(M6&/!('* 2% PC<G1#rO0(.?}Z:wU6 $0#)89) J=7xqU^F5cG
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 2d b0 98 af 38 9b 0f f6 09 01 c9 11 6a 43 9a 00 8b 02 24 8e 2b 4d 0d 91 f4 b8 94 5d a2 80 b4 a6 66 7c a9 e1 d0 de 01 9c 25 d5 52 df d2 8f 07 1a 59 5c dc 44 c6 a6 b8 be 7e 14 d7 81 d4 d7 17 e3 7b 55 53 11 fe ab 6f 80 4c 52 84 52 37 ed ce 06 8d 69 92 d5 85 22 51 43 ad aa b2 8e 83 c7 11 69 23 01 bd b0 ab 11 81 84 c9 1e 6b da 80 d3 34 b2 30 f0 33 15 db 16 2b e1 94 6d 72 f6 39 d1 80 42 e2 c9 5c 65 bb 90 38 19 32 ec 69 b6 f0 86 6c 16 c8 31 b4 c5 3b 00 a4 25 f2 63 0d e4 93 b4 c1 0b 40 b6 41 21 db 86 a0 90 eb 02 a3 e2 a1 8c 0d 4e 84 45 2d 90 5e 1f f3 d5 ee 05 16 48 85 a3 cc 56 30 91 17 9b 8c 9d af cf 2e 2d 58 ab 14 12 40 c2 1c 7c 7a e1 85 f6 e8 0a 3a 8a 4f 4a c8 72 f0 18 6e 43 5e cb 0a 69 83 4d 76 ea 80 04 8f 7a 63 76 c9 c7 4f 85 81 6c 3b d6 d0 83 41 9f a5 47 ea Data Ascii: -8jC$+M]f\|%RY\D~{USoLRR7i"QCi#k403+mr9B\e82il1;%c@A!NE-^HV0.-X@\|z:OJrnC^iMvzcvOl;AG
2024-04-16 17:44:10 UTC	12288	IN	Data Raw: 5e 3f fb 04 c6 a1 ee a1 56 24 1d 80 0d 08 3a 18 c9 a6 e0 59 b2 de 1b 33 77 12 29 4c 6e 82 15 00 48 41 92 41 a4 1d b2 82 47 0e 0c b3 24 75 35 fc 1c 88 14 20 7b 52 d1 6e 91 29 8b 4b a8 fa 10 48 e2 28 18 05 0a 99 0f 20 27 4f dc 80 e6 39 3b 4b 1e b9 31 4b 81 44 39 07 44 2a 98 a8 20 d1 4e c3 54 31 91 25 01 48 1c 2d be 25 50 c8 a3 3a 0a 1b 4f 73 7c ae 01 72 a1 27 d2 df d4 c7 b8 cb 8e 03 49 23 8f b4 20 82 e4 c7 24 ed 8a e4 43 81 44 0c 3a 3f a8 8b 5b 20 a1 91 58 38 54 1e 43 8f cd 24 3b 0e e4 3b 63 0a 09 73 40 4e a3 42 3e 1d 64 d9 c5 16 48 6c ea 04 90 a1 42 a6 c0 65 f7 9f a9 fd c9 4f bf fc c3 1f fe e4 05 b4 60 2d 4d ff 3c ce 6d 69 58 b3 f7 d0 de 17 9a 97 55 36 94 76 9e bc c6 51 91 50 48 e4 d8 ec 35 33 d2 28 eb 35 a5 dd a5 48 54 24 8a a4 2c e2 72 3e 1f 2f 86 96 8e Data Ascii: ^?V$:Y3w)LnHAAG$u5 {Rn)KH( 'O9;K1KD9D* NT1%H-%P:Os\|r'I# $CD:?[ X8TC$;;cs@NB>dHlBeO`-M<miXU6vQPH53(5HT$,r>/
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 8c b2 b5 d8 66 91 b1 41 e2 a7 78 a8 26 69 90 e6 90 06 64 ec 90 8c d9 1a b1 0d 48 73 48 2a b6 c8 e4 69 87 b8 e2 ce 78 86 1d 32 1d c8 e9 9c ed e3 1d 72 47 00 b2 f5 f1 4d 93 6f 79 b3 48 d6 dd 74 03 c8 b6 1f 25 64 cb 2c dd a6 7a f4 c4 91 46 0a 6a 15 84 8a 40 72 01 b6 12 09 ad 10 24 79 cb 4f 12 b0 c9 23 8d 52 79 14 21 f5 74 fb 4c 5a c4 1e 39 ba f0 d0 88 41 89 da f6 63 ae 07 52 44 7f a4 ca 91 47 4a 26 59 45 20 e9 90 33 8f 3b ee 4a 10 79 c8 c8 09 47 ba 19 90 87 8e 75 16 19 8a 25 e5 d2 4e 9d f3 34 26 81 dc b6 2b 90 c4 51 1f 78 fe 4d c8 f6 f9 a3 19 24 a5 7e e8 fc 91 f2 16 49 64 ad 0d 19 8d d1 10 47 6f 90 7b 6a 02 09 22 bf 16 8b f4 8d 1f 73 48 28 38 a4 59 a4 ae 5e 79 f7 9e e1 fb 82 c8 bc 84 43 42 71 0e 99 61 87 a4 0c c8 51 43 23 87 9c 2b 40 36 77 5f bf e0 ea 33 0e Data Ascii: fAx&idHsH*ix2rGMoyHt%d,zFj@r$yO#Ry!tLZ9AcRDGJ&YE 3;JyGu%N4&+QxM$~IdGo{j"sH(8Y^yCBqaQC#+@6w_3
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 90 44 91 16 09 c1 21 bd 3d ee 91 17 2e 4a 3b 3f 05 35 90 b5 c8 e2 b4 bc 3c 85 51 fe 4f c3 1c 79 29 8d 71 eb 81 bd 7c 28 96 71 c7 22 c1 54 36 15 47 98 24 14 f3 0e d9 24 1e 49 1c 69 8f c6 1f 89 23 78 24 8e e4 d1 3b 64 b7 10 59 a6 38 86 05 47 3a e4 68 66 86 4c a4 30 50 66 e0 0b 33 21 f2 8e c7 b1 db 09 e4 18 9c ec 84 ed fa ec 92 a9 3e 95 3c 4f 4e 33 c8 ba ae 93 e4 f1 10 5e e8 42 96 16 e9 0e 53 54 0a 90 59 54 c9 b5 b1 eb 90 98 e3 c5 8b d3 a7 c2 f9 e2 9c 39 00 92 bf c0 d2 b2 ae 1e 2d 65 82 40 2e f4 39 a2 97 99 ca e3 bf af 83 33 2e 87 64 2d f3 ac e0 88 d3 06 01 e4 66 d4 d9 a4 8e c6 48 11 47 7e 29 d3 21 6b 69 93 98 47 b6 b7 7b 94 40 82 c7 79 40 46 e6 03 29 8d c8 21 e3 8f d6 21 07 86 ca f2 b3 20 7a a4 27 12 22 91 e3 fd 00 92 7a e8 58 01 70 a4 49 62 82 8f 65 52 8b Data Ascii: D!=.J;?5<QOy)q\|(q"T6G$$Ii#x$;dY8G:hfL0Pf3!><ON3^BSTYT9-e@.93.d-fHG~)!kiG{@y@F)!! z'"zXpIbeR
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: c1 bc ab 61 63 c0 f7 26 d6 d7 70 4c 40 cd 0a 78 34 8b ef cb 40 f2 e8 e1 e1 2b 80 b1 71 c5 8a c6 99 57 97 bc 5d 08 24 46 ee 3b 01 c8 2d bd d8 0a 15 b2 b5 d2 99 f1 7e af 21 d9 c8 ee 30 90 49 20 af 64 32 24 39 1f af 20 f9 f1 4a 78 47 59 ae 79 c4 82 47 fc 25 cb 39 f3 88 f1 ff 44 52 e9 a3 17 00 2b 03 12 74 0d a4 35 af 44 dd af d1 bf 6a 89 c4 6a 34 40 57 40 56 b3 ee 34 c9 88 2b ec 82 96 c2 25 e5 70 82 47 de 56 ab 04 43 3d 62 b2 2a 0b aa 87 b5 50 b1 49 2d 2f f1 38 b3 d7 f0 ec 25 d0 5c 51 59 04 8c 4e 88 2a 4a 1f cd 9c 28 f8 d0 c1 0c 2d 98 24 72 ae 26 ea 41 a4 65 51 ed d9 bc e6 8e e5 14 8d 96 45 01 09 92 76 dd 5c 1a af c2 01 dd b3 f6 8f ba f6 b5 d7 1f 23 c2 59 25 20 09 6b 26 d7 21 91 e4 62 29 18 1f 9d 0b b2 93 42 3e 6e 8f 9d 57 48 15 9d 19 48 b0 54 5a fc e7 04 35 Data Ascii: ac&pL@x4@+qW]$F;-~!0I d2$9 JxGYyG%9DR+t5Djj4@W@V4+%pGVC=bPI-/8%\QYNJ(-$r&AeQEv\#Y% k&!b)B>nWHHTZ5
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 11 78 84 45 bd b8 ed c4 63 21 b0 83 40 26 8e 14 c4 dd 00 59 5c 76 01 b2 e6 b1 b7 56 c8 8d 5b cb 3e d6 c8 83 d6 a8 79 5c 1f 20 e7 44 62 12 99 25 f2 14 cb d6 29 6d 5c 67 8a 64 a6 db ac b6 42 24 76 ea 2d 17 1e a9 6e f2 6b 30 2e de 72 73 93 70 4c 8b 51 ba aa 8c df 21 af 7d c2 65 8f bc fa ea 65 8f 4e 0c 1f bc cd 3a 9b f5 8d 4f 7f 69 20 1d 40 5a 1f f1 d9 84 90 a3 2a 51 be 39 6f b9 59 14 72 f3 95 a5 8f f3 ee fa c2 09 8d 04 12 20 a9 59 da 13 ba e2 58 da 78 4a 99 11 ab b2 6c ff 91 92 ee 80 4f 00 19 ca 96 04 06 41 fa 5c 8e 4b 34 8f c6 5d e9 bb 89 9c d9 8a e1 ed af 22 d3 83 c2 eb 3a 24 b7 a8 a4 3e 1a 47 5f f4 7f 41 94 47 f7 a4 a9 6d f8 88 a9 d1 11 1e 0d fc 35 0c 6a 82 ed 0b d3 43 82 11 8d 1c f5 0e 9a 08 21 69 0b 33 8f b6 44 32 3f a7 38 9a ca b6 1a 99 55 f1 04 92 1d Data Ascii: xEc!@&Y\vV[>y\ Db%)m\gdB$v-nk0.rspLQ!}eeN:Oi @Z*Q9oYr YXxJlOA\K4]":$>G_AGm5jC!i3D2?8U
2024-04-16 17:44:10 UTC	292	IN	Data Raw: c5 a3 29 92 00 d9 d7 6a 7e 01 47 2f ca 2c be f7 d5 cb d8 a3 01 1f 56 dc 76 1a 04 b9 3c d7 71 f6 4a 20 39 e5 b3 2d 91 e2 71 a8 e4 d6 50 c9 e0 15 24 c1 50 76 50 f6 df 80 6c 5e db ec 95 18 bb 60 c9 e1 c1 f1 4e 9f 4f d6 1e d0 3c 8f 63 6e a9 90 0b 5d 57 38 5d 9f d6 94 52 f1 8d 6c c1 7b b7 b8 bb 35 33 67 48 df 3d 9e b8 61 02 72 58 12 89 46 26 92 c3 67 97 ee a4 31 76 22 4d a5 28 9c 26 7c 5c aa 92 4d 9c b1 03 5c 8b d3 c8 b2 a3 e6 60 59 37 14 71 e2 71 45 a4 fd f6 d6 50 c9 33 7c 6f 24 ff 23 90 7d 01 bb 2d 73 fb bb de af 3c 4d 9f 2f 4e 1e b1 1e dc c8 16 33 e5 b3 86 02 1a c6 84 72 3a 9b e4 2c b3 ca 5e ad d6 d3 93 04 38 0c 61 19 68 67 aa 72 05 24 bf f2 30 c7 8a 49 ce fd 98 35 d2 e5 67 8b 2f 24 fe ad 5e 15 de 6c 08 85 ab d2 ee 20 d2 3c 32 32 f4 95 1a a7 20 65 c3 67 df Data Ascii: )j~G/,Vv<qJ 9-qP$PvPl^`NO<cn]W8]Rl{53gH=arXF&g1v"M(&\|\M\`Y7qqEP3\|o$#}-s<M/N3r:,^8ahgr$0I5g/$^l <22 eg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.5	50479	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	673	OUT	GET /0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:10 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 117430 Connection: close Date: Tue, 16 Apr 2024 02:54:22 GMT Last-Modified: Wed, 20 Mar 2024 18:11:34 GMT ETag: "f82e873eec69dce505d23959a459cd4d" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 90ac509e6263ee9fa7bb3f1ed1f46118.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: BCpRUwkO-fAvdDsBjEpiuc1nKn504HpMm3ziD_ws8qU4pTH30xYHBg== Age: 53389
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 91 00 00 01 ec 08 03 00 00 00 bd a1 06 7b 00 00 03 00 50 4c 54 45 00 00 00 02 01 03 06 04 0c 15 1a 27 c5 d2 db 77 8e a5 1a 20 2f 0c 08 11 86 ab cb 11 0f 17 07 0a 17 09 10 1e 0d 05 05 15 15 1e 7b 93 a9 1d 27 39 c7 af 93 80 a0 bd 89 af d0 1d 1a 20 82 a7 c7 0f 1c 2f 81 7a 6f 0b 16 26 14 23 37 27 27 30 92 79 60 c5 ac 8f a1 b0 97 22 21 28 26 32 45 a9 af 8e 1a 2c 42 c9 b3 98 ae b4 93 ac b8 9f 72 89 a0 1a 14 15 23 1a 15 26 2c 3c cd b8 9d 84 a4 c1 89 7c 68 7d 9b b9 22 3a 55 90 81 6e 81 92 a2 ae 97 7d 16 0a 05 7d 75 6a aa a5 99 b9 a2 86 87 80 73 a8 b4 99 af ad a6 92 a4 8c 84 86 8b 84 8d 97 8e b4 d4 82 77 62 84 71 5a 9b 77 58 2f 39 4c 1f 11 07 b7 a6 8d a8 8d 72 9d a9 8f 15 0e 0e b1 bd a3 b3 b8 98 9c 8e 7b b5 Data Ascii: PNGIHDR{PLTE'w /{'9 /zo&#7''0y`"!(&2E,Br#&,<\|h}":Un}}ujswbqZwX/9Lr{
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: f2 0f 2d 12 5a 00 91 2b ef 22 10 07 81 10 f9 83 ba 81 a0 43 28 00 8b 3a e2 83 86 f8 14 8d fb 71 6e cb 20 f1 7b 09 1e cd 21 d5 a9 cf 26 b1 6d 5e 5b 13 80 41 e4 eb 42 32 78 0c 7a 73 ad 38 2f 14 81 d4 fe 37 bd ca e2 a3 36 dc 7e 7a 5e 5b 37 bd e2 44 d4 66 ed 47 69 92 5a ac 50 e0 11 4a 8f 24 90 65 24 43 89 24 73 6d 12 a9 02 90 66 b9 ad 50 04 8f 0c 20 7b 07 92 11 b4 79 16 3d 72 8e 2e 19 41 5b 01 0d 38 ca 50 c4 64 39 68 d3 22 b7 5b 00 32 df 04 9f b1 69 21 c7 bc 5a df f8 60 be ce 95 90 95 01 8e 7f 07 6f be 6a b5 7e 94 80 aa c8 73 5e ad d4 eb dc 48 88 13 3d eb 0c d8 78 63 49 c0 e2 6a 17 74 c0 8e 56 3b a0 91 63 c8 eb 13 4b 2b 4f ae 3d 72 9d 3e 3a 05 64 4f 4e 4f 9f bc f2 98 9a 79 a3 3b d5 ed 9e ec 63 2e 07 00 34 5a 3f 6e 8f 4d a4 4b 46 6a 8d da 17 76 64 e7 98 d0 43 Data Ascii: -Z+"C(:qn {!&m^[AB2xzs8/76~z^[7DfGiZPJ$e$C$smfP {y=r.A[8Pd9h"[2i!Z`oj~s^H=xcIjtV;cK+O=r>:dONOy;c.4Z?nMKFjvdC
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 4e a9 0c e9 9e 65 eb 85 f8 0e 50 be 5d 81 3b 22 b7 68 44 7d 17 f9 9e 33 b9 73 f5 12 f2 bd 52 7c 4e 93 94 47 6e 85 c7 d8 7c b8 64 76 ab 87 5f 82 98 5f 69 19 9a df 45 a4 90 0c 39 60 e5 92 77 16 92 a1 c2 b1 a9 9a b7 79 24 7c 2b 27 92 ee 52 19 b6 04 91 85 a4 1a fa c0 23 ca c8 ad 95 be 19 b1 63 23 44 ee d7 4e 24 9f b3 a7 e4 40 22 af 47 7a e0 06 48 af 00 a9 fc 93 22 cd 66 d5 ae 5d a5 16 92 ea fd 5c 03 49 99 24 c7 b3 71 b0 8d 0d 24 09 d6 58 a4 21 c9 87 22 52 26 59 9b bf 90 78 3c 63 ab 2e b0 51 4a 38 44 eb 5a 43 7e fd 86 01 49 7a dd 7b f9 c7 4e e4 20 26 f9 63 27 d2 4c 52 d6 08 7b ba ed 0b 7d 2b 9b f0 06 a2 9f 7a 30 44 a2 f4 48 78 64 0a 91 9e 19 db e6 2b 68 ef fb ea b5 03 4f fe f2 9f 7e f0 83 44 d2 48 f3 4c 5b 6f ff 59 7f 14 91 2f 3a 10 44 06 90 7c 71 f1 00 ce 89 Data Ascii: NeP];"hD}3sR\|NGn\|dv__iE9`wy$\|+'R#c#DN$@"GzH"f]\I$q$X!"R&Yx<c.QJ8DZC~Iz{N &c'LR{}+z0DHxd+hO~DHL[oY/:D\|q
2024-04-16 17:44:10 UTC	1514	IN	Data Raw: ba e1 91 5c d2 56 a9 ec 91 03 dd 4e e4 f6 01 3c 12 8b fc ee 77 0d ca a3 7b b2 47 da fe 2f ab 58 25 1e 25 78 14 89 76 fb da 87 37 73 0e e7 eb 46 31 c9 d1 79 8c be 64 11 c8 64 92 3e 3a 4e 23 d7 81 48 0d 90 43 a2 a0 c4 1f 71 c8 60 32 24 ea 32 95 fe a1 c8 64 fd fb 68 09 48 f3 c8 01 88 24 97 c9 03 e4 ba 38 a2 32 4c 52 40 5e e3 75 77 d3 c1 9d d9 24 65 90 42 32 3c 12 05 8c 37 3b 90 99 45 19 24 0f c6 23 d5 50 45 d0 06 48 b7 c8 db 8d c8 cd 40 08 91 9c 2a d7 c1 20 50 19 ca 92 07 6d 3e 18 a8 56 9d af a9 6e 0e 58 d6 1d 91 49 a2 3e 34 d8 b7 10 22 a9 69 4a 89 5d a6 8f 16 34 b2 ac 62 17 69 8d ba 90 22 72 57 e7 8c 03 eb 7e dc 76 d7 37 ee 59 51 0d 92 bb 0d 49 88 9c 35 f5 f2 cb 77 1a 93 50 da f9 2d bd 8e 98 32 97 a6 ff 62 a0 52 a9 36 f2 e1 9f 98 b4 49 35 d2 8c c8 eb 09 db Data Ascii: \VN<w{G/X%%xv7sF1ydd>:N#HCq`2$2dhH$82LR@^uw$eB2<7;E$#PEH@* Pm>VnXI>4"iJ]4bi"rW~v7YQI5wP-2bR6I5
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 59 e3 81 d0 62 77 a7 25 38 3c 08 df d5 b3 56 18 91 0f dd b3 82 31 a2 d5 0e 65 a8 08 e4 e1 30 c9 50 4c d9 70 5d e7 61 3b 3c 92 6e 24 bb 64 c9 a1 01 72 3f bd 48 f2 9a ad e6 91 47 ad fb 38 e6 d0 a1 43 cb d0 24 d6 ed 72 86 62 fd f9 16 b6 91 90 4c 44 a6 8d fc 42 b2 70 fc 4c 31 68 e7 ef 62 b4 dc 78 cc ca 16 69 44 ca 23 41 12 a9 6e 9f 47 6d ae 2c 37 47 93 0e b3 41 6f 37 a5 a8 2d 09 c8 b7 bf 8b 6f 33 91 c2 90 d7 a0 f2 4b 5f e2 02 4b 27 32 cd d7 e8 45 5c 26 93 44 24 34 f2 48 37 4d 24 8f 84 c0 08 da 6a e8 c5 86 23 f5 21 7b 24 8f 34 1e 69 44 1a 93 3c 63 d2 26 96 90 a3 56 96 29 b2 2f d1 4d 12 dc 80 52 a7 66 83 a1 fa 93 b2 49 5f 21 09 aa a9 6e 1a 6a 6a 9e d3 e7 26 09 8a 40 69 2e b9 4f b5 ca 77 89 48 ad fa f9 ea 61 07 92 6d 36 3b d6 89 48 8e 2d fa c6 3d 2b 57 8c bf 1c Data Ascii: Ybw%8<V1e0PLp]a;<n$dr?HG8C$rbLDBpL1hbxiD#AnGm,7GAo7-o3K_K'2E\&D$4H7M$j#!{$4iD<c&V)/MRfI_!njj&@i.OwHam6;H-=+W
2024-04-16 17:44:10 UTC	16384	IN	Data Raw: 79 7a a8 a7 07 93 84 c5 30 c9 7c 74 67 de ef 25 8b e4 ef ed 50 3b 91 bf 73 40 fe f8 97 6e db c7 46 30 98 24 84 6b 68 f9 45 ba e7 a7 26 fa b1 59 c7 26 f9 60 46 92 46 52 51 3b e4 57 15 7c 40 92 5c da 63 ca 68 db 5c 14 44 ba 81 55 1b 92 82 d2 48 6e 15 90 5b 61 d1 31 7b a5 31 24 5a f3 06 87 34 8d 07 b6 23 7e 02 61 92 69 26 d3 e7 9c 20 2c 72 6b 8c 24 4d 24 52 e5 d3 43 cd 20 f2 4f 99 48 14 13 da a0 98 0d 92 3b 52 6d 5d dc 19 4f a7 36 31 92 cc 57 0b 49 80 7c ed 0b 2f 7c e5 2b 5f b9 6a cd 3b 96 6f be 7e ff b2 6f 2e 33 90 22 72 f3 9d 1b 38 e5 32 55 90 09 80 f4 5c 84 4a 7a 40 a8 22 3d 4a cd 65 9b 16 ab c1 58 76 49 f1 92 91 dc 59 03 c8 76 24 fd 6d d7 23 fd 8a 8b 62 8d 9f 6a ee 1d f7 78 b3 d9 e8 1e fb fb 99 5b cf 9c fe fb 83 be ce 6a 8b 3f 26 41 24 fa eb a3 ff fa 81 Data Ascii: yz0\|tg%P;s@nF0$khE&Y&`FFRQ;W\|@\ch\DUHn[a1{1$Z4#~ai& ,rk$M$RC OH;Rm]O61WI\|/\|+_j;o~o.3"r82U\Jz@"=JeXvIYv$m#bjx[j?&A$
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: f1 ae f7 2e 38 69 61 92 66 6e 92 fe a2 35 90 6c f6 f7 68 4a 9c a9 c4 2d b5 4d 73 5a 2a c9 81 ff 3d a1 aa e5 ed f8 b1 50 4d 0e e8 14 a7 64 38 bc 22 d7 cc bb 38 13 33 23 59 4b 48 36 a7 55 83 9e 49 a9 4d 53 7d 78 6c bb 22 92 42 a0 88 1c 4b 5d c7 4b dc b6 8c a4 48 e5 93 d4 f7 91 d2 4f 55 60 8e 51 eb 21 38 03 1f ba f6 0a 4e 25 e6 be 56 49 c8 15 3a 16 8e eb 8a 9b 57 d3 c7 b9 a2 ee d0 2a 48 56 ba 62 3d 3a 8b 80 42 e1 90 2e bb b2 94 5c 44 56 ab c7 80 11 39 68 7f e0 f9 d7 d5 44 e2 1d 77 dc b1 95 66 7c 45 b4 4c b6 96 1c e2 02 42 3d 2f 49 7a 57 d6 67 75 65 95 f7 e6 c3 cf f1 38 cc 77 c4 24 4f e5 85 13 97 0c 68 c1 93 3e 04 7a e6 e1 1b 4e ef 5f c1 a9 6e 88 96 45 a6 93 69 73 d0 2e 30 42 a3 f4 f2 0f a7 b8 8d 0a 91 42 32 3d e5 08 5e ca 3f 39 6a df 42 d0 86 44 7a e1 db 1e Data Ascii: .8iafn5lhJ-MsZ=PMd8"83#YKH6UIMS}xl"BK]KHOU`Q!8N%VI:WHVb=:B.\DV9hDwf\|ELB=/IzWgue8w$Oh>zN_nEis.0BB2=^?9jBDz
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 24 d3 d3 b2 c9 0b e7 e6 26 9f f5 68 0d fa d8 25 7f 27 93 5c 1b fc 1b 8d 6d d5 98 a4 80 9c d9 ff 70 a1 58 da 09 91 86 0f 18 01 12 0d 89 4c 50 2b b3 99 e6 32 91 d1 93 8c 59 40 80 0c 8f 34 91 89 a4 2c 32 07 7e 62 7d 64 98 64 5a 24 98 86 8a 1c 45 6d 03 92 46 89 44 63 0e d6 c4 9f 0c 6d 5e 82 db ab c1 eb 12 e6 05 65 a7 1c 1e 92 ba d1 9f 04 d0 ef 5d ee 0d 89 d0 68 1e ff 64 8f 1c b5 c9 4c 72 8a 48 56 99 17 90 ff bd c9 db 96 c8 85 e2 b5 be ca 20 c1 d1 4f 88 2c 8b ac 34 9b cf e2 33 76 d6 00 e3 c0 ab 64 cf 6c d8 a7 66 8d 87 8a 8e b3 ce 06 fe 68 be 91 73 9c 34 49 23 d9 88 1c 30 d4 bd 36 3d ad 12 8d de e9 80 c6 a1 d5 23 e5 83 eb d3 07 3e f1 09 3c f2 dc ad 10 79 ee dc b9 03 3a 16 71 51 43 92 41 a4 83 b6 a5 1d e6 07 b0 49 90 dc c7 29 61 33 33 fb de f7 0d af 45 23 d9 de Data Ascii: $&h%'\mpXLP+2Y@4,2~b}ddZ$EmFDcm^e]hdLrHV O,43vdlfhs4I#06=#><y:qQCAI)a33E#
2024-04-16 17:44:11 UTC	1228	IN	Data Raw: b0 44 f2 e9 ac 46 16 49 73 fa 52 22 c5 a0 bf 25 db b1 fc ad e1 5d d9 b3 6f 24 a3 e1 b1 e9 b6 e4 0c 47 48 f6 c6 71 c0 2b 8f cb 25 b3 ab b6 cd b0 ca 8b 0c 4b 33 ff 93 c7 37 d5 7d 15 40 c2 a3 9a 87 c5 23 12 8f 4d 6b e6 a0 79 08 91 c9 b0 d5 90 99 74 42 64 23 5d 5a a8 c6 23 39 6f b1 a9 52 19 d9 23 ab fc 86 72 ba 88 8c 47 92 6d 07 c8 ad 6d 91 4b 7c df 26 79 3c 52 48 f9 b0 cc 9a 02 b7 3d d2 44 36 6a a3 13 ac a5 49 6b fc a7 37 cc 6b 33 8e d3 e8 39 8e d8 63 88 54 fd 88 04 6d 3a b2 c9 85 33 06 1b 24 34 32 cc 84 e4 e0 0a a4 8d d5 06 2f fc fa 8f fa 8b 63 f8 78 23 c6 39 48 e2 c6 32 c9 bc e1 10 1e 69 25 12 d5 20 eb 91 25 72 aa f4 c5 23 63 90 d6 86 72 5e bf b9 8f 56 1c ff 99 d9 b8 ce ae d3 99 c2 48 1b f6 90 53 9b 68 ce ec 97 de ec d0 b9 b9 04 9e 59 9d 56 26 ff 57 c0 2c Data Ascii: DFIsR"%]o$GHq+%K37}@#MkytBd#]Z#9oR#rGmmK\|&y<RH=D6jIk7k39cTm:3$42/cx#9H2i% %r#cr^VHShYV&W,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.5	50485	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:10 UTC	673	OUT	GET /0jnmtsdzg6p5/2EtPn9bUkWstdeKU15nFXY/a121cb9bd5d40d3e539abf9bcb58e4da/man-typing-on-laptop.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	539	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 134108 Connection: close Last-Modified: Wed, 20 Mar 2024 18:20:05 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 11:09:43 GMT Cache-Control: max-age=31536000 ETag: "a5e2650e372d2929f91f13e8db877be8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 397dd692cad53f0026fab5b236c0a518.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: tNjN8nbbHYo_c1lJ2MzIpO0h28kKcV0oomw7L9FwafmV676uPtA2dQ== Age: 23669
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 fd fd fd fa fa fa 19 18 18 0e 0d 0d 15 13 13 1e 1c 1c 07 07 07 cc cd c8 28 26 26 21 20 20 25 23 22 2f 2c 2b 3a 37 34 f5 f5 f8 2b 2a 29 3e 3b 37 41 3e 3b 31 30 30 37 33 30 ee f0 f6 e0 e0 e1 d6 d6 d5 c9 c8 c4 49 44 40 ee ee f0 d0 d1 cc 4d 48 43 46 41 3d f3 f3 f3 e6 e6 e8 e9 e9 ec f8 f6 fb e3 e3 e4 da da d8 50 4b 47 d3 d4 d1 35 34 35 dc dd de fb f9 f4 c4 c4 c0 34 2f 2c 5a 55 50 57 51 4c 5f 59 54 ce ce ce 53 4e 49 d0 d1 d2 70 4b 39 ed ee ea 2d 26 23 66 47 39 e8 ed f5 c0 c0 bd 3a 38 3b 2d 14 14 dd e4 ec 6b 49 3a e3 e9 f0 1c 0d 0b 6c 46 34 25 18 15 70 4f 41 2d 1d 1a 1e 14 12 64 43 35 3c 25 1e 50 35 2a c9 ca cb 25 1e 1b 75 4f 3c 35 16 17 55 Data Ascii: PNGIHDRRcmEPLTE(&&! %#"/,+:74+)>;7A>;100730ID@MHCFA=PKG5454/,ZUPWQL_YTSNIpK9-&#fG9:8;-kI:lF4%pOA-dC5<%P5%uO<5U
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: bc db 67 85 73 c8 4d 9b 05 dc 6d fc 2d 46 54 98 be 69 5f 21 e5 f0 63 6b 5b b2 71 41 cd d8 47 2c 91 44 e4 91 f9 d3 15 81 d1 ac 02 89 d4 d5 1a 95 48 03 d2 cf 43 06 db 18 2c 07 a9 a7 82 e8 67 7d f0 30 85 bc d5 5c 36 0c 0a 09 22 15 48 16 47 73 d9 f4 6e 6f e0 b2 b5 2b 1a ef d7 f6 1c 85 0b 2b 3b e6 01 24 78 84 42 f6 a5 90 83 c4 82 4a 2a 93 46 44 03 a7 3d 8c b5 97 38 b5 45 81 3e c2 70 41 46 01 b6 dc a1 9d d6 08 11 c1 c0 6b a3 1a 4d 9c b6 7a 6d 72 d8 9c 6c cc 83 c8 d2 78 69 7c b6 04 e2 54 0a 31 8a 44 f2 2b b5 2f 71 75 16 07 80 c4 a6 43 10 49 2e bb 3c b6 f0 9a 93 8c 66 73 c8 66 25 ba 1e ba 4d 96 02 85 c7 ad 6d 4e 1e c3 62 8b 50 21 d5 5a 2b a4 5b 34 b4 b7 ed 50 85 ec 2f 2c 1e 3b 76 ec a3 85 c2 91 fe 23 e5 d5 95 b7 44 20 31 5a 72 bc 66 41 9b 65 b1 be bb cf fd fe 1c Data Ascii: gsMm-FTi_!ck[qAG,DHC,g}0\6"HGsno++;$xBJ*FD=8E>pAFkMzmrlxi\|T1D+/quCI.<fsf%MmNbP!Z+[4P/,;v#D 1ZrfAe
2024-04-16 17:44:11 UTC	11977	IN	Data Raw: 92 c8 2e 23 52 73 92 8c f8 40 a4 95 7e ac 7f 88 40 be d8 b7 c8 7b 27 d9 fc 05 eb 4e 3f b9 40 f9 b6 07 32 1c 6c b5 6c 3b c4 90 51 08 e9 92 9a 79 9e c7 59 8e 5f 88 5c fc 6a 25 da cb 54 c9 9e 08 e4 27 0c 48 47 e3 18 8f a5 9e 48 67 f8 67 23 91 23 0d 28 a3 68 0c 3c 2a a3 f1 02 39 55 0a 39 39 a2 f5 0a f9 86 3f ed 39 d9 43 29 52 12 79 e2 02 95 9f a1 21 97 d5 44 12 29 20 83 44 c2 63 00 52 c5 f1 13 de 67 2f 39 3d 76 c9 78 04 c7 a8 30 fe cc 45 1b 16 af 02 c9 dc 7d 40 d2 fd e6 95 57 e9 53 d3 2c 2c 57 8e 10 30 16 33 0a 21 d1 4a 0d 9d 65 95 64 67 72 a4 34 54 c5 0b 9d 5c b0 90 49 30 88 96 a0 06 d9 d2 94 e2 1f a7 88 18 5b 9b 66 90 55 93 63 2b ad 6e 50 e4 a8 a9 5d b4 d2 c0 5c fd b6 f7 bd 5d 51 e4 1b 49 6b e4 9f 8d 48 09 df 7b b7 3a 06 77 6d 6d c7 9d f3 05 3e 01 76 97 e9 Data Ascii: .#Rs@~@{'N?@2ll;QyY_\j%T'HGHgg##(h<*9U99?9C)Ry!D) DcRg/9=vx0E}@WS,,W03!Jedgr4T\I0[fUc+nP]\]QIkH{:wmm>v
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 64 8d 86 ad 44 2a e9 22 64 91 1c c7 1c a3 89 11 2d f1 48 ca b5 44 1f d3 11 55 8e 73 db 4d 0a 3d a7 a7 94 5b 50 78 81 6e a6 33 9a 23 d0 c9 d0 15 75 36 c8 82 7b ca 7e 5f 44 42 9c 0f c4 b2 d9 6b 56 16 d2 26 3a d7 26 a9 68 e4 38 1f 74 c3 9a 44 6a d0 0f e9 c8 da 26 9a 2b 6d e3 2b 3b 16 be 78 9b d5 ea fa 48 fa 6c fa 40 5a 06 dc ef 5e e0 d8 50 5c 21 b9 fb db 65 ab ae 1f 2b 0f f4 f5 95 c7 ae 7f f9 81 7d d7 43 a4 03 d2 79 90 2e be b1 e7 4e 36 ff a9 42 0a 30 be c0 a3 cb c6 b8 f6 d9 fa 46 58 fb be 23 52 b1 88 80 ac 87 4e 40 d6 04 52 2f db 6b f5 e6 3a 10 c8 7a 9b fd da b3 d1 77 7e bd c9 07 18 c5 37 50 2d 0f 3f 20 a3 0d 90 f7 de 0b 91 bb 7e f5 c0 c4 e8 be 8b bf c4 0d b6 f9 30 6f 7f e9 fb b0 d4 74 12 fe 9c c3 65 36 40 d6 24 f2 88 24 92 2b 9a 21 da 03 35 0c c5 2b 35 47 Data Ascii: dD*"d-HDUsM=[Pxn3#u6{~_DBkV&:&h8tDj&+m+;xHl@Z^P\!e+}Cy.N6B0FX#RN@R/k:zw~7P-? ~0ote6@$$+!5+5G
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 78 ac 2f c3 f6 5a df 66 ef df b7 e5 4d 75 5d 5e 93 58 ea 51 83 9a 71 ce e4 43 7e cc ae a9 a7 b4 d9 b8 90 8e 48 07 b8 1b d0 f2 af 4d 55 3e 2f 3f 3d ed df ce 15 ad 1b b1 9a 33 80 7c f8 61 a6 3a 72 01 91 6f 29 74 76 7d f3 e1 1b 6f fc fa 8d df 7c f8 e1 21 d6 16 8f aa b1 4b 40 42 e4 ba 14 53 a6 64 8f 09 54 f2 e5 6a a1 8b be 05 7c 45 de f3 c5 14 89 ec 04 86 55 d9 eb 90 c7 12 e1 44 c8 16 ae 93 62 84 9e f6 12 19 47 19 cd 48 12 5a 59 45 03 55 f2 23 6d 61 8d bf a0 46 1b 3b f1 21 55 ae 9b 02 5a 76 29 a5 59 8c cd 52 06 88 ac 28 fd e7 d9 88 7d db 3f e3 ef 5b 00 48 0c b6 14 92 28 28 97 0b 21 96 da 6b 14 8f 72 42 59 fa b0 f8 fd aa de 55 b1 b8 d5 70 86 63 4d a5 55 90 c6 61 e2 a3 9c 44 69 25 47 81 0e 2f 5c be 90 bd c4 d4 9e 3d fa ec 86 15 e0 b8 9e 90 c6 9c c7 b5 b4 d4 dc Data Ascii: x/ZfMu]^XQqC~HMU>/?=3\|a:ro)tv}o\|!K@BSdTj\|EUDbGHZYEU#maF;!UZv)YR(}?[H((!krBYUpcMUaDi%G/\=
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: c4 2a 46 f1 29 eb a3 9b 19 15 38 6a 72 cf 02 2e aa a7 d0 14 8b 46 6e 98 ef cf 9e 9a 03 90 ba 40 a4 ca 62 0a bf 6c d7 32 f2 ee 3c 54 58 61 4c ba 20 7b 91 2a d9 86 3f de ab 01 16 35 9a e9 dc 89 cf 6e a8 4d c7 3a 59 a8 db 99 cd a8 da 87 9e c3 80 c1 ca 7b 9a cb 1e 1a 3c 71 fc f1 40 21 9d 3c 06 48 42 64 c0 a4 43 52 04 62 0e 44 21 59 46 24 4c 56 58 70 84 14 96 46 e4 34 80 bc 88 05 12 20 d7 ae 67 25 c8 d3 8c ef d9 f6 fc 09 82 1a 80 74 ed 40 da c4 00 90 eb 8e c4 08 56 30 2d 8b a1 41 81 cb 66 4d e6 c9 23 94 70 4a 08 0b af 1c d9 62 b8 2d 5b fe 11 23 2b a7 21 3e 3a 49 7a 54 4a c4 3c fb 53 00 68 93 7e b4 86 d3 66 90 4b 19 45 90 1e b0 e8 92 91 f6 b6 1a c9 8b 68 01 4d 8b 46 53 10 c5 ea 72 a8 90 8a 99 40 c2 a0 58 b4 78 c6 1a b3 ab e0 4d e2 e8 f6 30 d8 14 2c b5 f3 68 21 Data Ascii: F)8jr.Fn@bl2<TXaL {?5nM:Y{<q@!<HBdCRbD!YF$LVXpF4 g%t@V0-AfM#pJb-[#+!>:IzTJ<Sh~fKEhMFSr@XxM0,h!
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: e3 d9 dd 77 3f b2 82 c6 1f cf bd e7 dc f3 f1 e6 02 ec 8c 27 12 20 b1 df 60 eb fe f2 97 bf d8 a1 d0 1b de 1e 95 11 0e 75 73 6f 02 d3 74 91 67 c5 e2 13 d0 c8 17 f8 22 2b b6 78 1c 37 96 2d 64 01 61 c3 d3 be ea c0 de f3 e7 cf ef 45 82 c1 51 4b 75 80 a3 2d 0e 63 52 f1 a8 0e ad e9 db c4 89 30 28 31 04 a4 b5 4c 91 70 b0 54 88 c7 e6 81 60 46 13 38 28 8a 53 a1 89 1f 64 50 b2 45 c4 b5 86 44 fc 71 d2 2a 34 83 4e c9 19 5a f5 cb 94 5b ce 6e 3f 01 b1 ea 5f 51 2b 4d 2d 91 4f 72 11 6f 48 1e 2a 49 c1 0d 3d a4 fa d5 60 07 7e 8f 9e 82 2d 24 be 0f b1 4a c4 b8 08 45 2d 89 e5 69 a4 d2 d2 83 77 c1 ec cf 02 20 7d 35 82 c5 7c b8 2d 5b b2 d8 35 47 31 89 74 be 8d 79 3e 7e dd 56 8f e7 3f 34 58 9a 2e 40 5a 4f be 86 1b ef be 19 ff 7a 2a e6 67 18 7b a7 06 71 f4 5d 11 48 03 5d df d6 b5 Data Ascii: w?' `usotg"+x7-daEQKu-cR0(1LpT`F8(SdPEDq4NZ[n?_Q+M-OroHI=`~-$JE-iw }5\|-[5G1ty>~V?4X.@ZOz*g{q]H]
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 27 47 94 24 67 88 9a ca 24 89 dd e3 cd 88 b8 99 2d a0 61 0e 55 90 9c 6f b7 34 d4 90 eb e8 58 47 a7 4d 9d 22 6e 35 f6 68 a9 1d 7d 77 59 40 c9 78 63 da ee e8 4b 1e 5a 3b 78 aa 7a 8c 4d ec 43 1b e9 2b d3 80 a7 31 84 da 73 1f 6f 5c 40 1d 61 d2 14 f2 5f 11 f9 35 32 3b 1a 2f 6e 53 21 45 a4 e0 e5 03 67 cf a4 0b 6d 79 ff dc 37 bf c9 21 f2 b3 1f f6 90 76 d7 87 33 3f 13 ed b0 03 20 79 06 87 48 d3 4b 61 67 a2 88 f9 b1 8d de eb b2 9b 57 6b 38 2c 2e 8e 03 49 72 91 2a f2 21 fd d5 9f 18 ea 57 05 ae 6a 79 8c 45 c3 d1 8f 68 30 4e 91 73 74 7a 84 25 58 23 85 33 bb 15 e8 48 fa 90 9c dc 30 5f 90 e2 8d 4b 5b 17 eb 38 c9 97 22 12 e9 83 54 79 76 94 92 70 7b c1 65 da f4 2f 2f de c2 7b c2 73 24 92 6c 7b ab 21 c9 6f 2d b8 3b 92 91 f4 4b 78 e4 89 69 27 f2 ff 02 24 34 1a 8f a4 21 9d Data Ascii: 'G$g$-aUo4XGM"n5h}wY@xcKZ;xzMC+1so\@a_52;/nS!Egmy7!v3? yHKagWk8,.Ir*!WjyEh0Nstz%X#3H0_K[8"Tyvp{e//{s$l{!o-;Kxi'$4!
2024-04-16 17:44:11 UTC	7443	IN	Data Raw: f8 00 89 37 0e 90 6c 6f c1 62 93 9a 36 5b cd 33 a4 d1 69 49 23 52 45 90 41 5c fc 8c 7d 0f 10 87 33 1d a9 b6 92 6b cf a2 4c 10 45 f9 c3 0f 3f 97 d7 72 10 99 ce d5 ca 93 e1 54 d2 3d 1d 87 ee fa 6b df 57 ff a7 ef b1 d3 f4 f3 ef 1b 2e b6 00 63 bd 7d 3e b3 21 fc 14 72 e9 8f 46 6b dc f8 42 40 d2 c7 f7 0e e3 b2 9c 18 99 7a 42 a5 86 bd 89 ca 00 cb 0e 99 71 5c 1d 2e 33 e3 28 4f fd 52 34 46 a1 54 d9 2a ad 6d 8b 47 d9 ec 17 64 b4 5f 58 ca 6d 2e cd 55 77 8b bb bb bb eb fc ee a7 4a ab 1d 00 f9 3a a9 57 5c c2 b2 57 f1 aa 33 fb 95 72 34 d9 49 aa b6 f7 0f 8b 7d 9c 77 6c b7 b7 55 42 f6 2f 59 d0 c7 80 ec 2d ae b7 1c 65 47 48 7c 68 2c 36 4e f6 6c 79 e2 c6 1b 6f 7c e2 46 0c f6 cb bb eb e5 5e 52 3e 08 ea d1 89 c5 21 2d d2 e3 73 68 37 e1 e8 88 44 3d ea 31 3d fd 32 4d 0e 55 26 Data Ascii: 7lob6[3iI#REA\}3kLE?rT=kW.c}>!rFkB@zBq\.3(OR4FT*mGd_Xm.UwJ:W\W3r4I}wlUB/Y-eGH\|h,6Nlyo\|F^R>!-sh7D=1=2MU&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.5	50487	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	679	OUT	GET /0jnmtsdzg6p5/7gMtFWydiMHrue6DhrLJQU/483100ca17c7d6f717bc2453fbfbeb0e/pictogram-capabilities__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 747 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 17:42:08 GMT ETag: "9b177d16db0a24ecc2d9163c3dd0ff29" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 fc5ebd2517d85e358aa686aaadd64c2a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: jhjE-6uBWMUn5QQ1j8DuU-uBwVtTTW6isiNLGe5vhALFqYiHgXJ9tg==
2024-04-16 17:44:11 UTC	747	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.5	50488	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	677	OUT	GET /0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1008 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 19:31:04 GMT ETag: "093c01e5c7bf8ca66dbd361f32ec07ba" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 181a665d1a0b3047b4fa647eeabfb330.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: -N-uZT6fnOPJRmG754Vu14J001EOm14hdTXpT8dNlcesiMEG3Ut7MQ==
2024-04-16 17:44:11 UTC	1008	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.5	50489	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	684	OUT	GET /0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	506	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 706 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 17:53:33 GMT ETag: "24243f4f86f04118e67ae86e361c85e7" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 4ae0902ea4e10dc74700d1753a74440a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: E8mxv9awtn1YnH33A_koMv7EIR9iXLMHI6_FokBIBEvxDRTCX-JAtg==
2024-04-16 17:44:11 UTC	706	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.5	50490	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	698	OUT	GET /0jnmtsdzg6p5/1lBNWvcCorq4OkqECvYFZ2/68e3295cdee439f27e3bdbf90420ffdf/woman-smiling-holding-laptop__1_.png?fm=webp&q=50 HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	505	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 39638 Connection: close ETag: "6def8a47bdac6cc263e9371f1eefeb9d" Last-Modified: Fri, 29 Mar 2024 00:03:16 GMT Date: Tue, 16 Apr 2024 17:44:11 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 035e691ec6c773baa108d5dd3cdf6b28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: kv5YwVpiY4zxvD-xaKkVtHTzFA3UwRAQG-A8KFMOWXNrtVhU9wXLrg==
2024-04-16 17:44:11 UTC	15879	IN	Data Raw: 52 49 46 46 ce 9a 00 00 57 45 42 50 56 50 38 20 c2 9a 00 00 30 45 04 9d 01 2a 48 03 48 03 3e b1 52 a3 4c a7 24 a7 ad a6 b1 5b 59 b0 16 09 65 6e 20 6b 06 b7 f8 b9 ed e0 fa ec 1d 9a d2 02 62 02 a7 f2 64 b8 b7 77 21 3f 5d c1 a7 e4 5d b4 f8 2e 95 12 bc fa dd 35 3e 3e 7f bd f4 e9 cd 32 ad 33 7d ff e7 da 07 f5 5f ff 9d 59 36 cc 9f 20 f1 87 f2 df ef 7f fb 7f bb f2 8f f3 9f 7d 8f eb 3d 34 b4 4f 5e 0f ee bf f9 ff 9d ed 33 fe ce c8 dc 7e 7a e2 7f c7 96 ff 61 ff df d2 7b e9 7f f2 79 7e ff e7 ac df 7b 76 df 8f 0f ff ef a6 2f ba ca a8 52 47 75 44 8e 34 dc db da e7 b1 42 2e 0b 97 54 48 66 d5 1e d2 ea 7f c3 35 5b cf 97 8a f7 4a 23 c5 08 f2 a2 f1 f0 2b ab 27 5e 09 cb 77 cb 80 cb 03 78 7c f2 4c ea d7 29 c5 f8 c3 29 18 0f dd e9 eb f0 1c ab ed 6a 9f 19 ee 92 da 0a 07 cd c7 Data Ascii: RIFFWEBPVP8 0E*HH>RL$[Yen kbdw!?]].5>>23}_Y6 }=4O^3~za{y~{v/RGuD4B.THf5[J#+'^wx\|L))j
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 01 bb 76 22 94 c8 74 36 5f fe f9 39 33 2f ef a4 49 f0 b2 6e 5c b8 46 7b 17 db 46 de 46 f8 5c 11 ac 91 fe 78 ba f9 c8 5c 20 42 8d 8e 29 c6 f2 20 2b ba 10 b0 7a 61 ed 56 c8 32 92 14 56 b3 4d 61 0b b1 f2 53 48 ea 99 a7 c8 ab 2e f3 e9 90 1a 71 fc 7e ee f6 a7 82 53 0f e0 4e ac 84 ba e3 79 b0 06 5d ad 2d 97 75 21 07 29 bb 87 bf f8 a9 ae ce d4 6b 85 cc b8 b0 62 de 12 64 09 4c 4f db 21 76 92 0a 15 ae b4 45 d8 f3 43 03 2e 47 ca 12 e8 15 4d 62 dc 22 d4 5c 66 80 5a 0d 7b be b5 18 b4 a6 d7 06 b0 65 55 4f aa a7 77 42 b3 b9 8a b6 c1 c9 2c 27 fc 03 88 0e 36 e4 2d 07 2c 4e f5 a9 d8 c3 36 e2 ec b0 da 5f e3 7c f6 e5 25 41 49 17 32 47 ab ae 6d 2c e7 f6 f9 de b8 4a f3 a2 c6 f3 06 38 20 1c 73 83 ff 27 92 08 1e 9f e6 d1 21 cb 8b 79 4f 33 ae 82 25 8d d5 7b 5b 8b a6 a1 5b c4 5e Data Ascii: v"t6_93/In\F{FF\x\ B) +zaV2VMaSH.q~SNy]-u!)kbdLO!vEC.GMb"\fZ{eUOwB,'6-,N6_\|%AI2Gm,J8 s'!yO3%{[[^
2024-04-16 17:44:11 UTC	7375	IN	Data Raw: 24 09 0c 43 29 35 f0 23 97 fd 19 20 72 93 a6 b8 ef b6 22 77 1c 28 30 47 34 ce a1 bc 53 d1 18 df a2 70 99 59 bc fa eb 4a 6a 57 a1 36 2a 91 2b 4c 87 69 39 16 b6 6d f0 16 74 8d 32 e1 e6 0c ff 88 d6 5e 9b 70 fa 46 18 5b 66 30 49 6f 8e cc 76 7d 54 23 03 10 04 df f9 49 ad 26 f3 19 e4 03 b1 97 34 38 ae f3 68 00 35 30 d9 c0 bc 54 e6 e7 f0 00 c2 22 80 25 91 05 10 ae 4b 4e fb 92 5f 2b ae 79 13 e5 fb 7c 93 56 ed a3 70 78 27 23 20 bd 22 37 8d 92 5d e9 b6 f2 4e b1 52 e0 c5 32 5f 48 b2 bd 33 bc 52 dc 59 df d8 bc be be 59 23 16 9e d7 d1 dd 11 85 67 68 f6 32 b4 52 d6 9c a0 7f 66 3c 30 0c e2 2d 8c c7 e7 cc 0a df 16 77 07 bb 3a 2f 24 db 6b f3 d1 e9 ee da 44 3e ae e3 7a 08 c8 1e b9 59 21 0a cc 0e 58 40 65 b8 a1 a6 fd 80 00 0b 17 cc 27 5c df 2d b3 39 2b cb d2 7a 07 21 77 73 Data Ascii: $C)5# r"w(0G4SpYJjW6*+Li9mt2^pF[f0Iov}T#I&48h50T"%KN_+y\|Vpx'# "7]NR2_H3RYY#gh2Rf<0-w:/$kD>zY!X@e'\-9+z!ws

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.5	50492	18.165.83.89	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	669	OUT	GET /0jnmtsdzg6p5/3LWVrC9oDrGbQmlAS6i7uN/9670d83c92fb7522216623add9fb430d/illo-docusignIAM.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:11 UTC	530	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2897 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Thu, 28 Mar 2024 20:08:52 GMT ETag: "2400caa2aa3609641173dbe8af0b2513" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 31f764b3af7bd53499e97e3e9c790b42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: fk5s6I3ax00j3ucYr2n_7ojzGvp1C06cjZx14dY0VusyD8KJMVIkOQ==
2024-04-16 17:44:11 UTC	2897	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 36 34 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 32 20 36 34 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 38 38 30 5f 31 31 36 36 31 35 29 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 36 34 39 22 20 66 69 6c 6c 3d 22 23 43 42 43 32 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 36 30 2e 39 38 34 20 37 31 37 2e 30 35 35 56 36 30 32 2e 31 35 32 4c 36 36 37 2e 31 31 35 20 35 35 32 2e 31 32 32 56 36 36 36 2e 33 30 33 4c 35 36 30 2e 39 38 34 Data Ascii: <svg width="1092" height="649" viewBox="0 0 1092 649" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_880_116615)"><rect width="1092" height="649" fill="#CBC2FF"/><path d="M560.984 717.055V602.152L667.115 552.122V666.303L560.984

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.5	50493	18.165.83.72	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	653	OUT	GET /0jnmtsdzg6p5/5lFWA4CNCUb8OPCLc27Kay/b9d9c015abd206f18e3eaf2a8cf734ee/Docusign_IAM_Explainer_1920x1080_2398_h264.mp4 HTTP/1.1 Host: videos.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.docusign.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-16 17:44:11 UTC	806	IN	HTTP/1.1 206 Partial Content Content-Type: video/mp4 Content-Length: 47889698 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 86400 x-amz-replication-status: COMPLETED Last-Modified: Thu, 28 Mar 2024 02:50:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: k4h1CqhW6yzgc6lI5Ov.p9zeB53KgT0Q Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 17:23:35 GMT Cache-Control: max-age=2592000 ETag: "fcc807243ceb34dfa39707ec4cfa0ded-10" Vary: Accept-Encoding Content-Range: bytes 0-47889697/47889698 X-Cache: Hit from cloudfront Via: 1.1 4ec656d2dfbb59cd7fab2ac94a540522.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Amz-Cf-Id: 78T8ckkYVVnO2g0vIb64ilMynJQiMCel1fKTyPaDBup-X0fHjL5AbA== Age: 12155
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 6d 70 34 32 69 73 6f 32 61 76 63 31 6d 70 34 31 00 01 f2 2a 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 22 5e f7 e2 22 5e f7 00 00 03 e8 00 01 ad d4 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 d4 93 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 e2 22 5e f7 e2 22 5e f7 00 00 00 01 00 00 00 00 00 01 ad cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 Data Ascii: ftypmp42mp42iso2avc1mp41*moovlmvhd"^"^@trak\tkhd"^"^@8$edt
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 3a a7 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 0e a9 00 00 00 01 00 00 49 51 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e a9 00 00 00 02 00 00 1d 54 00 00 00 01 00 00 1d 53 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 1d 53 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 2b fd 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 1d 53 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 2b fd 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 2b fd 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 3a a7 00 00 00 01 00 00 0e a9 Data Ascii: :IQTTSIPTIPTST+ST++T:
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 00 00 00 01 00 00 00 00 00 00 00 01 00 00 0e aa 00 00 00 01 00 00 49 50 00 00 00 01 00 00 1d 54 Data Ascii: IPTIPTIPTIPTIPTIPTIPTIPT
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 01 20 0c 01 01 c5 7c 01 02 6c 69 01 03 13 65 01 03 b3 4d 01 04 52 86 01 04 f5 02 01 05 99 bc 01 06 3d 9d 01 06 e3 0a 01 07 89 98 01 08 29 ca 01 08 c9 04 01 09 68 df 01 0a 03 01 01 0a 9e c3 01 0b 3b c9 01 0b de 5f 01 0c 7d 05 01 0d 1f c0 01 0d c3 ab 01 0e 5f 20 01 0e ff 94 01 0f a2 78 01 10 43 0a 01 10 e8 6e 01 12 9d 6a 01 13 80 58 01 14 07 d4 01 14 78 25 01 14 e8 a2 01 15 b7 6a 01 16 3c a1 01 16 a8 23 01 17 14 ce 01 17 ff 81 01 18 86 27 01 18 f2 c5 01 19 5d 43 01 1a 3b 07 01 1a bd 85 01 1b 24 a0 01 1b 8c 5d 01 1c 60 e0 01 1c e0 1e 01 1d 48 4a 01 1d b0 07 01 1e 78 6e 01 1e fb f1 01 1f 62 e6 01 1f d1 4b 01 20 b4 56 01 21 3d 9b 01 21 ae 14 01 22 19 8f 01 23 21 6f 01 23 b4 90 01 24 20 64 01 24 8e 7a 01 25 6b a7 01 25 f4 52 01 26 59 f5 01 26 c1 d5 01 27 a5 48 Data Ascii: \|lieMR=)h;_}_ xCnjXx%j<#']C;$]`HJxnbK V!=!"#!o#$ d$z%k%R&Y&'H
2024-04-16 17:44:11 UTC	16384	IN	Data Raw: 01 00 00 08 df 00 00 00 02 00 00 00 01 00 00 08 e0 00 00 00 01 00 00 00 01 00 00 08 e4 00 00 00 02 00 00 00 01 00 00 08 e5 00 00 00 01 00 00 00 01 00 00 08 e9 00 00 00 02 00 00 00 01 00 00 08 ea 00 00 00 01 00 00 00 01 00 00 08 ee 00 00 00 02 00 00 00 01 00 00 08 ef 00 00 00 01 00 00 00 01 00 00 08 f3 00 00 00 02 00 00 00 01 00 00 08 f4 00 00 00 01 00 00 00 01 00 00 08 f8 00 00 00 02 00 00 00 01 00 00 08 f9 00 00 00 01 00 00 00 01 00 00 08 fd 00 00 00 02 00 00 00 01 00 00 08 fe 00 00 00 01 00 00 00 01 00 00 08 ff 00 00 00 02 00 00 00 01 00 00 09 00 00 00 00 01 00 00 00 01 00 00 09 04 00 00 00 02 00 00 00 01 00 00 09 05 00 00 00 01 00 00 00 01 00 00 09 09 00 00 00 02 00 00 00 01 00 00 09 0a 00 00 00 01 00 00 00 01 00 00 09 0e 00 00 00 02 00 00 00 01 00 00 Data Ascii:
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 53 00 00 01 31 00 00 01 2e 00 00 01 36 00 00 01 59 00 00 01 79 00 00 01 61 00 00 01 67 00 00 01 6a 00 00 01 6a 00 00 01 7e 00 00 01 6e 00 00 01 4e 00 00 01 61 00 00 01 5a 00 00 01 4f 00 00 01 45 00 00 01 6e 00 00 01 89 00 00 01 9e 00 00 01 98 00 00 01 b7 00 00 01 ae 00 00 01 b3 00 00 01 a4 00 00 01 ab 00 00 01 a0 00 00 01 a0 00 00 01 9c 00 00 01 af 00 00 01 a1 00 00 01 ac 00 00 01 ab 00 00 01 f1 00 00 01 74 00 00 01 b3 00 00 01 a7 00 00 01 9b 00 00 01 a9 00 00 01 a0 00 00 01 a1 00 00 01 a6 00 00 01 a5 00 00 01 a5 00 00 01 9f 00 00 01 91 00 00 01 a0 00 00 01 66 00 00 01 39 00 00 01 3c 00 00 01 eb 00 00 01 68 00 00 01 52 00 00 01 27 00 00 01 43 00 00 01 59 00 00 01 54 00 00 01 75 00 00 01 86 00 00 01 19 00 00 01 18 00 00 01 2a 00 00 01 2a 00 00 01 1a 00 00 Data Ascii: S1.6Yyagjj~nNaZOEntf9<hR'CYTu**
2024-04-16 17:44:12 UTC	10550	IN	Data Raw: 6d 00 33 78 4f 00 33 90 67 00 33 a9 95 00 33 ad 65 00 33 c0 13 00 33 c3 fb 00 33 db b2 00 33 eb 9f 00 33 ef 8f 00 34 09 2a 00 34 0d 64 00 34 1c c5 00 34 38 76 00 34 3c bc 00 34 48 23 00 34 4c 82 00 34 6d e5 00 34 84 7d 00 34 89 15 00 34 95 a2 00 34 9a 40 00 34 a9 f4 00 34 c2 38 00 34 c6 59 00 34 de 31 00 34 e2 80 00 34 f0 46 00 35 05 ad 00 35 0a 08 00 35 21 f5 00 35 26 06 00 35 33 7a 00 35 4f 5c 00 35 53 b4 00 35 61 b9 00 35 71 01 00 35 74 ff 00 35 85 b7 00 35 89 b3 00 35 9c 83 00 35 af de 00 35 b3 d0 00 35 cf 8d 00 35 d3 a0 00 35 e1 b6 00 35 f0 6a 00 35 f4 de 00 36 05 db 00 36 09 e5 00 36 1a e6 00 36 35 07 00 36 39 28 00 36 43 3b 00 36 47 78 00 36 57 13 00 36 70 91 00 36 75 1f 00 36 7e dc 00 36 83 6c 00 36 9d a2 00 36 ab 74 00 36 b0 00 00 36 c3 28 00 36 Data Ascii: m3xO3g33e333334*4d448v4<4H#4L4m4}444@4484Y4144F555!5&53z5O\5S5a5q5t555555555j56666569(6C;6Gx6W6p6u6~6l66t66(6
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 46 b9 35 02 46 fb 39 02 47 3c a8 02 47 41 27 02 48 12 02 02 48 16 8e 02 48 74 d2 02 48 b6 eb 02 48 bb 40 02 48 f5 f8 02 48 fa 14 02 49 cf 04 02 4a 35 f5 02 4a 3a dd 02 4a 7c 79 02 4a 80 ad 02 4a be 7a 02 4b 79 89 02 4b 7d d8 02 4b eb e8 02 4c 32 68 02 4c 37 6c 02 4c 82 91 02 4c 87 18 02 4d 09 d2 02 4d 8b ef 02 4d 90 f2 02 4e 0d a2 02 4e 12 f4 02 4e 86 57 02 4f 05 4b 02 4f 09 d3 02 4f 7f 28 02 4f 83 e6 02 4f f9 62 02 50 97 9a 02 50 9c a4 02 51 5a 33 02 51 5f 27 02 51 9b 46 02 52 57 98 02 52 5c 30 02 52 97 92 02 52 9c 5f 02 52 d4 09 02 53 83 06 02 53 88 09 02 53 cb 9a 02 53 d0 c5 02 54 03 e9 02 54 35 b8 02 54 3a 33 02 54 d1 2a 02 54 d5 6f 02 55 11 e2 02 55 3e 4b 02 55 43 02 02 55 69 ca 02 56 00 55 02 56 04 e1 02 56 2c e6 02 56 31 73 02 56 4f 25 02 56 6a 1d Data Ascii: F5F9G<GA'HHHtHH@HHIJ5J:J\|yJJzKyK}KL2hL7lLLMMMNNNWOKOO(OObPPQZ3Q_'QFRWR\0RR_RSSSSTT5T:3T*ToUU>KUCUiVUVV,V1sVO%Vj
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: fb f3 02 7d 00 cc 02 7d 70 a0 02 7d 9d de 02 7e 19 81 02 7e 1d b4 02 7e 6a 0e 02 7e 9a 2b 02 7e c3 35 02 7e c8 36 02 7f 2b 7e 02 7f 59 ba 02 7f 7c bf 02 7f 80 ee 02 7f a2 69 02 7f ec 05 02 80 14 9f 02 80 30 43 02 80 36 2b 02 80 4f 83 02 80 8f 8a 02 80 aa 5f 02 80 b0 3f 02 80 c5 56 02 80 da 32 02 81 17 54 02 81 1d 1e 02 81 37 04 02 81 51 44 02 81 68 84 02 81 cf 9c 02 81 d3 a4 02 81 f1 76 02 82 02 03 02 82 14 87 02 82 18 5e 02 82 32 e2 02 82 47 b5 02 82 56 d3 02 82 5b a0 02 82 6a df 02 82 83 aa 02 82 95 52 02 82 a1 dc 02 82 a7 6f 02 82 b2 e4 02 82 ca 6b 02 82 d8 db 02 82 de 4c 02 82 e9 16 02 82 f4 d2 02 83 11 ac 02 83 17 a2 02 83 26 c6 02 83 34 63 02 83 3f 9c 02 83 46 17 02 83 5f cc 02 83 70 a3 02 83 7a b5 02 83 88 1a 02 83 8c 68 02 83 bb ed 02 83 d2 0b 02 Data Ascii: }}p}~~~j~+~5~6+~Y\|i0C6+O_?V2T7QDhv^2GV[jRokL&4c?F_pzh
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 8d 2c 84 8e 99 70 05 a6 4e c3 7a f9 52 f0 9e e2 b4 b9 64 24 74 cb 80 2d 0a ae 1b d7 ca 97 84 f7 15 a2 cb 21 23 a6 5c 01 66 e4 d0 5a 45 10 ce 3c b1 5a 5c b2 12 3a 65 c0 16 6e 0d 05 a4 51 0c e3 cb 15 a7 6f 87 34 a0 98 0e d8 46 39 59 24 eb d9 8f d2 e0 04 ff b0 50 bf be 1e 72 4e cb 11 27 65 69 74 b3 22 5c a3 9a 54 dc 1f 61 40 be d0 49 53 6a e5 11 7c 85 82 d8 28 9b 71 e8 0a db 19 94 31 ef 2e 51 17 c2 68 2d 82 89 b7 1e 80 ad c5 99 43 1e f2 e5 11 7c 7b 82 d8 28 9b 71 e8 0a dd 19 94 31 ef 2e 51 17 cb 1c b5 82 89 b7 1e 80 ad e1 99 43 1e f2 e5 11 7c f9 cb 58 28 9b 71 e8 0a df 59 94 31 ef 2e 51 17 d1 5c b5 82 89 b7 1e 80 ad f9 99 43 1e f2 e5 11 7d 65 cb 58 28 9b 71 e8 0a e1 19 94 31 ef 2e 51 17 d0 1c b5 82 89 b7 1e 80 ae 15 99 43 1e f2 e5 11 7d 59 cb 58 28 9b 71 e8 Data Ascii: ,pNzRd$t-!#\fZE<Z\:enQo4F9Y$PrN'eit"\Ta@ISj\|(q1.Qh-C\|{(q1.QC\|X(qY1.Q\C}eX(q1.QC}YX(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.5	50494	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	436	OUT	GET /0jnmtsdzg6p5/5njZgbUWn7OkNcxpuSgmD2/e3d0d77f6b7db47c01045121e5a13573/illo-agreement-trap.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:12 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4877 Connection: close Date: Tue, 16 Apr 2024 17:44:10 GMT Last-Modified: Wed, 20 Mar 2024 17:51:50 GMT ETag: "8ebff36118550ab72bb17778c3e39c15" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 282c7063f0dcd150a1ec354174c83f68.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: jQRBSHt5edrhCk3XMWial0Ww9_fUtx1kZsGoyJ5TJSDmJeeuc4r2aQ== Age: 3
2024-04-16 17:44:12 UTC	4877	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 35 31 36 22 20 68 65 69 67 68 74 3d 22 36 38 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 36 20 36 38 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 31 35 30 33 5f 38 39 38 37 37 29 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 31 36 22 20 68 65 69 67 68 74 3d 22 36 38 38 22 20 66 69 6c 6c 3d 22 23 34 43 30 30 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 39 39 2e 37 38 37 20 34 30 39 2e 32 36 34 4c 33 31 2e 37 37 37 33 20 35 34 30 2e 32 36 39 4c 32 39 39 2e 37 38 37 20 36 35 31 2e 33 33 38 4c 35 36 37 2e 37 39 37 20 35 32 Data Ascii: <svg width="516" height="688" viewBox="0 0 516 688" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_1503_89877)"><rect width="516" height="688" fill="#4C00FF"/><path d="M299.787 409.264L31.7773 540.269L299.787 651.338L567.797 52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.5	50495	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	459	OUT	GET /0jnmtsdzg6p5/1UD43hoOxdWkZZPcTG64KN/aebf586f98a5dff7c5132401db92ea13/Woman-working-remote-on-phone.png?fm=webp&q=50 HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:12 UTC	511	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 8000 Connection: close ETag: "c102c6d1bf0df972b011fd49f4e894e7" Last-Modified: Tue, 09 Apr 2024 13:53:21 GMT Date: Tue, 16 Apr 2024 17:44:09 GMT Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 6e5576b120c81986215d5e2dd5676fe8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: FV6TdIWFcaP51fTEIeIrdtwpI1cpwrf2hjFeGc9ppsvMf92Thg-cLw== Age: 3
2024-04-16 17:44:12 UTC	6396	IN	Data Raw: 52 49 46 46 38 1f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 95 02 00 f0 01 00 41 4c 50 48 b8 01 00 00 01 90 a3 6d db b1 47 ef 8f d8 a8 6c 63 09 b6 8d f2 af 63 75 e9 5c 26 bd 59 71 ba 7f 36 a0 ee ab fe 6a bc 80 d8 7c 77 90 e3 ae e6 8a 88 09 30 1f f9 58 df 96 73 61 95 7c e1 6c f5 47 1a f5 7a e3 4b 66 0e 03 57 52 ba 0a 1c 0e e5 46 ba a5 e3 49 19 3c bc b1 8a 3e 5b 29 8f 17 4e 68 c7 a9 95 f5 cf d9 1c b7 6a c2 9a bf bc e9 ca de ac 65 7b 34 13 dc fa fd c5 2a fb 6e 27 5d 32 9e ea 2f 2f 56 db 0f 07 e1 8a 49 39 78 b1 ea 7e 18 17 4c 68 ef a3 d5 f7 55 8a 5e 0a fc 56 e1 ab 72 71 b7 5a 89 5f c4 aa 25 72 59 63 d6 a7 96 44 bf c8 b6 d4 92 f4 43 64 8e 5a d2 6e 44 76 a1 96 0c ab 72 fc 87 ff f0 1f fe c3 7f f8 0f ff e1 3f fc 87 ff f0 1f fe c3 7f f8 0f ff e1 3f fc Data Ascii: RIFF8WEBPVP8XALPHmGlccu\&Yq6j\|w0Xsa\|lGzKfWRFI<>[)Nhje{4*n']2//VI9x~LhU^VrqZ_%rYcDCdZnDvr??
2024-04-16 17:44:12 UTC	1604	IN	Data Raw: ce e2 d0 61 f9 9f 71 ef 4e f2 d0 54 18 1b 3d 9c 94 4e 4a b4 15 c9 66 9a 22 da dc b0 68 ad 3d dd 44 9c c2 44 a9 1c c7 20 ac 1b 9a e2 74 20 20 69 8e e0 81 7a 28 7e 93 c8 43 6e f7 58 2b e8 87 14 fc 51 dd 89 0b 48 88 44 71 47 e9 8e 3d f1 f9 e4 2e d2 05 bd 40 be 8e 62 ec 0a 8d 56 65 9f 55 f3 f7 38 d5 de 2d 40 9f ee 7c e5 25 ec 8b 9b 66 59 a3 1c 72 1f 74 a8 b7 00 6e 98 83 eb 95 09 bb 38 bb f7 39 05 e6 cb 59 7b 05 63 91 51 b4 cd 5d fc 68 fa 29 f8 6c af db 5d 1c 5f d1 f7 ef 7a ad 41 86 b2 5b 8a ba b0 dc 4d d3 14 89 88 c4 0a c9 35 9e c5 1c e8 32 a4 1a 4e f0 b1 e5 5e fd af 99 3a a9 dd 7e f1 0b 89 ec 54 1f 77 aa f1 9b d6 e2 76 ce cc ec 0d b6 7b ed 25 b6 d2 f2 5f 2b ea c1 66 42 e6 14 43 47 ab 73 25 ae 09 9e fb 3c 3c 46 2c 42 02 97 cd 90 be b6 db b3 fd d0 e9 bf cf 22 Data Ascii: aqNT=NJf"h=DD t iz(~CnX+QHDqG=.@bVeU8-@\|%fYrtn89Y{cQ]h)l]_zA[M52N^:~Twv{%_+fBCGs%<<F,B"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.5	50497	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	445	OUT	GET /0jnmtsdzg6p5/3DK107HA72YisXutlRAbk3/fe56a48aa0ae33bcaccb287e47715374/productUI-docusign-navigator.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:12 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 71782 Connection: close Date: Mon, 15 Apr 2024 17:52:08 GMT Last-Modified: Thu, 04 Apr 2024 22:15:07 GMT ETag: "d45931e558f345e8ce7c252b7aea0cf2" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 2e35e46999104454d42bab56b4746dbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: 7CnCGh1j2dMnzEzBEtJbUwxVw3tKe2DNHKIoTCGF9N_sjyhKmlYc-A== Age: 85925
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 17 fb 49 44 41 54 78 01 ec dd 0b bc 25 55 79 e7 fd 55 0d 28 30 20 08 4e 82 80 88 23 dd bc 89 c8 4d 54 24 72 69 3e ef 67 a2 dd 82 18 11 10 bc 20 26 42 d4 09 90 91 51 d4 c8 25 11 70 20 01 8c 66 c0 44 c4 60 8b 10 8d 08 76 23 99 19 9a 8b 1a 8d 28 57 27 03 4d 5e 91 ab 9f 19 41 10 42 13 91 b3 de fa af aa a7 6a 55 ed da b7 73 f6 a9 da a7 cf ef 0b bb cf 39 7b d7 ae fb 6d 3d b5 d6 b3 9c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaIDATx%UyU(0 N#MT$ri>g &BQ%p fD`v#(W'M^ABjUs9{m=
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 00 00 68 17 35 08 3a 97 e5 1e b0 e0 40 89 d6 1f 00 00 00 00 80 f6 10 20 e8 5c 1e 08 a0 79 01 00 00 00 00 a0 43 04 08 ba e7 93 ac 7d 41 08 0c cc b8 a2 53 03 00 00 00 00 00 5a 43 80 a0 63 ca 37 10 82 02 c9 92 c4 e7 6f 84 9f b4 30 00 00 00 00 00 b4 88 00 41 e7 8a 14 85 d1 3b e9 7f 9e a6 06 00 00 00 00 80 f6 10 20 e8 58 12 fa 2e c8 82 04 16 14 f0 d9 8b 3a 04 00 00 00 00 80 d6 10 20 e8 98 2f b2 13 a6 a1 82 24 49 48 52 08 00 00 00 00 e8 02 01 82 ae e5 d5 05 f2 1c 85 21 48 e0 49 42 00 00 00 00 00 68 19 01 82 ae 65 71 00 af ac 03 3e 0b 16 50 83 00 00 00 00 00 d0 ba 8d 1d 3a 95 57 1c 08 8d 0b 2a fd 1b 52 81 00 00 00 00 00 d0 22 6a 10 4c 01 25 27 54 f5 81 38 39 a1 a7 1e 01 00 00 00 00 a0 45 04 08 ba 16 92 13 ba 3c 3d a1 77 59 ce c2 f0 86 03 00 00 00 00 a0 2d 04 08 Data Ascii: h5:@ \yC}ASZCc7o0A; X.: /$IHR!HIBheq>P:W*R"jL%'T89E<=wY-
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: ee b8 43 fa 73 9b f0 73 a1 5a ff f4 7a 77 cf ba 7b c3 76 7f 20 dd 07 84 7d 60 3c 9b 6d ba 59 d8 0f 36 db 7c 53 b7 74 e9 2e ee 25 e9 fe b0 d9 e6 9b b9 85 aa 7e 4e d0 3e b2 fe 99 f5 0e 68 8b ce b1 9b 6f 96 1e 57 2f 7a a1 db 61 87 1d dc b2 65 bb b8 b9 20 40 d0 b9 2c df 40 96 a4 d0 e7 31 02 e2 03 93 f2 b9 6b 9d bb e5 5e 07 00 58 20 fe f9 81 2c b8 fb 86 57 b9 a9 a0 9b fd db ef b8 d3 7d ef 1f 7f e0 1e 7a e8 21 f7 74 fa b7 0a bb bb a4 05 9b 70 43 b6 f4 e5 0e 83 69 1d aa 00 75 c7 ed 77 a6 3f 1f 76 9b a7 85 c1 5d 76 d9 c5 ed b1 e7 6e 6e df 7d 5f e3 a6 dd 3d f7 dc eb d6 ad fb 97 7c fe 1f 0a f3 bf c3 0e db bb 6d b6 dd 26 14 74 b5 3f 60 3c 8f 3e fa 58 ba 2e 1f 74 37 ac bd 29 1c 53 0a 1a 29 58 70 f0 c1 07 84 f5 3a cd b4 3f 3f 90 ee 07 df fb de 0f dc 9d e9 b9 c1 ce 09 Data Ascii: CssZzw{v }`<mY6\|St.%~N>hoW/zae @,@1k^X ,W}z!tpCiuw?v]vnn}_=\|m&t?`<>X.t7)S)Xp:??
2024-04-16 17:44:12 UTC	16384	IN	Data Raw: 30 0c 21 44 b9 06 c6 d2 86 e7 3e db 3f 22 ee bb ff 01 77 df 7d 0f 78 cf 81 38 14 01 00 00 e0 70 05 81 a0 61 a6 0b cf 81 7c 44 3c 71 d3 69 6a d9 0a 1d 94 63 de 03 93 78 8a 64 98 9a 91 9c 27 fa cb 47 b8 ab f2 0f 94 21 63 af cc 75 dc 8c dd 90 3c 89 60 e2 e3 fe cb 18 94 14 50 89 fb ea f6 15 c7 b6 6f 0b 5c f7 8d 7c 84 3e 5f 4e a2 85 8d da c7 94 ad 3b 1b 74 4e 25 8e 68 e4 3c 1e a9 57 78 87 e6 49 40 90 a7 c0 20 6f 81 32 14 7a 51 26 be 6c 9f 85 20 33 d3 7d ea 58 25 00 18 e1 f5 92 c8 73 85 4f a2 78 7c a7 0a 06 40 5b d1 e8 be 92 16 3e 16 89 04 32 e4 95 ac 70 14 c2 ca 08 21 12 21 ce ce 7e 4b 0a 2d 50 48 c3 8a 28 af c1 7c 42 78 01 00 00 b4 0d 04 82 16 a0 bc 84 56 ea d0 06 be e9 33 f4 13 e7 21 98 c4 73 24 03 d9 72 0f 68 94 59 25 ea 54 8a 4e 46 e5 b0 f5 ea 95 7c 4e cb Data Ascii: 0!D>?"w}x8pa\|D<qijcxd'G!cu<`Po\\|>_N;tN%h<WxI@ o2zQ&l 3}X%sOx\|@[>2p!!~K-PH(\|BxV3!s$rhY%TNF\|N
2024-04-16 17:44:12 UTC	6246	IN	Data Raw: 4c d8 11 03 ac ba a1 c2 0c 1c 00 00 00 00 00 00 c0 3c 81 07 41 c3 f4 aa 00 49 57 18 20 cc 00 00 00 00 00 00 00 e6 11 04 82 c6 49 93 4e 5c 41 21 17 24 d9 f7 14 ff 01 00 00 00 00 00 00 98 47 10 08 da 80 17 03 12 9f 80 40 1f 53 d4 01 00 00 00 00 00 00 98 67 10 08 1a c7 7b 0f e4 55 0d 53 4b 4e 58 4c 03 00 00 00 00 00 00 98 27 10 08 1a a6 93 93 30 2d aa 18 14 d3 d2 34 25 07 01 00 00 00 00 00 00 cc 1b 08 04 2d c0 b2 12 9a 48 90 7f 9b c2 83 00 00 00 00 00 00 00 e6 0d 04 82 96 90 16 c1 05 c5 17 9f ba d0 01 00 00 00 00 00 00 cc 13 08 04 ad 21 d4 03 92 94 32 06 00 00 00 00 00 00 30 9f 20 10 34 8d 52 0d a4 49 27 15 81 fd 9b 24 38 10 00 00 00 00 00 00 c0 fc 81 40 d0 30 5e 1b 48 f2 24 85 c5 04 37 ad a9 38 10 00 00 00 00 00 00 c0 3c 82 40 d0 34 71 b1 02 15 39 4c a6 d0 Data Ascii: L<AIW IN\A!$G@Sg{USKNXL'0-4%-H!20 4RI'$8@0^H$78<@4q9L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.5	50496	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:11 UTC	443	OUT	GET /0jnmtsdzg6p5/3P8Il3939FVKkbMzMvQNTL/23a1dd0f90a8001ff30959f33336b5f1/productUI-docusign-maestro.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:12 UTC	534	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 24735 Connection: close Last-Modified: Wed, 20 Mar 2024 17:57:41 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:10 GMT Cache-Control: max-age=31536000 ETag: "7a6c6802aa3c2d92e0f951de9e9154a1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3553b0fd7e74e2b8ad09f7eb3c954e5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: cs825NSu9i7toABYhFUHLKU-aLVD7yx_mUMs-2KdGgFBMlwozevH7g== Age: 3
2024-04-16 17:44:12 UTC	15850	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 60 34 49 44 41 54 78 01 ed fd 0f bc 5c 77 5d 27 fe bf 27 09 b4 50 da a6 ab b4 fb a5 28 29 a8 28 82 94 ef b6 fc d3 9f a4 56 45 f7 b7 b4 61 05 ff a1 26 45 5c 17 dc b5 29 28 b8 2e 98 04 d1 85 2a 34 d5 a5 e8 57 24 a9 8a 8a c0 97 14 74 97 aa 98 d4 c7 ae 82 f8 fd 36 ca 1f 65 05 92 0a ad b6 e8 e6 5f ff a4 7f 92 f9 9e f7 cc 7c 6e 4e 26 33 77 e6 ce 9d b9 77 ee 9d e7 f3 d1 e9 bd 99 3b 73 e6 9c 33 33 e7 f3 39 af f3 f9 13 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAa`4IDATx\w]''P()(VEa&E\)(.*4W$t6e_\|nN&3ww;s339
2024-04-16 17:44:12 UTC	6536	IN	Data Raw: bc e4 8d 43 15 3a ad 70 20 1f db 49 00 eb fd 6e eb 23 79 e7 d4 43 f3 55 aa 73 39 f5 39 c6 17 5b 79 ad cf 8d 9c 2d 23 06 55 e8 af af 42 91 5e 23 ce 5e fd 3d 1b 87 9a 1a 2c e5 dc cc b9 8c 1c 6d b9 7b 39 f5 26 3f 39 50 dd a8 f2 ea f6 b0 eb 93 e1 40 af f5 59 c8 d4 85 f5 3e f6 97 8f 71 ca 97 c5 7c 1e f2 b3 5a f6 c1 7c 49 6d 7d 4a c8 41 4a c2 9f 57 0d 32 dd 2f 9f e7 5e db dc 3d eb c5 a0 ef 49 7e 2e 5e 3e e4 f7 69 a5 9b 86 cf d6 a4 d4 c3 b9 61 be 7b 83 5a 10 74 5f 29 1c c5 42 8e 4f f5 ef c3 65 5a bd b0 0a e5 b1 b9 9c 9c 0c 73 6c 7e fd ab 17 36 3e d1 30 1e d7 29 eb 47 3d de e7 36 5c d1 39 d6 0c da 86 d6 d5 ed 6a 1b 72 20 bc 51 2e 4e 2c e4 98 d1 1d 96 d7 67 01 7a cb f6 9b e7 2d cf 73 39 65 0a dc 49 5a c8 95 f6 61 de 9f 7a 20 b2 90 a9 96 87 69 2d 51 8e c1 77 d5 5a Data Ascii: C:p In#yCUs99[y-#UB^#^=,m{9&?9P@Y>q\|Z\|Im}JAJW2/^=I~.^>ia{Zt_)BOeZsl~6>0)G=6\9jr Q.N,gz-s9eIZaz i-QwZ
2024-04-16 17:44:12 UTC	2349	IN	Data Raw: 00 00 20 04 04 00 00 00 40 08 08 00 00 00 80 10 10 00 00 00 00 21 20 00 00 00 00 42 40 00 00 00 00 84 80 00 00 00 00 08 01 01 00 00 00 10 02 02 00 00 00 20 04 04 00 00 00 40 08 08 00 00 00 80 10 10 00 00 00 00 21 20 00 00 00 00 42 40 00 00 00 00 84 80 00 00 00 00 08 01 c1 4a 70 38 00 80 69 75 30 56 af 83 01 c0 4c 11 10 4c 3f 01 01 00 4c af d5 5c 4e 1f 0c 00 66 8a 80 60 fa dd 16 00 c0 54 6a 34 1a fb 63 95 aa b6 ed 60 b8 50 01 30 53 04 04 d3 6f d5 56 3c 00 60 85 db 17 ab 9f 7a 08 c0 0c 11 10 4c bf dd 01 00 4c a3 9b 63 f5 bb 25 00 98 19 02 82 29 d7 68 34 b2 69 df be 00 00 a6 c9 ac 94 cf bb 43 37 03 80 99 21 20 58 19 76 04 00 30 4d 6e ee f4 d1 5f d5 3a 17 2a 6e 0c 00 66 42 23 58 11 9a cd e6 ce ea c7 b5 01 00 2c b7 83 d5 ed 8a 59 08 08 52 55 07 59 5f fd 38 50 Data Ascii: @! B@ @! B@Jp8iu0VLL?L\Nf`Tj4c`P0SoV<`zLLc%)h4iC7! Xv0Mn_:*nfB#X,YRUY_8P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.5	50498	35.84.94.41	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:12 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:13 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:13 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:44:13 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.5	50502	172.64.155.119	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:13 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Type: application/json Content-Length: 68 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fb6f585853b2-ATL
2024-04-16 17:44:14 UTC	68	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"GA","stateName":"Georgia","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.5	50501	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:13 UTC	1763	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&ref2=elqNone&tzo=-60&ms=589&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A43%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; _ga=GA1.2.426113818.1713289394; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289440.15.0.0; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398
2024-04-16 17:44:14 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:13 GMT Connection: close Content-Length: 49
2024-04-16 17:44:14 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.5	50504	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453050&PageStart=1713289442223&PrevBundleTime=1713289447454&LastActivity=7078&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 608 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	608	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 93 6d 4f db 30 10 c7 bf 4a e6 49 11 48 76 e2 c7 d8 29 eb 26 e8 aa 6d 02 46 a5 16 a1 69 e2 85 93 b8 ad 45 9a b4 89 db f2 20 be fb 5c e8 4a 99 36 31 3b 8a 92 bb df 9d 73 f7 bf 3c 80 a1 59 80 0e 83 e0 6a 6a 2a d0 11 92 26 10 f4 57 ae 05 9d 9f 0f e0 d4 56 c5 c6 08 c1 71 33 d9 98 28 04 53 e7 e6 6d 27 8e 9b 36 1a 2f cb b2 75 75 73 17 e5 f5 2c 6e 4c 1e 67 cb aa 28 4d bc a2 9f 2e 9a c9 b7 a2 4b e8 c9 80 f7 c3 cb d6 34 fe cd 64 9a e4 89 e4 48 a7 58 20 ce 55 8e 32 8d 39 12 19 cf 12 42 52 c2 52 11 0e 4d db da ba f2 38 2e 8c 52 9c 8f 11 4e 98 f4 38 cd 90 4a a5 44 05 63 8c 8e 31 37 98 ea 70 a0 27 c6 b3 34 23 85 d0 94 21 69 74 e2 59 6e 90 26 6a 8c 0a 91 f3 94 68 65 48 6e 7c ea 45 97 86 bd d2 9a ca 8d ec cc 74 89 24 8c aa 94 73 7f 80 7a Data Ascii: mO0JIHv)&mFiE \J61;s<Yjj*&WVq3(Sm'6/uus,nLg(M.K4dHX U29BRRM8.RN8JDc17p'4#!itYn&jheHn\|Et$sz
2024-04-16 17:44:14 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 35 34 32 34 31 7d 0a Data Ascii: {"BundleTime":1713289454241}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.5	50505	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453048&PageStart=1713289442223&PrevBundleTime=1713289447454&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	1049	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 35 37 32 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 32 62 31 64 35 61 32 33 2d 37 65 61 36 2d 34 34 34 65 2d 61 31 38 66 2d 64 35 63 34 39 31 61 38 65 31 63 65 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":3,"When":5726,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=2&ClientTime=
2024-04-16 17:44:14 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.5	50506	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	1388	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacymain-content&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:14 UTC	246	IN	HTTP/1.1 204 No Content Date: Tue, 16 Apr 2024 17:44:14 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.5	50509	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	809	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Bfz//+xnXWIIpo++OVpdJw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:14 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.5	50503	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	323	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 38 34 37 2e 35 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 32 30 31 32 30 30 30 25 32 32 25 37 Data Ascii: metrics=%5B%7B%22value%22%3A847.5%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%2012000%22%7
2024-04-16 17:44:14 UTC	690	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:14 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 28d4a621dafd48ac vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-04-16 17:44:14 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.5	50507	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 34 36 34 33 34 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289446434,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:14 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:14 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 81 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.5	50508	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 656 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	656	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 34 37 32 39 30 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289447290,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:14 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:14 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.5	50511	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	438	OUT	GET /0jnmtsdzg6p5/7lEyMAosQLMPNV3ciF9dmK/7cc6df4946379ff407d55727a5bc2f46/productUI-docusign-ai.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 283286 Connection: close Date: Tue, 16 Apr 2024 17:44:10 GMT Last-Modified: Wed, 20 Mar 2024 18:00:22 GMT ETag: "9ba65284b01e652f093da5062f7a6487" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 dbadc6c5154c582e1982923a1c4354f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: KsdMdGbvrj3iFGnSwlUoibPCkFQVBJeXIsvgDP5UD20vAWosMwBxdQ== Age: 5
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 04 52 2b 49 44 41 54 78 01 ec bd 7b b0 77 49 59 df db fd 7b 07 18 23 97 19 84 a2 0e e1 f2 72 c2 49 ea 04 95 f1 fa c7 d1 84 01 d4 1c 8d 97 99 78 89 1a c3 45 ad 94 a6 80 01 d4 a0 a6 64 06 63 a2 a5 95 00 5e 52 95 68 00 89 49 38 c1 64 06 49 8c e8 91 01 b5 4e 9d 3f c4 41 13 eb 24 11 98 01 89 3a 46 e5 ae c3 5c 76 9f f5 ed d5 4f af 6f 3f ab d7 fa ad bd df bd df bd df 77 7f 3f 33 fb 5d b7 be 77 af f5 eb e7 e9 a7 bb 43 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 21 84 10 42 08 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaR+IDATx{wIY{#rIxEdc^RhI8dIN?A$:F\vOo?w?3]wCB!B!B!B!B!B!B
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: cd c2 a8 09 aa 45 e0 ce e1 0c ee 1b e1 1e d7 80 85 d9 e2 a7 2b 58 73 35 93 b2 a2 de b4 91 8f 92 de 1a ae 5d 23 2d 48 9f 57 72 98 5b a4 a7 f8 37 ab 89 64 f9 44 3c f9 d9 ee c9 39 b0 83 d4 6a 1c 76 79 e6 41 88 8f b8 36 4f 31 d8 71 1a f1 dc 84 77 af fc e0 fc 36 f1 94 fb 96 07 ab 37 1c ed b9 b9 47 3a cb 71 96 e7 72 5e ad 26 cc bf ed 36 60 0b 04 36 85 db 19 dd dd 27 c4 fb 91 d3 d8 19 b1 46 9c bc 20 a1 17 0e d7 ce 97 14 09 5b e2 f5 ee 7a fe 7a 79 5d cb 33 9e d9 d4 0c 8e db 0b af 3e fd 00 42 b0 59 09 78 77 76 c4 48 1c 04 6f 0e 1f 82 ad 4d 2f 60 f7 5c 57 50 10 f8 7c f5 84 45 ce 87 2f 17 0b 1b 8a 86 25 05 86 a7 f7 dc 2f 7e 88 b4 f7 d2 b4 d6 fe 96 e2 f5 f5 8c 91 6c 08 dc 98 42 d0 1b 81 e4 3c a0 5c 4d a9 b1 96 7f b4 57 5f bf 4b f8 7a f4 e7 1e 28 6f 58 c9 d0 cb ef 51 Data Ascii: E+Xs5]#-HWr[7dD<9jvyA6O1qw67G:qr^&6`6'F [zzy]3>BYxwvHoM/`\WP\|E/%/~lB<\MW_Kz(oXQ
2024-04-16 17:44:14 UTC	11977	IN	Data Raw: 7e 41 42 4c 2d 80 72 80 46 2a b3 32 a1 8c 18 66 cb 81 5f fe e5 5f fe cc 67 7f c9 b3 7f e5 c2 6e f7 94 5e e7 b6 94 81 fd 35 65 92 05 c4 6a 86 ed cc 94 cb f3 51 c0 6c fc 84 10 68 44 36 0b 51 16 6f 99 5a 10 63 49 69 8e 30 95 f2 4e 55 99 50 d3 16 16 4a 35 90 44 36 25 27 b9 54 44 9e 4a 10 43 e8 56 52 ce 63 e0 b2 98 a2 49 c5 94 3f 54 c1 2c f6 dc 99 40 9f 85 03 8b d7 f2 9c 8a e8 4b 0a 9d 4e 1a b2 72 20 9a 39 bd 17 d6 4d e9 12 9b 48 d3 14 5c 9c 05 67 65 9a 95 0f 31 a4 52 0a a5 da 38 fd 29 2c 2a 6d d2 b4 4d a2 1b 49 1d 97 36 70 e5 d0 94 47 a8 42 17 2b 06 02 dd 0a 53 78 a3 66 a7 2a 0d 8a 3b 3c 3b 28 c9 8e 24 8a e7 e8 63 5d 3b 94 65 f9 e8 22 a2 38 c6 a4 8d 7a 85 38 dd 4f dc cc 26 4d cc f4 9e 9b 40 66 de a7 b8 4a d9 8e 57 25 99 a3 d7 aa 17 a9 65 41 82 5d 62 a1 9d ca Data Ascii: ~ABL-rF2f__gn^5ejQlhD6QoZcIi0NUPJ5D6%'TDJCVRcI?T,@KNr 9MH\ge1R8),mMI6pGB+Sxf*;<;($c];e"8z8O&M@fJW%eA]b
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 67 cf 2e 10 29 04 a4 38 94 6b 3f fb ec b3 41 7b 20 92 03 34 6f 40 da 8f fe 80 f6 20 f0 24 41 5b 6a 43 35 68 ab 48 01 35 90 15 52 a4 26 9e 15 fb 25 9e e3 4a 3f 38 1d 1f be a3 06 83 c1 30 42 40 ce 2e 5f be bc 50 06 7e 1b 24 d4 20 f1 08 13 af 83 22 b2 07 95 be cb b7 bf fd 6d 08 e2 9a 81 2d 64 2c 9f 21 05 34 51 20 fb 05 65 92 8d e0 5f ff f5 5f 5d 43 38 43 db b6 fe 9c f3 08 48 cb ed bf ff fe 8d 65 d2 90 87 b1 4c 12 90 f6 b1 1b 4e 3c f1 c4 11 65 1a e8 05 46 50 18 0c 06 c3 4b 0b 23 08 fa 18 7a 10 a7 48 82 f8 b1 12 e8 93 7d 90 03 3a 7b 41 a8 03 92 00 f2 40 04 0a 25 c5 61 3c 16 ca af 5f bf 5e bc 08 48 73 18 8e b1 5e bc 78 b1 8c b2 aa d1 96 ce 60 50 b6 cf ee 97 31 b4 a0 6a 3f 2b 48 02 4f 0c 84 45 0b 5f c9 bd d4 66 7a 5c 35 32 95 7b 2b 86 ba 63 48 83 21 71 45 2d 8a Data Ascii: g.)8k?A{ 4o@ $A[jC5hH5R&%J?80B@._P~$ "m-d,!4Q e__]C8CHeLN<eFPK#zH}:{A@%a<_^Hs^x`P1j?+HOE_fz\52{+cH!qE-
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 83 c1 60 30 8c 47 98 06 41 9f 43 e9 0e 54 60 e0 16 c3 0c aa b0 03 d9 96 f4 86 78 11 f0 19 91 42 bc 07 34 49 30 79 f2 e4 70 4c 04 0a 3d 39 50 42 12 90 c5 80 cf 64 32 d8 75 d7 5d cb 18 76 10 e2 57 49 73 c8 22 60 96 8a 05 0d 82 55 ab 56 d5 46 9d 42 0e 08 24 8b 01 6b 7f ed 2a 75 62 99 c9 b3 1d c8 81 56 8a 82 a2 22 0a 12 84 22 70 23 2e 6c 14 fd 16 75 8a cb f9 b4 69 53 43 4c fb 5b 0f fb 40 58 1f 71 e4 6b aa dc f1 06 83 a1 7f a1 67 e4 73 99 70 72 a7 c8 79 1a 65 5b 9a d9 b2 31 c6 5f 8e e5 c2 07 74 19 a0 d3 1a a6 c7 9a 3e 37 79 19 e8 ed 5c 1d 46 0e 18 0c 06 83 61 3c c2 3c 08 0c d5 4c 50 f8 33 34 48 ab 3e 47 08 69 50 1d 93 4c 06 42 0e 48 78 41 8a b9 73 e7 22 58 18 2e a5 c3 0b 58 2f 5d ba 34 10 11 42 0e ec b0 c3 0e ee 99 67 9e 09 d7 98 39 73 66 81 58 21 fa 03 49 5b Data Ascii: `0GACT`xB4I0ypL=9PBd2u]vWIs"`UVFB$k*ubV""p#.luiSCL[@Xqkgsprye[1_t>7y\Fa<<LP34H>GiPLBHxAs"X.X/]4Bg9sfX!I[
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 97 85 6d 8c a7 67 9e 59 d9 16 2f fd ca 3f dc cb 2d f6 f5 7e f3 ca 7f 76 bf b8 e5 ff f8 99 d6 37 86 fd 13 27 6e eb 9e 5a fa b4 3b e1 03 7f 56 19 73 90 11 0f fe d7 23 ee 1d ef 7a b3 db 61 d6 8c b0 0f 23 1b 97 72 dc c7 89 bb 5e fc c4 6f 43 18 04 e7 fe 8f 3f da 37 94 63 86 f5 f7 fd 75 f4 cc 37 d7 c5 9d 1b 32 81 f6 12 0a 71 c2 c9 6f f3 f7 f3 47 d9 fb a7 3c f7 b7 e0 7b 3f 0d d7 d9 f0 fc 06 f7 a1 d3 ff 3c 5c 47 66 9b b9 37 8c 34 ea 93 18 70 dd 07 72 5f dc 03 86 ba de 9f f6 1f f5 a3 33 20 65 f4 3d c8 3d 63 7c 86 2c 01 f1 59 bc fd 5d 6f 0a 65 c5 30 fd c2 15 9f 0e 44 02 65 e8 7f da 2b 69 05 29 f3 bc bf 06 7d 24 48 fb 09 cf 8e 47 1f 7e 22 dc 1f ed a6 6c da 46 b2 42 c8 ec 3d e7 ef e6 df 13 3d bb 4e b6 04 9e 1f fd 27 fd b8 20 be 43 d4 99 ea 05 0c c6 f4 93 37 2d b8 35 Data Ascii: mgY/?-~v7'nZ;Vs#za#r^oC?7cu72qoG<{?<\Gf74pr_3 e==c\|,Y]oe0De+i)}$HG~"lFB==N' C7-5
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: b0 df 7a d3 ed 8a 9f af 9b 69 d3 36 34 e7 5d 7a aa b9 f8 ea ef 49 dc 1b af b9 59 56 a3 cb fc 7f dd 97 fd b8 8f f7 25 89 7f ea 19 9f 15 7e 00 f4 68 82 80 7f 81 cf 03 e5 32 df 3d df fc 5a 49 af 41 0a 08 b3 5f 3a e1 bb 66 7b 3f 0e c8 c3 d1 9f 38 c4 0b bd 57 b6 02 47 33 76 dc 46 f2 e4 f1 9a 5d 77 94 43 87 4d dd 78 43 f3 7c a4 ad b6 de cc 03 97 95 ff 93 1b ae bd c9 bc fb e0 7d cd e1 1f 3e d0 ec fb ae 3d d3 fb fe 7c 21 1b d4 03 6a a6 59 f8 e6 5a ab 5c 12 64 8e 6f 49 7d 82 b2 d6 b8 ea 37 c7 c0 b1 a0 f9 c5 2f 7e 21 6a c6 3b ef bc b3 1c f8 4c 1f 77 dc 71 e6 fa eb af 37 5f fb da d7 44 bb 60 ce 9c 39 e6 23 1f f9 48 d2 2a a3 90 ff f1 8f 7f dc 9c 77 de 79 02 08 00 58 46 f8 b5 d7 5e 6b be f8 c5 2f 8a f6 80 16 f8 91 16 7e 04 f4 a4 4b 83 14 9a 18 4e 9b 78 08 3a 9c a0 62 Data Ascii: zi64]zIYV%~h2=ZIA_:f{?8WG3vF]wCMxC\|}>=\|!jYZ\doI}7/~!j;Lwq7_D`9#H*wyXF^k/~KNx:b
2024-04-16 17:44:14 UTC	15202	IN	Data Raw: 50 a9 8e 9a bf 07 fc 38 41 fb a2 4e cf 14 3d b1 e4 49 f3 e4 13 4f e1 92 78 71 f0 5b 63 08 13 18 fd 1b e2 f2 b0 10 09 5a 07 4e 85 f7 6b 3e 08 9a 0e fd 1c 44 61 bf e9 39 ce f9 b6 87 5a 53 81 61 79 b9 35 5e 0b f9 96 68 d8 f3 95 95 fc 6f f9 c8 4e 12 a9 16 db 51 47 cf 15 c2 9c 15 fe 02 30 3f fe ee 77 bf 3b b2 f6 c2 a8 04 1b 73 ed a9 be 89 f0 ed 79 cd 6b 5e 63 5e f2 92 97 98 8e 3a 9a 28 ea 7e d1 56 62 2a a8 d9 27 e2 0a bb 51 82 35 00 04 bd 8b 01 c2 b1 8b 01 b4 08 fc 59 26 7c d0 22 50 a6 06 76 eb ad b7 96 78 7f fe f3 9f e5 39 b6 3a 9c 3b 77 6e 9a 1c c2 f9 d4 bc 79 f3 7a 00 12 94 79 83 8d b6 44 3d 68 10 e0 7e e1 c2 85 92 06 00 43 8c 67 a3 1f 02 6c 71 68 a3 89 81 5c 7f fa 13 9f de fc d8 8f 1d fb 2b e5 7b a0 a6 1d 41 73 0a 13 97 c0 8c de ed 40 eb 13 a8 05 a1 d5 56 Data Ascii: P8AN=IOxq[cZNk>Da9ZSay5^hoNQG0?w;syk^c^:(~Vb*'Q5Y&\|"Pvx9:;wnyzyD=h~Cglqh\+{As@V
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 88 67 74 5e c8 f8 d0 4e 40 de 14 f4 f1 0c 42 32 e2 43 d0 26 c0 80 30 78 86 07 61 f2 84 55 95 1c 04 62 5c dd 77 28 07 b6 f9 48 83 32 18 f7 ee bb ef 4e e5 ea f4 d0 52 d0 fc d0 9e 9e 76 a2 a5 15 78 a4 a3 3f 09 f0 0d 5e c1 3b e2 22 3f 3a ee d3 75 d4 7c 53 b5 14 cf b5 7a 77 1e 4f 87 e9 15 6d f0 c3 b6 ca 09 73 01 a4 07 ff 25 75 76 3c a3 66 46 9b b0 aa 6d 6d 99 8e e5 71 e2 5b 72 8a a7 6d e4 9b f2 d5 65 e7 e5 8c 92 47 29 4e 29 9f b6 f0 3c 2f 0a 15 b4 25 66 18 ef 51 f7 38 0f 94 70 da 27 e7 f5 07 a0 80 f6 c1 18 64 9f d1 19 60 1b 6f 4d 75 2e f1 96 13 fb 83 82 0b c3 c8 9f 2e a7 8d f7 65 e1 a1 89 b0 f2 cc d5 64 08 90 10 c4 9b 56 a1 a9 9e 8e e7 f9 2a 3d f2 a0 6f 80 12 b5 d9 ed 97 d2 22 2e 85 4e ac aa b7 39 35 24 4f 88 37 aa 53 41 e6 cf ba 43 b0 6d 2a 43 f3 52 6a 9f a6 Data Ascii: gt^N@B2C&0xaUb\w(H2NRvx?^;"?:u\|SzwOms%uv<fFmmq[rmeG)N)</%fQ8p'd`oMu..edV=o".N95$O7SACmCRj
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 79 8c ee d0 0f a7 dc 41 a3 3c a7 aa 5b 17 48 09 05 76 04 b6 7f b1 1a 60 1f 37 5f eb 5f 2c 34 74 17 02 e3 73 4a 06 22 28 3e ce 65 35 27 42 b4 b1 9a f4 f3 a1 db fe d5 3e e4 9d da 4a ff 65 b3 7b 41 94 85 fd a8 00 f5 ac 90 dc 0f 59 c9 58 be 9d 65 17 14 63 fb 79 bb c6 92 bf 95 f4 9e 36 94 3b e5 3c 91 44 f4 19 50 ad 64 84 20 29 7d cf dc ec a2 59 56 92 e2 96 67 00 3e 21 f6 00 39 10 28 41 f3 ed b7 23 6f 1c ed 99 1f cb 71 93 0f 82 e9 73 f0 b9 bf 0b d3 8c 74 b4 2b 1e 2c 7d 6f 7a 32 17 da 17 ad 7e e7 8f bc c9 d2 ae 75 d3 45 b2 18 b8 c5 6f e7 65 0b 1f 7f 7b 06 f5 37 ff ed 1c 87 96 07 08 e7 f8 f6 88 37 bf 1b 8d 7b f2 6e 09 97 dd 7b bb bd f2 6b 2c 63 31 11 0e d1 6e 78 bb 0c aa 59 2e f2 b9 dd c9 0b fb 8b 27 5b 5a 8e 70 6d 27 0c 30 d0 d4 b5 f4 38 47 71 58 32 a0 e1 8a 87 Data Ascii: yA<[Hv`7__,4tsJ"(>e5'B>Je{AYXecy6;<DPd )}YVg>!9(A#oqst+,}oz2~uEoe{77{n{k,c1nxY.'[Zpm'08GqX2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.5	50512	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	445	OUT	GET /0jnmtsdzg6p5/7LrypGfM1BdddpRfwGZrze/3a9135c9a49064c815ad7289b052772a/woman-smiling-and-presenting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 120484 Connection: close Date: Tue, 16 Apr 2024 02:54:21 GMT Last-Modified: Thu, 04 Apr 2024 16:00:29 GMT ETag: "a1d906dd351c2b8322a3c977e5323c21" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 cf7baa53d8856103ba48e482de173486.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: tIlrGnWWaXMeNuyuFHqoHTfhG29tbpCemgXrxcxTKd8fA9wBRmHwkg== Age: 53394
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 04 03 03 cc f0 f7 c8 ef f5 db e2 e2 db e3 ea df e6 e9 d0 f2 f9 e1 f2 f9 d9 dd df cf de e4 d2 e1 e7 d5 e4 e9 e8 f1 f3 f7 fe ff d8 e7 ed e0 ee f2 33 6c 01 dd e8 ef cb da e1 16 0d 0a c1 c6 ba e3 eb ed f0 fa fe 3b 74 01 be c3 b6 09 0d 0f 43 7b 02 2e 64 01 d0 dd dd ca d7 db 2e 45 01 d5 e0 e0 e9 f6 fa b7 bb ac f5 de d0 bb be b1 c6 c9 bd 4e 82 04 21 17 13 79 37 1c ae b4 9f f4 d7 c8 c4 b5 fa 25 20 20 b0 ba a8 3f 4c 02 9d 03 04 c7 cd c3 91 03 03 b9 03 0d ab 01 08 26 5b 01 b0 ae f5 c4 eb f0 59 8a 0c 29 29 2e c7 d3 d6 94 60 44 c0 ca ca 8b 54 3a ca d1 ca 73 44 28 c3 cf d0 ab af 98 96 8d 78 8c 87 73 b4 c1 b0 9b 94 80 d8 3f 12 81 4a 31 84 02 02 81 Data Ascii: PNGIHDRRcmEPLTE3l;tC{.d.EN!y7% ?L&[Y)).`DT:sD(xs?J1
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: fa 06 f7 bf 35 6a 40 92 48 a5 92 40 22 66 b3 1d 49 20 c9 e3 a4 05 6d 4c bc 41 fd 07 4c 32 66 6b f4 35 53 a4 9a ea 78 f4 9b ac ae d6 c1 bc c4 91 50 6a 1d 5d ee 40 a2 0e e8 3d 84 7b 7d df 08 e7 d3 9e 0c ad 20 6d e9 ec f4 44 91 bb 2b 3c 6f 4c 0b b3 ab 7f 72 71 1c 1c 3c 43 0c d9 5c 6b 2a 02 d9 92 00 49 00 49 c5 98 3d b7 3d 8f 90 f0 68 44 7a 25 d1 e0 b2 2f 0d 46 9e d8 7c dc 20 8d 6b 20 4f 57 c2 77 1e 29 b3 cb ac 08 24 45 22 c5 6d 19 b4 0d 19 e3 d2 79 e4 96 91 d9 20 f7 bc 0b da 66 60 41 f5 54 39 f0 94 9e 3d 7d a2 8c 47 3c 0d 20 5e 0a 16 13 de d0 22 71 a2 4b 12 cb 72 42 e1 01 29 84 cc 20 4b e5 3b 8f 7f 28 0e 39 5e 41 c8 86 43 ee dd 3b 38 f9 96 f4 d1 44 87 e4 c1 bc 46 2d 72 76 54 91 44 c8 96 9c 86 23 82 24 d3 a6 49 3e 34 9e af 8e 3b 91 11 c3 c0 a4 7f 9f 7b a1 27 Data Ascii: 5j@H@"fI mLAL2fk5SxPj]@={} mD+<oLrq<C\k*II==hDz%/F\| k OWw)$E"my f`AT9=}G< ^"qKrB) K;(9^AC;8DF-rvTD#$I>4;{'
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: db b7 05 91 92 77 7e 85 45 16 81 f4 40 3b 0f 1e 67 ad f6 88 85 c5 cd 21 77 60 76 57 00 69 01 9b 24 12 c6 c0 b1 37 d4 6e 37 b8 fa 0f 76 0e b9 99 ba 0b 40 32 f4 37 dd 1f 03 47 82 6b a1 1d 05 48 1a a4 0f b7 f4 3d b5 b1 9b 36 a9 44 9e de 21 90 20 72 b2 3e c9 8c 26 80 ac 0e 5d 89 de ec c5 6c b9 b3 cd 2a b5 0d f1 c8 de e0 e9 0f 55 14 a5 70 48 9e 5b cb 8c 17 68 07 90 b7 25 83 f4 fb 77 3e 70 9c 47 18 24 1d f2 b8 1c 90 2b 06 a4 35 22 05 a4 88 14 8e a0 47 44 fa 7b 21 c9 13 97 c5 6e 4c be 09 22 fd 16 6f 6c a4 85 05 6d 35 46 9d 76 66 35 00 d2 1d 12 43 2a 2e 1e a4 43 2a cd 26 70 a2 32 24 52 4b 38 16 50 94 1b 86 fc 83 b8 0c c6 7c 5a 43 20 97 a3 5f db 4b 93 01 24 65 40 de e9 11 fb 91 19 07 92 43 7c 60 74 78 09 83 db 3d 32 82 80 3e e2 40 f6 eb 40 d1 4f aa 80 23 23 b6 03 Data Ascii: w~E@;g!w`vWi$7n7v@27GkH=6D! r>&]lUpH[h%w>pG$+5"GD{!nL"olm5Fvf5C.C*&p2$RK8P\|ZC _K$e@C\|`tx=2>@@O##
2024-04-16 17:44:14 UTC	2016	IN	Data Raw: 66 0b ed c9 7b 3b a4 a0 14 9a 2e 6a d4 b9 b4 21 90 4e 24 45 24 40 fd f6 83 74 48 34 38 a4 68 cc ae 98 a4 64 18 eb 61 5c 06 69 8b c4 48 43 df a7 7f 11 48 39 24 f6 1a a2 c2 de f6 4d e2 51 48 06 57 24 2b 24 77 84 8c 23 d1 ab c4 6b 36 7b 64 a6 91 db 83 76 8c af 7b 12 9b ab 20 6f 95 d9 42 95 32 86 5d 94 73 c6 11 8a e0 d0 55 1c 72 ff 55 2f 8d 97 a2 86 e2 3e 44 8e f6 24 8c 38 62 fb c2 93 0f 47 b0 06 9c 11 af 07 f4 fe 4d 02 09 c2 bc 38 3c 34 60 1c 65 90 71 f0 61 e4 e0 71 f8 08 5f af d8 19 9d 5e 59 9c 02 90 47 97 5b 13 23 17 9a ad 56 63 6c 8c 89 e4 ea ea 50 63 70 f5 43 85 ee 64 f2 e2 41 8c 01 01 40 31 28 0c 79 b2 27 87 42 90 60 ca 1f 4d 23 ee 71 b1 2d aa 85 3f 26 85 75 a9 f2 76 0e 69 22 03 46 cb 64 6a 44 32 78 74 d8 26 91 9c 5d 2c 40 7e 83 53 40 8a 49 c7 ec 5d e4 Data Ascii: f{;.j!N$E$@tH48hda\iHCH9$MQHW$+$w#k6{dv{ oB2]sUrU/>D$8bGM8<4`eqaq_^YG[#VclPcpCdA@1(y'B`M#q-?&uvi"FdjD2xt&],@~S@I]
2024-04-16 17:44:14 UTC	14368	IN	Data Raw: df 41 83 2c 11 db df 59 0d da 19 4c 25 e7 8d 55 80 08 22 49 8e 96 37 e5 bb b5 6a 74 c7 be 87 f0 5b a9 8e 63 74 f1 87 c9 20 cb 50 cf 1e 92 88 13 87 02 1a 2d f2 bc 1c b2 8d d6 c6 26 6d 94 db 98 4b 99 1d 45 f8 e6 4b e8 98 48 8a c8 5c b6 73 98 e3 37 44 91 0d 3c a2 d5 b4 69 1a 21 5c f1 52 91 d8 05 c6 07 8e c3 7f f1 14 ca 00 f2 93 f5 f6 da fc 42 cf c8 c9 17 47 7f 7e 0e 08 12 c2 c6 d0 d0 20 9c 71 f5 8d c9 a5 16 90 1c 62 c1 9d 73 36 31 87 c8 23 51 b4 ae 76 0a 69 16 35 26 8e ce eb 29 71 27 75 8b 51 c1 d9 15 d1 da 25 f6 9e 2b 57 d9 35 7b f4 84 0d a5 2c 92 48 da 23 15 b3 6b 40 52 df d4 4c d2 12 54 96 b0 ed 96 14 ee fa 9f bd e5 8f f7 68 90 2f 70 51 85 e5 ef 23 07 68 89 14 45 60 e4 89 c9 a2 64 7b 0c 33 4b 73 45 e3 1c 51 20 b9 55 6a 7b db 83 9c 51 f2 44 4f 35 5a 8b 6f Data Ascii: A,YL%U"I7jt[ct P-&mKEKH\s7D<i!\RBG~ qbs61#Qvi5&)q'uQ%+W5{,H#k@RLTh/pQ#hE`d{3KsEQ Uj{QDO5Zo
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 87 4c b6 60 8e 43 3f 6c b4 1c a7 80 75 af 3e f5 7c 92 49 bf f3 71 bd fb d4 cb 60 68 1e e9 e3 b1 3f 25 4f 5e 40 c7 20 98 76 0c 76 8d 0f ec f8 d4 0c 66 0e bb 59 2c cf 8d 14 eb c5 39 02 6e 98 34 1e ad 52 f3 29 2d 4a 4a 3a fc 98 8e ea 89 81 47 ef fd f0 7f 04 d8 70 28 67 ed aa d8 6c 6a ee 59 07 c8 56 b7 32 91 6c 4f 75 87 91 41 45 1a 68 99 52 30 d2 2c 82 8c 61 38 c2 bf 2a ca 01 2f cd 0e b4 ca 8c 05 c6 26 91 1a 45 02 e4 ee 95 99 a9 8d 99 f4 49 9a ce 5e 05 91 08 24 9f 5a 55 1a 59 56 76 91 78 5d d8 59 73 99 82 6e 9c 34 04 5a 2e 52 9f f2 83 f1 df a3 92 46 49 a4 0d 3d 70 d2 12 4c 0b ac f1 d9 cb e3 a3 eb 94 ec a7 88 5b 36 da ed dc c8 c8 54 66 66 26 9d 24 71 52 9c 43 1d 9d db c6 7f cc 18 91 76 95 7e f0 a0 35 55 5e 3a b3 f5 cc eb ac 75 7f ab d9 1b de 00 9a e0 f9 06 5e Data Ascii: L`C?lu>\|Iq`h?%O^@ vvfY,9n4R)-JJ:Gp(gljYV2lOuAEhR0,a8*/&EI^$ZUYVvx]Ysn4Z.RFI=pL[6Tff&$qRCv~5U^:u^
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: ce 19 a1 24 b2 6b ad 2a 6c 39 8d 3c 19 05 a2 87 55 3b 0e a4 b6 ef 1c 46 fc 04 f4 58 8b f1 44 3d cf 99 19 66 c3 ae fb bb cd 4d a6 93 32 d3 6e ee 88 5c 8a 5d 4b dd 74 b5 72 5b 65 3e 38 e2 dd b6 7a 01 49 24 01 f2 96 a5 e6 86 f4 31 00 f2 5d 83 83 04 42 35 a1 05 57 03 d2 16 1a d2 70 4f 13 c8 71 25 03 e3 d9 2c e5 12 06 a4 70 dc 14 91 48 e4 77 13 74 0d 9a 18 63 37 47 26 87 8c 0a a1 ee e2 42 65 56 f1 c6 59 9c 6b e9 63 b9 3c 07 a7 b3 44 78 8a 0b 58 10 be 30 c7 97 61 cc cb d3 0c 80 84 3c 80 54 8e 8b aa 5d d6 12 63 b3 f5 6a d4 96 1a b8 e0 bf 59 bc 70 3b 90 f3 6f 7b c5 4b 7a c7 9e 5b 6c 6e 6c dd b8 61 6c 3e fb 15 cf a6 47 73 37 47 dc 9b 6e bb 08 69 23 e3 be 90 7c 50 a3 de cb a6 d2 ea a0 69 79 f5 f7 3e f1 04 c2 69 46 dd 8b a1 8f 0d 05 17 01 97 7e 04 40 7e e2 f1 bd 7b Data Ascii: $k*l9<U;FXD=fM2n\]Ktr[e>8zI$1]B5WpOq%,pHwtc7G&BeVYkc<DxX0a<T]cjYp;o{Kz[lnlal>Gs7Gni#\|Piy>iF~@~{
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 1e aa ad 1b 93 f7 23 7d 13 e5 4a b9 d2 8c 8c d4 60 51 23 9f 8f 60 af b1 d8 ab f0 18 ea 9d 48 84 a7 c3 03 3d e5 07 c8 23 35 0c 37 a8 dd 26 fc 53 09 27 26 22 ef 87 47 cf a9 79 49 d7 ec 2f a7 91 3a ef 37 f5 e3 f4 94 43 9d 4e 3d 62 f8 b5 6e ff 84 fd 87 53 cd ee 59 94 be 35 47 87 a3 a3 35 48 a5 a3 d9 e5 e7 06 80 bc 85 2e 22 2c 3a 58 e3 ba e5 0f 8f 67 eb 8d 46 6c 4e a5 d9 0c ec 35 60 60 b3 41 c3 0b fa f0 64 5a a7 fd b4 19 29 3a 7f 23 95 bb db 9f dd 21 07 88 9a 06 06 d3 46 79 ca 0c d4 51 8d 9a 3b 1d 53 c0 8e 2b 22 3b 5a 9c e9 68 a4 ea 72 d4 5c 57 65 63 7c c6 6f b0 04 b4 bd c3 14 72 77 50 43 33 56 56 d7 11 4a fc 99 85 a8 76 db 8c 2f 15 6e aa e2 c0 a2 e2 1e 91 7b 40 fe a4 91 db a8 97 4b 8d 0d 9c eb 9b b1 d5 72 29 53 ba 7a 95 45 e8 32 00 62 a4 19 68 e3 4a 69 b5 84 Data Ascii: #}J`Q#`H=#57&S'&"GyI/:7CN=bnSY5G5H.",:XgFlN5``AdZ):#!FyQ;S+";Zhr\Wec\|orwPC3VVJv/n{@Kr)SzE2bhJi
2024-04-16 17:44:14 UTC	5796	IN	Data Raw: ae e5 90 9c fb 58 e3 e1 3b 47 b2 aa 6f d8 9b 1b 22 4d 6e 7b 6a b8 8c 4c 3f 75 39 9a 76 0f 66 e7 73 20 9d 47 2e 7b 29 9b a4 bf d7 22 4f 90 3f da 75 42 a4 d8 1b 90 b1 e8 fe 78 e7 ad 11 af e1 51 43 88 0c ca 21 c6 b4 ed 93 39 0d 2e 52 46 1c ee b7 e4 03 59 e5 d1 87 5a 02 47 90 f2 0e 63 a9 47 a2 d3 58 78 63 f0 e8 4a 7f 8e 8b 43 c8 2b 6e a3 12 49 7c 72 7b ab bd e7 f0 e3 0b 75 1f 78 ee 4d 6f df 43 a2 fa dc 95 97 4d d8 b6 fa c4 e4 27 70 48 94 36 f0 b5 aa 0f 10 52 88 a4 f8 83 c6 09 e0 2a 87 87 47 0a 43 e7 f1 36 1a a5 34 01 62 e6 91 31 84 63 d7 5e 4c c9 0d 20 83 48 de 85 24 4f 8e 23 aa 02 19 48 06 97 92 3f 04 92 7f 67 f2 9c f4 85 be 3f 8b 30 c9 89 f3 56 2a 10 f5 0f 1d d4 2c 66 87 ac 16 5e 41 30 53 46 e4 27 00 e9 72 20 d7 b3 c6 e2 ee 44 7a bc 76 1e 81 cf 81 14 8e 8c Data Ascii: X;Go"Mn{jL?u9vfs G.{)"O?uBxQC!9.RFYZGcGXxcJC+nI\|r{uxMoCM'pH6RGC64b1c^L H$O#H?g?0V,f^A0SF'r Dzv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.5	50510	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	435	OUT	GET /0jnmtsdzg6p5/7hPNoVpK42WsofxMBKVelX/99d08eabfa85820f15fcf7c6cc7ed73c/two-people-meeting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 124834 Connection: close Last-Modified: Wed, 20 Mar 2024 18:06:00 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 15:57:12 GMT Cache-Control: max-age=31536000 ETag: "9c4968ff679bac7c9e4cc57772c759db" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 214d8ace1e09cf551a2d2428ad0889a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: 2qwwQ4FZ6vKIRup3nyuKu0pS7e7GJNq6XB5UFISD8mgrvRXO31RvZg== Age: 6423
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 91 00 00 01 ec 08 03 00 00 00 bd a1 06 7b 00 00 03 00 50 4c 54 45 00 00 00 e4 e5 ed 0c 0f 12 e6 e8 f1 e0 e2 ea 0a 0c 0e 0f 13 17 13 16 1b d3 d7 df 15 1a 1f d0 d3 db c4 c2 c5 cd cf d6 db dc e4 1a 1e 23 30 21 1a aa a9 a5 cb cc d2 b2 b1 b0 a6 a5 9e 28 1f 1a c9 c8 cc c2 be bf 20 24 28 c4 c6 ca b4 b4 b5 bb 86 59 36 26 1f b7 b8 ba 20 1a 17 be 8b 60 bd b7 b5 ba bb bf c0 ba ba a0 a0 97 b3 bd c5 c2 90 68 fc ae 65 3e 29 1f ae ad aa bd c0 c4 4f 1c 10 d6 75 2e b6 82 57 e9 cd c4 15 11 0f f2 f6 ff db 7a 31 f8 a3 54 b0 7c 53 ba b3 b1 f2 98 47 51 28 1b a5 6d 46 a1 66 41 1d 14 11 f6 9e 4d ea 8a 39 29 15 10 fb a9 5b 43 19 10 d3 de f5 b7 7f 50 4e 32 23 36 17 10 c2 c8 d0 ad b7 bf 22 2a 35 b2 78 4c ac 71 48 c6 97 70 1b Data Ascii: PNGIHDR{PLTE#0!( $(Y6& `he>)Ou.Wz1T\|SGQ(mFfAM9)[CPN2#6"*5xLqHp
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 0a 36 d7 8e cf 24 32 20 52 ef d3 36 08 c8 0c 60 92 6a 7d 1d 6e 7b 8b ca 7f aa d6 8d 1c 86 72 b4 e6 d6 f3 17 2f c0 e4 4b 96 c8 c1 6e 25 d2 37 63 28 44 31 34 df 6b 3b e2 4c 15 3d c7 ed 95 14 59 5a dc ae a9 df 76 07 7f 20 d9 e9 02 6f 19 46 22 b0 f9 03 cd f9 2a 95 0a 9c f6 ce ce 13 22 f2 c9 f7 20 92 fa 08 64 17 e1 ae 0f 16 e7 96 10 eb 64 73 d0 d1 ca 57 cb 95 c5 d6 42 61 aa 00 22 27 0b 53 e9 78 9c 25 12 02 69 48 f2 4c e2 10 65 c9 2f 61 d3 9b 69 fd 47 13 c4 36 46 64 f4 b2 86 eb 03 42 24 0c ef 5d a3 5b f5 7e 78 2e 64 41 d6 8b 6b 04 a1 b6 d6 e5 62 1e a9 d2 c5 83 8f d0 49 56 b4 74 e1 c1 83 ef be bb f3 d1 47 77 6e 7f 7c e7 c6 fd b9 39 fc 8b a2 cc 6a ec 7c 2a 26 fb 2a 02 47 76 d6 34 ff 43 ea ca bf ef e9 a4 ea 23 2c b2 32 32 0c 58 a4 3b 06 cb b0 fc 82 54 86 2b 99 de Data Ascii: 6$2 R6`j}n{r/Kn%7c(D14k;L=YZv oF"" ddsWBa"'Sx%iHLe/aiG6FdB$][~x.dAkbIVtGwn\|9j\|&*Gv4C#,22X;T+
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 30 66 af 45 95 c6 fd 72 d3 cd 43 b1 cf 15 c8 19 88 94 e4 38 a1 b6 89 b7 61 d2 14 00 c1 23 44 5a 20 21 f2 1d a3 92 fb de 3a 54 a7 6d b8 30 a5 c8 96 5b 70 c0 c7 bc 17 57 2e 1d 57 74 ea 8d ad 0e 32 fc b9 bd ec 30 91 d9 d1 c7 3a 40 c7 5c fa cd 3a 83 71 b8 80 ea 26 d2 e3 bb 04 c8 b5 88 b4 22 a9 44 5a 56 bc 00 67 dd 84 e1 aa d9 ec 81 e6 39 02 03 17 ec 7f 6e 2f f7 f6 76 f7 f5 90 44 c2 a3 dc 75 0d c9 91 43 19 39 3c 4d 58 43 92 5c 88 c4 38 d7 a5 1a c9 d0 85 86 e2 e9 a6 21 39 b9 7d 62 61 02 d7 ec 44 32 2a 7e 8e 96 7d 2c 22 85 47 9e 57 9e c4 64 5b 9b 0c 25 8d 68 05 41 a7 8c 42 a4 4b 90 6b 7d 64 71 0e c1 f6 c2 0d f2 3f 6e 27 11 78 1c 91 ad 8e c8 0d bc b6 41 d2 b8 68 07 a2 be 3a 24 f9 3d d5 3e 9a 48 8f f6 e4 15 f6 ec 2a e9 99 3b 1b d9 d4 8b 52 ce a6 a8 32 bf 16 35 cb Data Ascii: 0fErC8a#DZ !:Tm0[pW.Wt20:@\:q&"DZVg9n/vDuC9<MXC\8!9}baD2~},"GWd[%hABKk}dq?n'xAh:$=>H;R25
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 96 2c da 94 26 37 7a 8c fc f9 85 df 4b 8b 40 67 2c f8 4b 4d 59 61 b8 ab 27 53 93 a3 ee d8 3a 8c d3 ae 2a cb 59 61 30 03 91 60 98 cb f5 f4 0c b6 d7 b7 f0 1e 71 a4 a5 da 88 e4 94 ea 26 11 f9 13 88 bc 5d 0a e9 fa 28 c5 dc 0c 91 bd 65 35 64 47 a3 33 1b 26 85 d1 15 e5 b4 ea f2 5c 0f 8f 34 a1 79 e1 c7 97 0e f9 78 61 c8 fa 39 00 b2 03 20 61 be bd 6b c0 80 54 b6 83 cf b6 e4 86 74 fb bc 22 91 ee b9 83 51 14 02 ca 99 e7 c1 e4 7b af 3e ef b2 37 8b 48 ca 3f 84 65 22 d2 cd 89 44 d2 22 91 9f 78 fd cb cf f4 f5 18 2f 50 ba 46 fa 01 49 a5 44 5a 3a 64 22 79 7a d4 48 03 d2 88 7c 95 4a e3 25 44 8a 49 a5 33 ee b5 95 d7 ec 32 22 37 dd 5c 74 db 50 b4 d0 c6 f3 b0 8c d8 7f ec f8 23 bf f9 d8 bd 36 86 1c 20 17 ad 99 68 44 4e 38 6d d9 9a 35 3b 8c 48 b2 6d 32 65 88 c4 4e d5 31 9b 17 Data Ascii: ,&7zK@g,KMYa'S:*Ya0`q&](e5dG3&\4yxa9 akTt"Q{>7H?e"D"x/PFIDZ:d"yzH\|J%DI32"7\tP#6 hDN8m5;Hm2eN1
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 7a 96 13 91 54 ee ad ea a4 31 c9 8f b0 74 20 13 9d 74 07 fe 24 22 c5 60 50 2f 11 a9 84 82 82 24 78 38 69 d9 01 ae 00 16 eb cd 51 7d 6c e9 35 ea fa ba 55 fd b1 16 35 71 2b ba e4 b5 c1 b0 fe ec 29 75 f5 23 b9 0e a4 94 cc a6 ba b3 65 10 9f 0d 90 90 18 3e aa 2f 8f e7 81 a9 41 32 b4 eb fa a2 0e 33 4c df 2b 7d 84 c5 f7 c8 a6 bc c7 b9 84 50 69 25 76 76 80 12 22 a3 45 af 9d 0c 11 07 48 b3 a2 02 be 2b 99 66 61 31 e4 58 8d c4 9c 48 ff 48 aa fd c7 24 f2 0f cf 75 1c 65 a1 cd 42 48 6e 22 6e 54 d1 c7 91 d4 1e 59 24 29 41 72 95 86 ea 60 09 91 87 6f 00 53 ef 46 8b 44 9e 62 44 5e 71 fc f7 1f fc e0 07 2f 5d 70 eb ac 4b 6f bd fb c1 1f dc b3 62 8c 46 72 f5 84 90 84 c9 0d 63 25 12 74 8e fc ea d2 59 8f 3e f8 c3 ef a3 92 f3 3f bf e7 ca 62 a6 1d 34 d2 8e 65 d4 f1 0c 56 1c 47 11 Data Ascii: zT1t t$"`P/$x8iQ}l5U5q+)u#e>/A23L+}Pi%vv"EH+fa1XHH$ueBHn"nTY$)Ar`oSFDbD^q/]pKobFrc%tY>?b4eVG
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 17 e5 4c 5d 33 74 fc 38 88 94 e7 76 99 c4 9c c8 f7 8b c8 81 2e 92 93 13 93 f7 76 22 a7 60 93 f3 40 d2 1c b7 11 59 5e 86 41 e4 48 e5 24 5f 1d 89 3e 06 f3 85 24 7e db 34 92 af 36 74 16 24 27 af 95 46 ca 3c ae 49 6d 6b 63 e9 03 0d 52 48 69 24 96 ee 8c f6 30 1a c9 cf ee c5 3f 22 d2 c3 6c 49 64 cf ee d3 f8 7c 74 9c 81 0a b4 40 e4 60 27 72 50 00 d2 e6 cd d5 4f e5 21 26 25 90 7c 8c 61 07 11 22 4f 53 1b 09 90 b2 40 24 16 4e 68 67 aa af c3 81 53 36 13 2d e4 26 be 09 db 87 cf fe ec b7 c4 3f 36 88 4e 13 62 2c ec 71 22 53 22 69 4c 86 14 39 72 cb 5c 76 46 1c 2f 37 75 14 94 06 c4 7a c6 08 73 e8 06 53 a7 2a 75 3d 53 d1 12 63 c8 44 64 37 d8 84 41 63 12 91 c4 ec 57 56 cd 45 6f 73 dc 88 24 46 55 61 52 f0 0c 92 09 98 cf 48 32 f1 e5 0b 9e 79 e7 94 af 5f 61 71 13 0f 4c b9 55 Data Ascii: L]3t8v.v"`@Y^AH$_>$~46t$'F<ImkcRHi$0?"lId\|t@`'rPO!&%\|a"OS@$NhgS6-&?6Nb,q"S"iL9r\vF/7uzsS*u=ScDd7AcWVEos$FUaRH2y_aqLU
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 94 d9 44 d4 f6 6e a4 fa 91 31 51 b7 bb e4 44 16 40 76 15 90 fa 18 29 8c 58 cc 12 b3 00 19 41 9b bc 46 ee 88 7c 4a 24 06 19 40 62 92 28 97 7e 38 3d 6c d3 04 93 1f fd db 53 27 49 bb 51 1b 28 0a 49 cf 75 60 32 d7 24 d3 5b 1e 9a 27 d7 b7 da 78 23 45 cb c4 e4 64 98 dc 33 ff f3 51 88 44 16 b5 f9 88 41 76 e4 6f fc 5e aa 92 73 d6 9a 64 9e b8 4b e3 57 a6 51 ad 38 a4 d1 61 fc 71 37 06 d5 f8 2d e2 f6 eb 85 58 28 a0 54 e0 ae 84 6d 0f dc 55 b5 89 49 4e 07 92 82 24 48 9e 7a 93 75 3a 4a 44 a6 cc 2b f5 17 0c 5f 5c 12 0e 33 94 e7 1e 33 8f 04 49 1a 74 74 52 0f cb 6a 8c 48 96 10 0e d0 9b bd 6c ba e3 bc 35 2b ba 83 e4 93 e3 0c c0 44 a3 6e 13 7a 62 97 4f 4e e0 31 55 34 87 c0 20 89 8c 6a 3e f8 24 9f 8c 49 e5 37 13 cc 1e 7f bb 2c b6 e9 db b1 63 f5 9e 3d 56 07 90 b4 61 7d 7f 9b Data Ascii: Dn1QD@v)XAF\|J$@b(~8=lS'IQ(Iu`2$['x#Ed3QDAvo^sdKWQ8aq7-X(TmUIN$Hzu:JD+_\33IttRjHl5+DnzbON1U4 j>$I7,c=Va}
2024-04-16 17:44:14 UTC	10146	IN	Data Raw: 5b 8a 77 2b b9 da 27 52 fc 8b 48 95 42 f9 8b 40 12 26 5d 0e a4 23 e9 ca 36 e9 f7 8a 22 70 cb 1b c9 cf 23 2b af a1 f1 b9 94 92 22 27 12 79 d0 be ee b7 df 00 c9 cb 2e 93 4f 22 4b 39 a7 4f 98 de 13 ed 32 bb d8 b5 06 22 1b 26 ae 00 c8 e5 4b 0e 1f 9e 75 78 c9 81 89 98 a2 11 49 e7 d2 7a 96 13 9d 49 fb 96 cb 90 d4 2b 34 85 24 6a 68 68 da d1 8c 0b aa 28 c9 4d 6c 3a 93 a2 12 18 b9 fe f0 dd ef ae db f6 db ad 7b 17 f4 bb b5 09 ab 93 43 fa 01 93 8a dd 00 a9 bd 1c 15 b3 2d b3 66 fe 0f 24 fa 76 8f b2 47 81 9b 61 44 57 c9 1c c9 aa 0d 23 f1 18 a1 5a 44 c6 5d 50 4e c7 27 17 cd ea a9 d0 dd 33 c6 67 e4 ac ca b6 73 bd a7 9c d4 78 2a 48 b4 46 56 89 e4 43 10 99 3d 52 ce 47 62 93 bb 94 c8 50 34 22 79 02 c9 d9 53 77 da 9b 63 fd 4d 0e 8f 3f fc 00 bb 47 b2 c9 4a 69 9d 0d 41 bb 52 Data Ascii: [w+'RHB@&]#6"p#+"'y.O"K9O2"&KuxIzI+4$jhh(Ml:{C-f$vGaDW#ZD]PN'3gsx*HFVC=RGbP4"ySwcM?GJiAR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.5	50513	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	439	OUT	GET /0jnmtsdzg6p5/1tfVMQlUQ5vXChMqZ4Medl/cc629beb987d310b19d2657671ec6daf/productUI-docusign-clm.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	512	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 394714 Connection: close Date: Tue, 16 Apr 2024 17:44:11 GMT Last-Modified: Wed, 20 Mar 2024 18:01:13 GMT ETag: "9da4789e0313a20dd4dbc19adbcfb333" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 cdebf0009712844928e9487620fe17f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: JIoqTpVI-15s3EcIbxJEiWtZRPFAF8d90nUFyeieaLImsM5TbmEENw== Age: 4
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 08 00 00 03 06 08 06 00 00 00 7f 34 b6 e4 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 06 05 6f 49 44 41 54 78 01 ec fd 09 78 65 d9 59 1e 8c 7e eb 9c a3 92 aa 4a 73 49 a5 ae b2 aa 5a b4 55 c6 6e d9 0d 8e 80 e0 81 58 90 0b c4 c0 cf f0 27 e5 c4 0e 26 98 00 81 10 92 90 e4 0f dc cb 7d 2e f2 13 6e 62 08 61 0a 43 70 f2 c7 80 b1 21 d6 13 ec 60 87 39 46 10 c0 10 47 d8 6e a3 b6 e9 96 cb ea 6a 51 d5 aa a3 d2 58 83 86 73 ce fa d7 bb be f5 ed fd ed 75 f6 51 a9 bb ab ed ae ee f5 56 ab f7 b4 f6 9a f6 de 67 ad ef 5d df 60 28 21 21 21 e1 2e c0 5a 6b ca ce bf f5 ad 6f 35 3f f0 03 3f 60 8d 31 92 8e b0 8f ad 86 Data Ascii: PNGIHDR4pHYs%%IR$sRGBgAMAaoIDATxxeY~JsIZUnX'&}.nbaCp!`9FGnjQXsuQVg]`(!!!.Zko5??`1
2024-04-16 17:44:14 UTC	15615	IN	Data Raw: 19 31 70 94 f1 df 96 38 2a 4e da 03 09 09 09 47 41 22 08 12 12 9e e3 50 0e 87 c4 77 40 76 2d 8e 60 d0 89 24 08 db d2 d5 08 ad 21 20 10 b3 02 ec cb 64 46 42 17 b2 b3 c1 be 60 5e 50 f4 33 00 78 93 82 9e 9e 9c 24 58 7c 84 44 4b 00 a4 c0 8c 23 05 7c 78 c2 e0 55 ba 91 99 0e 38 42 60 82 1d 4c 35 c2 04 0e 1a 04 a2 25 00 52 40 e2 65 43 63 00 a6 02 7a e5 48 1c 5c e9 78 e6 80 8e 69 ee 6d 04 46 d9 3e 16 d7 bc 27 7e 1b 1c 89 91 b2 4f ae e4 76 d7 32 d1 95 d5 46 ec 63 c5 51 42 a4 61 8b 55 b7 96 9b 30 c7 42 53 dc af 5a 58 d8 34 4e 18 76 82 2a ce 43 68 da dc dc f4 02 9c 08 e4 c4 17 72 b8 f3 fd 03 bd 66 db dc b0 d9 3d 2a 71 bf ed 35 15 47 48 f8 73 9b ea de b2 fb 36 37 f3 fc 43 5a dc ef d3 44 f7 c6 75 90 63 e4 03 81 45 da e0 ef df e2 32 74 79 6d 79 a8 fa 22 bd a4 85 70 d4 Data Ascii: 1p8NGA"Pw@v-`$! dFB`^P3x$X\|DK#\|xU8B`L5%R@eCczH\ximF>'~Ov2FcQBaU0BSZX4NvChrf=*q5GHs67CZDucE2tymy"p
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 6b cd 11 03 c3 d8 77 24 c1 46 30 29 d8 64 72 00 c4 40 df 56 af f9 c9 5f f9 ff 9c 53 51 0b 0e c5 61 24 40 64 7a 91 1b b3 ba 7d b7 da 63 12 39 90 90 90 90 f0 ec 00 3e 06 36 ff c3 db e9 d6 6f fd ae f7 15 40 61 41 dc 06 1f 01 95 6a 25 33 13 10 ed 00 b2 81 fc ce e4 76 9b 91 02 15 21 c5 29 52 45 6f 59 96 40 ab 8e 54 b0 ac 81 d0 6a 34 29 dc 24 37 10 8b d9 b6 90 6d d3 93 12 81 80 0f e7 11 01 61 f0 9b de 4c bd 5f f9 e5 f4 b4 da ed f2 bc 7d fb 76 21 0a 81 22 f2 4b 4d 0a 3a a0 e3 f5 47 3f 71 e9 6b bf ec 8b be f1 0f fb fa 7b cd 8d ca ed 56 81 24 40 74 03 aa d9 ca 48 4d 69 df 75 d9 4a f0 43 e0 09 02 87 33 67 cf d2 d5 2b 57 bc b9 c1 39 1a 27 19 c7 e1 bc 50 9c 0f fb 50 c6 21 b2 01 0e c5 c4 60 77 f7 01 47 02 d4 5b 98 37 c0 1c 91 4b 99 21 10 03 65 f5 85 a3 c2 7c 91 62 d6 Data Ascii: kw$F0)dr@V_SQa$@dz}c9>6o@aAj%3v!)REoY@Tj4)$7maL_}v!"KM:G?qk{V$@tHMiuJC3g+W9'PP!`wG[7K!e\|b
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 8f fd e9 9f d2 4b a7 5e 4a f7 bf e2 f3 c8 34 76 a9 d9 3c a0 db 3b 1b de 09 df e5 cb ab f4 07 1f f9 24 fd dd 37 5f a4 17 dd 37 ea 48 90 63 b4 f5 5b ff 8b 6e fd c1 5f 64 f5 f5 be 18 ab b5 ff 87 bd 3f 81 b3 2b bb ca 43 f1 b5 cf 9d a7 9a 54 a5 6a c9 25 75 b9 5d dd 6d 77 d9 06 23 48 00 13 10 63 f0 63 c8 ef 11 64 20 0c 21 09 31 c1 09 24 8f 10 fe 40 26 41 08 81 f0 20 60 02 04 e7 31 64 20 24 96 1f 24 38 89 13 63 40 0f e2 18 1b 84 ed d8 a5 b6 bb 65 b9 ac ae 96 ba 54 a5 9a ee 3c 9d fd 5f df da 7b 9f bb ef a9 73 ab 4a dd 0d b1 cc 59 d2 ad 73 ee 19 f6 d9 67 9f 7b ef 5e eb 5b 6b 7d 4b c0 0d b9 35 57 25 27 44 14 c4 90 32 2a 2b 7c 0b 71 37 b5 8e 66 33 2d 95 0c 64 14 c0 5b 10 1d 61 c6 e9 d4 bf fe 79 ca 2c 9e 3e f2 19 a0 62 42 cb 03 13 d4 a8 bc ef 71 fa f4 18 98 60 d7 f5 Data Ascii: K^J4v<;$7_7Hc[n_d?+CTj%u]mw#Hccd !1$@&A `1d $$8c@eT<_{sJYsg{^[k}K5W%'D2*+\|q7f3-d[ay,>bBq`
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 04 94 fe 02 a2 08 84 20 c8 a6 18 ac 8d d2 0b 96 6f 2c 29 5a 1e 9d 29 13 3c d9 32 87 9b ae 39 f4 61 46 52 0c 68 e7 14 ed ce ed cb f5 84 83 60 1f 5e a4 c6 28 a2 00 e9 05 ac 70 dc a1 a6 16 5e 67 9b 62 a0 9b 61 14 39 d0 2a 77 74 d9 d5 5d 62 a7 cd 37 be ee 3b 7f 8f 95 39 a7 9a 28 a7 04 24 45 0a 24 45 58 d8 31 f2 bd 29 72 6e 1a 45 90 4a 2a a9 a4 f2 e2 49 e1 d1 15 9a ff 5b df 6e ed 7b 1d 99 af d6 c9 6b 8c 67 c7 43 10 71 11 10 b9 15 ad 23 74 d7 70 14 d8 23 43 9b ae 30 60 a3 be 7c 5e d3 cb bf a9 4f a7 5e bd 4f b9 2a 7b f9 0b 7d 49 17 f8 b4 97 37 d8 d0 1f 48 fa 40 21 cf 20 c1 d4 14 55 19 28 98 aa 94 29 c3 d7 ad 37 1a b4 bb 7d 8f 9a ec e6 ee 35 1b 34 68 b7 a5 6f 03 3e 1e 69 05 fd 66 93 fa 0c 1e 84 03 9e 17 c2 36 95 17 3e 4c c5 ea 07 69 d0 b8 47 a5 69 f4 c0 44 0e 08 Data Ascii: o,)Z)<29aFRh`^(p^gba9wt]b7;9($E$EX1)rnEJI[n{kgCq#tp#C0`\|^O^O*{}I7H@! U()7}54ho>if6>LiGiD
2024-04-16 17:44:14 UTC	14808	IN	Data Raw: 1e 28 6d 88 a8 81 85 a8 3d 47 52 e8 71 10 60 9f f6 23 07 54 2c a5 d2 4b 35 88 be 82 94 4a 2a a9 3c b0 92 92 14 a6 f2 62 4a a4 94 f9 fa 5d d2 81 da 12 17 c9 01 e3 24 59 49 de 29 d9 6e 73 f9 95 f2 ad f8 d1 35 12 99 ab f4 88 50 8a fc dd ee 52 b1 ed 98 e4 02 1c 8f a5 03 2d c8 43 c2 b1 cf 4e 8e 72 12 4f a0 81 9b 0d 2d 20 30 06 0e 00 69 e7 75 01 07 5c 1b 48 2b c0 12 e0 00 83 05 fa a2 17 e7 87 12 c7 78 8f 09 bc d3 d9 55 6f 7e f3 bb 24 e5 a0 50 a8 ea d7 bc a6 6a fb f1 28 b9 a5 78 0b 96 79 f5 99 0d f6 1e dc d1 f9 87 59 11 38 c7 ef cf 98 1c c5 e2 f9 5a e8 c0 81 cd b5 3b 6a 6f ef 40 e7 4e 9b 6a 05 73 b6 95 5a 58 0a 00 0e 20 82 00 12 cc 18 25 05 0a 4c 66 3a 27 c7 4e d5 a6 35 55 ab 70 83 08 d1 52 a6 9a 43 ee 80 36 8e 93 16 65 2a d9 10 e0 00 8c 7e 44 10 ec ee ec 69 c7 Data Ascii: (m=GRq`#T,K5J<bJ]$YI)ns5PR-CNrO- 0iu\H+xUo~$Pj(xyY8Z;jo@NjsZX %Lf:'N5UpRC6e~Di
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 9f 46 c6 bb f3 06 3a 23 23 9f af 1a 03 99 8c 07 57 80 86 bc 33 ce 9a 6c 90 08 cf a3 35 92 8c a1 46 bd 8a f5 d4 9a 7e e2 38 78 0b 8d b1 60 0c 34 6c 83 f7 12 fd 1a 01 1e c6 a0 83 81 2e 06 13 1b d6 ce 50 87 91 67 8c 41 80 0a 26 bf 18 fb c4 a0 b6 de 4b 01 4b f8 7a 12 09 21 39 e2 7c 5d 6e 5f ae ed 85 97 a3 0d b2 d1 0a ca de 8b 39 46 69 07 94 98 97 35 40 91 14 93 37 c6 65 bf d7 d4 23 8f b0 43 3c 94 6e 34 70 9f ad 08 80 d0 d6 10 c4 b5 f2 f9 d1 75 cc 83 c7 c0 0f ac 81 6a 00 11 73 ff ad d0 19 d0 ca de 97 19 9f a6 78 dd 61 80 c3 10 77 46 a7 31 c0 fa 26 4f 1e 7d cd 9b 71 c9 59 0e 0b 73 4d f3 1c e5 f9 03 f8 e8 85 43 f3 39 c0 cb 8c bb 78 d8 f9 d9 20 e2 c0 7c ee 82 08 94 68 f5 3b 43 3c b7 82 f5 ea e7 2c 58 82 eb e2 5e f3 d6 d3 8d 7b 6c f5 4d 08 b4 31 d8 9b 62 b8 ca 4b Data Ascii: F:##W3l5F~8x`4l.PgA&KKz!9\|]n_9Fi5@7e#C<n4pujsxawF1&O}qYsMC9x \|h;C<,X^{lM1bK
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: df f2 84 c6 a4 7b 92 4f 19 00 01 f4 04 2c c7 32 62 f5 df bc 39 73 8f 1e a1 7d 5b fe ea 6a 5c de 9e 76 5a ad dd 71 59 96 5b 7e 48 46 3f 42 06 24 9d e1 05 0d 80 de f3 e5 c5 ad cf c8 23 02 ea a4 f7 d7 61 50 f6 b2 eb ed 51 18 5e 3c a5 21 da 92 8c c6 71 e8 d3 e0 e9 f8 5a 84 09 39 83 d9 70 e0 5e 8e 5e d1 60 ab cb 6d 1e 8d 26 61 00 b1 36 b2 ad ca 97 a5 ef f5 bb 7e 3c 1e 3b c1 02 a6 18 c4 f9 8d 80 10 8d 31 6b 12 74 35 9d 21 0a d8 03 98 4e fd 9c bd 9e 50 a5 96 f5 c2 2e 60 6a 2f 4d 69 10 ce 94 68 e8 0f 60 50 89 e9 ec 7c e2 1d 8b 5c d1 58 b3 2b e0 c0 65 f7 8a 07 ca 10 5d bc f4 57 a1 13 90 06 31 f8 cd 30 f4 57 c5 35 f2 dc 67 18 bc 77 54 cc 0b e7 c2 00 1f c2 85 98 8f 29 bb d4 a8 97 94 86 10 20 93 54 64 79 2e 14 67 31 80 4a 31 78 d8 38 81 21 44 06 fd 80 0c 1b 2f db 61 Data Ascii: {O,2b9s}[j\vZqY[~HF?B$#aPQ^<!qZ9p^^`m&a6~<;1kt5!NP.`j/Mih`P\|\X+e]W10W5gwT) Tdy.g1J1x8!D/a
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 0c be 3d 9b ce bf 7d fa fa fc 97 fe e6 df fc cf ff d6 bf f1 af fe d9 63 30 07 20 ce 78 49 86 fd a6 1b 64 60 1b 74 38 04 e3 8a c5 fe f2 90 c7 46 20 34 e8 72 7e e1 ba dd 9e d4 3d 47 d6 91 19 eb 0d c8 a2 64 34 60 7d 12 27 e0 01 67 34 e9 76 39 fb 09 44 07 77 c2 b6 9f f9 8b 30 db 10 46 00 db fa 67 53 27 59 06 c8 4b be db 0f e5 54 59 01 cc 30 90 b0 81 3e 6d 3f 9b cd c3 46 cc 50 d0 12 bd 00 6e 48 cf cd fa 64 bc c3 d8 1f e7 59 ff 1d 3a f6 b5 08 b2 4e 19 20 e8 b2 b2 bf 01 02 1c bb af 4a fe 60 06 00 14 e0 d8 7d 2d 3d 27 e9 5f 83 a6 0d 86 f6 00 40 80 68 fc 93 11 4f 9e 77 0e 0b 80 80 60 3c 10 a2 b1 4f 36 d8 83 0f 51 bf 68 94 6b fc be d5 b7 8a f2 3f 18 68 bc 3f 36 0d e1 cd df 10 fd 19 ac f7 53 5e b6 29 d6 63 1f 78 f7 19 28 18 aa a1 7e ad 60 c1 f0 8a e7 8d 19 60 a1 6c Data Ascii: =}c0 xId`t8F 4r~=Gd4`}'g4v9Dw0FgS'YKTY0>m?FPnHdY:N J`}-='_@hOw`<O6Qhk?h?6S^)cx(~``l
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 03 e9 4b 5a e6 21 4e 28 00 81 65 29 f8 80 61 e2 8f e8 03 f1 d3 5e e2 ce 04 55 16 d1 9a 6f eb 19 08 20 a0 8f 90 21 d5 cf 9e 15 1e 39 74 3f 60 a4 fb c8 e1 4b 68 42 84 c7 ee 73 9a bc 1b 01 02 e4 f5 85 32 f0 c9 fe ff 9f f0 81 7d 57 9e ec 78 e4 15 0e 1a 4f 88 02 e6 00 42 0a b6 c9 d5 70 01 d5 22 5c 3f 79 31 be fd f2 af fc cc 70 d8 ff 19 a7 43 b4 a4 1f ee bd 47 fe 0b 18 05 f7 01 06 ae 01 2c e8 74 e5 f9 00 00 b4 5a 2d fe c3 3c fe 1e ca 6f 9f b2 ea b7 f3 fd 82 42 6f ab bb 09 08 34 bd a9 32 ad 1b e9 e9 72 1d 1c 08 49 1b ef 6e af b3 0e ee af 47 da d1 04 14 9c b2 2a 38 05 63 f2 d0 db 8c 55 e0 56 5d a9 ab fd 64 1a 46 65 d2 a4 3b 86 71 da 76 3e 54 8d cd 3b f7 42 eb f3 fa 4f 58 61 5c d6 ec dd c6 fa da 25 a4 97 92 f6 4b 6a dc 37 8d ce 74 7d 52 d2 fe ad 56 26 e7 5d 65 c4 Data Ascii: KZ!N(e)a^Uo !9t?`KhBs2}WxOBp"\?y1pCG,tZ-<oBo42rInG*8cUV]dFe;qv>T;BOXa\%Kj7t}RV&]e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.5	50515	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	432	OUT	GET /0jnmtsdzg6p5/Dc0SziTJ1rmxyMSHdHWNP/c0da4fc6ab91424027973b8f9a557a81/woman-presenting.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	538	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 146865 Connection: close Last-Modified: Wed, 20 Mar 2024 18:02:04 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 16:08:44 GMT Cache-Control: max-age=31536000 ETag: "f779f8de4a8bb30625908b57933bb22c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06d992a9667d893da83cf32bbe78f8b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: C0wlN7Z5oxGuvASg7t6k2BlT2_eSxEvmEvaHoJgomtiRLEAddq7L-w== Age: 5731
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 6f 67 5c 6b 64 5a 72 69 5f 68 61 57 12 12 12 18 17 17 64 5c 52 60 5a 50 65 5e 55 1e 1c 19 5e 57 4d 50 43 38 46 3b 31 54 4c 43 4b 3f 34 36 30 28 54 48 3d 76 6b 60 5b 54 4b 42 37 2d 58 50 47 c7 c7 ca cb cc cf 6f 64 5a a1 9b 94 64 59 4e 4f 49 41 3d 32 28 69 5e 53 6c 61 57 4d 46 3d 79 6f 64 9e 97 8f a5 9f 99 48 43 3c 90 85 7a 30 2b 25 25 20 1c 5a 4d 42 c3 c3 c6 a8 a4 9f 8c 81 75 5e 52 47 44 3f 38 3a 35 2e bf bf c2 9a 93 8b 73 6d 63 63 55 49 93 89 7f d0 d1 d3 fb bc b0 fa c1 b8 db b6 9b e1 e3 e3 b6 b7 bb b3 b3 b6 e8 e9 e9 81 78 6d 3f 3b 34 2a 26 21 98 8e 84 78 68 58 dd ba a1 72 63 52 88 7c 6f 5b 48 37 ae a9 a1 69 5b 4c b3 ae a6 aa aa ac 1f Data Ascii: PNGIHDRRcmEPLTEog\kdZri_haWd\R`ZPe^U^WMPC8F;1TLCK?460(TH=vk`[TKB7-XPGodZdYNOIA=2(i^SlaWMF=yodHC<z0+%% ZMBu^RGD?8:5.smccUIxm?;4*&!xhXrcR\|o[H7i[L
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: a7 aa b8 bf 22 f1 74 80 24 9a 9a 37 95 81 f8 b7 be 89 20 9b 1a 12 44 32 f5 73 d7 b5 1b bb 97 58 fa 58 15 1b 9f 5d a7 23 18 65 af 2f c3 48 cb fc 54 1f aa dc a8 52 e5 dc 02 37 b9 74 e1 49 51 9f 0d 86 24 bb d9 8c 35 9b d6 1a b2 86 4e c4 70 8f 0a 3e 32 69 1d c8 d8 01 78 ca 08 e2 f5 e3 1b 74 9c 3a b2 35 9d e9 b0 2f 58 05 be a5 a0 d7 72 43 b0 66 0d a9 47 8e 2b 20 e3 2c 20 2b 9f ee bf 22 ae e5 a5 b2 dd 8c a6 78 4f 39 5c 7d f3 79 dc 59 01 ce c8 c5 b6 9d 8c f4 51 8d 06 40 3e f0 ff bd 91 ce e6 7b cc e3 6a 50 1f e5 9c 62 1e e9 ea e8 0d 8e 9b cb 94 16 2a bd cd 88 c5 56 c6 c1 89 f5 59 79 9a 04 ce dc 18 c8 d2 90 13 bd 02 71 3a 63 b6 6b 00 dc d8 96 bd af 60 26 e5 4b d9 6b 7c 38 50 88 24 54 28 4f 15 d7 04 f2 36 10 79 f5 0d bf ff f1 d9 57 5f 91 47 13 79 78 68 53 4d 20 e3 Data Ascii: "t$7 D2sXX]#e/HTR7tIQ$5Np>2ixt:5/XrCfG+ , +"xO9\}yYQ@>{jPb*VYyq:ck`&Kk\|8P$T(O6yW_GyxhSM
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: bb 88 bc 92 44 02 49 88 38 34 92 05 64 11 19 20 8b 47 30 88 1d af 50 d8 15 11 29 52 a5 33 85 63 38 4d 7e 06 5f 4e 08 66 4a bc f0 08 84 6b 74 87 90 33 5c 99 96 82 a2 a1 6d 6e d5 98 f8 0b 71 ec 61 f2 44 d8 fc 1f b5 89 2f 1e 00 4b f8 ab 89 c5 91 13 b5 25 1f 48 73 86 54 1c 3b 5d ab 57 99 c5 2c 37 13 a1 f5 c6 aa 5e 0c b2 2d 33 ab f3 1a 37 a4 c1 3e ff 82 ca 42 16 90 10 01 f9 c8 e6 65 9c 31 4a 16 c7 3d d6 01 9b 2d b4 74 32 69 54 91 f1 21 a3 25 19 96 4f 92 5b 65 7f da 28 b8 61 ae 65 b4 79 6e c9 71 19 72 43 d6 fc 4b 7c 90 40 d2 7b 59 d8 99 6c 75 43 ad 53 75 be 0d 4b e2 1d fe 33 8e 09 8f 4c 3f 48 33 ae 66 15 4b 5c c8 74 b8 10 fa 4c 27 22 09 a4 6c b6 e3 6c 4d 87 25 90 54 91 07 80 64 42 ec f0 e8 31 9b 93 4f 0f d7 0d 69 d3 bf b8 12 2c 84 56 3b 18 de 24 22 13 68 1f 05 Data Ascii: DI84d G0P)R3c8M~_NfJkt3\mnqaD/K%HsT;]W,7^-37>Be1J=-t2iT!%O[e(aeynqrCK\|@{YluCSuK3L?H3fK\tL'"llM%TdB1Oi,V;$"h
2024-04-16 17:44:14 UTC	14808	IN	Data Raw: c8 67 3f 67 10 49 20 19 40 62 2c fc d5 ed 9f 45 53 21 15 09 75 dc b4 38 8f 5d 96 62 77 f9 1b bc 32 1a 9b c9 25 ea 3f 22 52 2d 37 6e 1f f9 0e 87 99 4e be 31 20 41 a2 71 97 fa b7 9e f0 1f c9 09 ec f6 d8 b4 1b 57 fb 7c 18 16 b2 f2 66 39 d2 ec 96 56 7a ec fd cb cf 58 4e 20 90 aa 72 83 2b 8b 13 73 a8 88 f7 ce de 3a 70 6b 0e 23 0c 3b f2 8f 7a 26 97 fa 3e 78 8c 40 d2 a6 0c 20 7e 90 ee f1 1f 88 c8 3e 86 30 e7 0d c8 29 66 35 6e 20 5b f9 db 67 7c 00 4c ef ee 29 7e fc c8 ba 5f e5 2b 81 5f 9c 83 50 79 7a 3d ca ae be b4 5a 9f b6 ec 62 bb 0d 88 7b 2c d8 f1 80 07 11 a7 d3 49 9f ce 68 73 74 14 58 0e 43 47 b1 75 76 e2 44 42 d5 a0 2e 91 4e 49 f9 10 76 29 71 c9 ab 1c 7a ac 80 42 01 c8 40 f2 0b df e0 7c 5a 64 92 5d 7e cc 40 9e 88 59 f9 14 40 02 c8 3f a0 0e e9 16 92 c6 83 ca Data Ascii: g?gI @b,ES!u8]bw2%?"R-7nN1 AqW\|f9VzXN r+s:pk#;z&>x@ ~>0)f5n [g\|L)~_+_Pyz=Zb{,IhstXCGuvDB.NIv)qzB@\|Zd]~@Y@?
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 39 68 bd 94 01 c4 0c 03 7d d0 8c 04 8b 34 4c 13 66 b0 b0 8c e6 cd 37 61 92 79 4a 83 0d 1e 38 26 19 94 94 f2 1c b6 29 fb ef 46 5a 3d 6c 19 76 3f fb bf 99 62 17 89 e4 c4 04 0c d8 ee 8d 40 2c 58 d4 21 22 7d b3 5d 85 da 4d fc 6b f7 ca 74 41 61 a5 e4 c1 a4 ca 40 92 e3 29 0e 93 76 66 44 70 e1 56 0c de f5 e0 91 13 60 c7 b7 91 28 87 92 68 2e f2 42 ca c5 8b f1 9b 40 ca 22 8d 48 02 f9 1a 20 fc 66 59 00 f9 d9 41 5b ae cf aa 0f ba 75 76 dc 73 9b 43 39 ba 00 25 0d 0d f8 e1 16 43 2c 5c 67 bb 48 a3 80 4c 66 bf ef af 7b e7 ca 35 55 20 4f 30 8b bc c5 86 67 8e ea 95 8b 00 52 2f a1 eb 63 b2 e6 5f 4e a7 69 f4 b3 27 3a 7b d0 62 5c b1 e0 b9 d6 15 f3 4e bc fa f6 ab 9f fb ea ab b5 6b d7 fe b8 f4 8b a7 9e b9 eb a4 63 67 9f 7a de 6c e8 f4 a3 5f 3d f9 e4 2d 7a 4f ba ef cb ce 05 3d Data Ascii: 9h}4Lf7ayJ8&)FZ=lv?b@,X!"}]MktAa@)vfDpV`(h.B@"H fYA[uvsC9%C,\gHLf{5U O0gR/c_Ni':{b\Nkcgzl_=-zO=
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 7a 94 04 12 46 fb 0d 2c 2e 11 48 09 b3 5d 20 19 d4 f0 b1 69 0f cd f6 a2 8f 73 07 c8 b5 aa 71 45 80 5c fe ab 99 36 7b fe cb 54 90 98 07 d4 fd a6 19 9b 5c 3a 14 45 6c 8c 80 56 cb 14 63 c1 40 6e ff 28 0e 0d 8e e3 88 85 a6 c6 07 90 92 b1 d8 c8 60 07 a1 f4 18 87 78 ce ec dc 8b 41 98 07 7c 0d 29 23 37 5a d4 42 b0 b7 d1 88 3f 88 c2 b5 a1 af f5 65 23 7e 4d 1b 8d 98 7a 72 59 47 ce 36 bc f1 65 fb a1 39 31 d7 e5 c9 d9 b1 91 3c 02 a3 9e 10 27 1f 82 16 7e 5d 89 3d 65 c8 6f 9b c6 24 c9 cc 8e d7 9e 1e 28 ec ea 6f eb dc c5 a8 66 10 f0 0d c2 a1 0c af 7b f2 3a 88 2f 6e 0e 8c 75 f7 e3 f3 c6 fe 36 ee ad ea 23 91 dd 4d 38 4e b1 6f 77 55 65 a4 ed ac 83 b9 13 44 2e fa e2 cf 3f 76 d3 23 87 a0 22 3d cb b7 32 aa a9 54 90 b3 81 5c 48 1f f2 a3 54 4f b7 8b 90 02 60 a9 04 40 0a 9b 50 Data Ascii: zF,.H] isqE\6{T\:ElVc@n(`xA\|)#7ZB?e#~MzrYG6e91<'~]=eo$(of{:/nu6#M8NowUeD.?v#"=2T\HTO`@P
2024-04-16 17:44:14 UTC	9146	IN	Data Raw: ae a3 3c ed 50 04 31 49 e2 19 18 63 60 d3 c3 09 41 18 b6 df d5 73 7b 38 18 09 23 f4 53 8f 6f 08 44 02 77 93 f6 45 17 76 1f 0f a4 c7 c7 5b b0 f0 e6 5a ce 32 07 f5 3a 1c 18 19 0e f8 13 03 e7 f6 1f 7b c6 e1 c0 64 f3 7e d7 6b 6d b6 d1 9f 57 6e 7d cb 97 bf 82 75 ec 5c c9 ae 9f 7f 8d fd d6 94 77 42 be 8c 07 f7 5b 29 01 9b af 52 7c be 4d dd d8 df 22 64 42 c0 d2 f3 44 59 6e 13 2f 01 70 48 7f 00 80 a4 2f 23 a5 41 c2 a3 52 91 f8 21 c4 9b 3f c7 e8 14 2c 1f d8 63 90 09 cc e9 c5 ef c4 fd 85 bb 5f 0a e2 44 a8 20 65 c4 23 e5 45 d0 8d 5b b1 4e 14 b2 0f 52 f3 2f a2 b9 14 32 79 a1 45 17 63 ae 4c b9 94 9f b1 fe 4c 5f c4 a7 31 78 04 8e 87 1e 85 80 48 00 39 7e e9 45 f8 fe af 7f 13 44 52 2e 00 c8 1f ff f8 e7 d3 67 a3 88 77 d8 dd 96 93 0f ff e2 ed 9f f9 16 e2 32 30 46 fb 50 a1 Data Ascii: <P1Ic`As{8#SoDwEv[Z2:{d~kmWn}u\wB[)R\|M"dBDYn/pH/#AR!?,c_D e#E[NR/2yEcLL_1xH9~EDR.gw20FP
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 18 0e 65 f0 05 d1 b3 f0 17 58 86 ec 5b ad b3 96 26 6c 0c 5a da 87 1b b9 5d a9 f1 7a a8 6e 97 d3 0c 8e b7 ed 8a c0 dd c8 39 4c ce c0 e8 85 0b c8 d6 35 b7 d0 d1 61 bd 05 b2 da c2 64 e3 bd 5b 06 81 24 90 d4 9d b4 d1 e2 0d 55 1c c2 37 c3 93 91 40 06 81 6f 7b 50 44 11 03 5e ac a8 41 50 dc e6 ab 88 87 a9 d7 7d c1 a4 d5 1a 70 c1 fb d6 e5 7c c8 b3 3b f0 65 70 d8 8d bd 5e a7 3d d9 7c 7e 75 2a d8 d3 eb 6d 4d 59 d3 eb e7 2c 2b ff 4b 9e 4a d1 e9 85 7f c6 48 b4 d5 9c 39 0a b7 c6 b6 cd 69 ff 36 c7 8d e1 b3 af 61 8b d3 55 a8 c8 1d 8f 52 23 2e 5a f0 44 41 a8 28 f1 a4 2c 20 98 8a cc 2d d2 ff 21 99 42 63 be f4 34 36 2e 3d 74 af f0 ce f7 ad 84 dc b6 52 1c 37 49 e6 cc db 5e 78 06 40 0a 27 a6 88 47 05 24 2e 66 13 a9 20 9f 51 7e 8d 5a 73 33 43 3e a9 20 a5 86 64 18 72 9a 43 53 Data Ascii: eX[&lZ]zn9L5ad[$U7@o{PD^AP}p\|;ep^=\|~u*mMY,+KJH9i6aUR#.ZDA(, -!Bc46.=tR7I^x@'G$.f Q~Zs3C> drCS
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: d7 31 32 0e 01 90 28 07 7f ed 25 02 79 ef 0b db d1 e0 d1 73 ed 97 05 20 bf be fc f5 cf df 3b 74 e8 e4 01 38 35 e0 0c 52 13 f3 fb bb 07 fb fd 6d 74 85 51 47 31 1a f2 c2 c1 36 33 18 3e 88 7d fc 78 95 e7 3b 2b 8a ce 5a 9a db 28 78 19 e5 14 5e a7 c9 3f 90 c3 f2 59 16 44 da d0 07 1b 2b 13 9b e0 f5 66 b4 be ee 62 63 4e 06 40 d6 39 96 8b 95 c2 fc f1 67 5a 8c 44 12 ad dd d9 fc d1 a3 cd a3 66 17 9a 68 43 f0 8e 5c ae 04 8a 7c d1 fc 6f 0e 98 f5 d1 5e 37 69 3b 77 3d ea 6d 0d 99 44 9b ad 9e a1 29 13 16 bf d2 b2 9b 43 8e 0c 54 76 b3 1b 50 66 87 63 d1 f1 be 35 69 43 83 cd e2 df ec cf b8 8d a3 96 f6 2d cb 71 28 8d 45 03 ba 32 4c a5 32 9b a3 f9 24 8e b1 5d 9d 1e 44 2a df e9 f5 20 67 e9 8e db 24 8c 05 22 79 97 c2 32 49 5c e4 51 3e 0a 40 76 d3 48 13 4a 8a cc 19 12 c9 ff 3a Data Ascii: 12(%ys ;t85RmtQG163>}x;+Z(x^?YD+fbcN@9gZDfhC\\|o^7i;w=mD)CTvPfc5iC-q(E2L2$]D* g$"y2I\Q>@vHJ:
2024-04-16 17:44:14 UTC	8223	IN	Data Raw: a5 a1 dd 21 5b 70 d7 60 10 34 74 11 93 ec 3d 50 d1 f6 60 b2 ab 5e 9a 68 f3 6a 41 d1 0f 42 25 14 39 7a 30 83 2f cc e6 6e 0f dc 3a ce 83 4b e9 6b 41 31 8a 1e b1 f0 06 21 36 3a 29 7c 41 14 5b 16 72 01 6e a8 b1 31 2f 1a a3 5e d0 0e 63 60 e6 1f eb 74 27 30 2a 5c 2c bc e3 06 9a c1 0e 8c 93 ce 8d 67 0a c3 ad 9f 1e 9a 4c 23 3b 14 89 87 c6 b3 71 84 3d 06 26 ee 26 a6 b9 33 a9 3e 86 b7 ba 65 8f 95 38 ee 53 b3 3c 3b 7d ea 97 2c 0c 90 4f 67 15 a4 88 69 14 9d 42 23 89 e5 7b 6b 0a a9 05 d1 89 e4 fe a8 fb 91 48 6a 63 a0 ad 04 12 5f 22 47 8e f9 16 a3 30 be 7e 84 17 a6 cb 29 91 ce bc cf ae bc 3c d4 3c 52 e3 14 90 30 a9 90 0a 32 cd e3 67 e0 91 45 88 af bf 0d 7b 5d 32 a9 91 44 70 e3 70 d9 8a 47 cd a6 74 db 17 d7 02 49 49 e3 83 87 3a 70 54 5e 5b f5 d3 34 56 8d 3c 4a 20 af e7 Data Ascii: ![p`4t=P`^hjAB%9z0/n:KkA1!6:)\|A[rn1/^c`t'0*\,gL#;q=&&3>e8S<;},OgiB#{kHjc_"G0~)<<R02gE{]2DppGtII:pT^[4V<J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.5	50514	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	436	OUT	GET /0jnmtsdzg6p5/7h7Qts9Xjqh2gfBMqrxMBn/ee86b2d2bcb3bf0d93a8f3d2e6037e81/woman-holding-a-pen.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 110884 Connection: close Date: Mon, 15 Apr 2024 17:52:08 GMT Last-Modified: Wed, 20 Mar 2024 18:10:14 GMT ETag: "70a935ae1b5a8ab4cb532d72f6a6af56" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 b5e84d5e033cdf1a3129ccc858468a28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: tgBQeHMbzecD4hulGznOOayUYekSKq7ZD47YboYeB6eLIUpfDynb9A== Age: 85927
2024-04-16 17:44:14 UTC	15868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 ee ef f2 19 18 1a 17 15 16 12 11 12 1b 1a 1f 1f 1f 22 5f 42 2b 58 3e 29 72 56 3a 63 46 2d 5b 40 2c d6 e1 e9 28 1f 1b 1f 1d 1a 6a 4e 31 ce db e2 d1 de e5 6e 51 36 24 23 23 c6 d3 dc 76 5b 3d 7c 5f 40 c9 d7 e0 f8 f8 f8 c2 d0 d9 66 49 31 26 1b 17 53 3a 28 66 4b 2c db e5 ec 20 21 28 bd cd d7 e8 ed f3 4d 36 26 e1 e9 ef 2f 21 1b f5 f3 ef e9 ea ed 28 27 2a 20 18 15 32 25 20 e3 e6 e9 50 43 3c bc c9 d3 f2 f3 f5 47 31 23 72 4f 30 28 2e 3f 7d 5a 3a b7 c8 d3 db df dd 77 55 36 20 24 30 ad ba c4 23 29 38 39 29 20 ac be cb 4a 3d 37 b2 c0 cb aa b4 be a4 af ba dc ca bb 95 84 78 e1 e2 e4 8b 71 55 5e 46 35 a1 94 8a 9f aa b5 b2 c4 cf 80 63 47 9a 8d 82 9a Data Ascii: PNGIHDRRcmEPLTE"_B+X>)rV:cF-[@,(jN1nQ6$##v[=\|_@fI1&S:(fK, !(M6&/!('* 2% PC<G1#rO0(.?}Z:wU6 $0#)89) J=7xqU^F5cG
2024-04-16 17:44:14 UTC	16112	IN	Data Raw: 28 65 a4 88 6a d8 cd ac 6c be b3 72 ab 8a 70 aa 10 4d 8d 2f c7 47 a6 62 70 d9 1f 15 80 48 84 32 35 de d3 ac e6 12 92 05 92 43 d6 69 3a fc 42 36 ba ad 5b f6 2e c5 62 2b 01 59 10 5f c0 b8 38 80 2c 9f 00 90 fb 74 cf 27 11 48 bf 3e 23 40 fa 23 03 38 2c 8f 4a 20 03 4d 1f 2b 91 89 0a 19 b8 d1 cb 74 21 c1 a3 02 b2 81 80 3c 0b 61 81 44 c6 3e 14 f6 34 a5 e5 dd 68 43 da 12 92 37 75 21 e0 b4 b5 42 9e 94 82 90 03 4b 57 02 b2 b6 8f 6e d7 3c 74 fd 0b 07 06 70 90 4f 15 32 f6 18 a2 be 2a 37 0a 95 6c 8a 62 2f 4d 7f 27 4a ca b1 08 b6 bc f2 b4 b7 89 4c cd a3 08 27 f9 f0 34 e1 d2 c9 a0 7c 17 f3 22 40 aa 89 b5 95 7c cd ca d6 1b b3 e2 98 06 db 90 41 13 68 79 d1 6b 06 b7 bd 04 85 04 8c c7 a1 90 d2 f6 51 40 3e 03 85 84 a7 31 19 fb eb c0 41 7c d6 d3 98 a2 f3 8d 03 c7 92 2b 24 95 Data Ascii: (ejlrpM/GbpH25Ci:B6[.b+Y_8,t'H>#@#8,J M+t!<aD>4hC7u!BKWn<tpO2*7lb/M'JL'4\|"@\|AhykQ@>1A\|+$
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 44 f6 63 93 c3 a0 d5 4c 11 24 86 0e 4e 01 36 4c 6a fc 16 2f 5f 17 97 3a a4 96 21 bd 40 12 48 e3 b1 4d 08 79 26 1e 42 52 21 43 20 ed 24 95 e9 5b a9 09 15 92 9b 40 1d 90 8b 0a 16 d8 20 92 83 12 fa 06 1a cf 6c dd 78 10 50 8e 5e bd f3 c0 d5 18 c5 d1 0a 91 d7 40 24 cc 28 64 bb 20 76 aa 73 bd a5 51 cd 12 29 a1 a3 5a 3b 4d 3e 01 47 dc 62 6b d1 7d 01 1a 57 90 45 bc 0a f0 5a c1 a5 ea 94 3c cc 34 f5 3c ca 07 1c 44 9c 05 20 33 25 d5 26 90 23 b3 25 84 4c 4e 29 20 90 e4 f1 31 81 c4 ec 4b 18 81 5c 34 5f b2 ec 25 ab 1f 4b de 2d df 1e a3 e1 03 c7 5c d0 a0 90 6e 07 98 8c 3b c3 b8 34 da 30 4c be d8 8a 57 c7 81 12 e0 c8 0b 0a a9 b6 ae ed 60 ff c0 f1 89 83 fd c7 29 94 db 5b 08 a4 2c d1 a8 c7 86 3a 46 91 0c fc 75 e0 b1 61 04 32 18 28 e5 fc 32 81 54 26 5d 29 52 9d 7a bc 0c e9 Data Ascii: DcL$N6Lj/_:!@HMy&BR!C $[@ lxP^@$(d vsQ)Z;M>Gbk}WEZ<4<D 3%&#%LN) 1K\4_%K-\n;40LW`)[,:Fua2(2T&])Rz
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: a6 3f 52 79 a2 2c 05 52 79 04 8c 33 f6 82 60 90 68 fd 14 a1 ef 23 3b e0 f7 b6 f6 f6 f6 f5 df b6 13 5a f3 87 5c 1d 48 29 71 c9 8d 87 1c 58 23 0b b4 e9 91 3a 70 23 c9 e4 2a 45 70 8a e6 8f 51 41 03 01 4a d5 30 d4 34 23 41 a4 3a 24 cc ca 16 02 4e eb 05 8c 8e c7 b3 71 bb 2b e8 6c 1f c2 1d 94 20 f2 ec ba 56 8c ef 74 76 2d 98 2c db bc b5 00 c4 96 16 8e 3d de cd f5 61 37 dc 70 87 c3 71 94 c1 08 0d 09 21 db 80 4c 86 6c 57 99 e7 38 e5 02 48 91 61 e8 e2 35 51 1c 96 cc 20 ad 2b ee df 3a 78 5b c4 a6 f0 d7 27 47 0e e3 80 6d 11 db c5 6c 0e 1e 6e e3 5a af 64 12 09 39 20 95 47 0d da 6a 91 18 a3 0b 16 49 87 b4 91 9a 8c 55 d9 45 cb 4f b9 ea d3 6b c0 e3 b2 77 5e 3a 8f e5 8c 29 9f 44 42 f8 2c 38 ee bb ef be 34 48 f9 3e 0f d3 d0 64 bf f1 f6 76 2c 3d ec bf b6 bf 7f 67 ff b5 d5 Data Ascii: ?Ry,Ry3`h#;Z\H)qX#:p#*EpQAJ04#A:$Nq+l Vtv-,=a7pq!LlW8Ha5Q +:x['GmlnZd9 GjIUEOkw^:)DB,84H>dv,=g
2024-04-16 17:44:14 UTC	16384	IN	Data Raw: 7b 4a 1c 13 8d f0 c8 c4 82 71 33 92 60 0a 86 3c 05 87 90 58 a2 78 cb 63 77 9c 07 89 19 c4 0c 63 d3 34 8e 6b 63 e0 28 75 94 0d 7f e5 58 c7 86 75 2b 2c 23 9c 8d a4 7c f7 24 40 b6 97 b6 b4 cf 8a 1d 2f 4f 3c 7f 23 58 60 57 9d 75 d6 a3 9b c3 a9 f0 d8 00 e9 e9 00 24 34 6e 84 6c 09 c8 29 f3 48 41 3e cd 29 8d 1c db c0 d5 25 e5 75 09 24 40 1a da c4 a3 43 4c 03 39 63 20 f9 4e ed 65 80 84 c8 82 c7 3f 03 89 f3 3e e2 9d 2a 92 db 96 a5 47 57 c1 0d 24 4f d7 2c 3a 8c 04 c8 db b1 60 f4 24 2a 91 30 67 1e bd 56 88 09 cb 08 20 dd f8 83 44 aa f2 23 8d 5c 85 c8 8b de 7f 6e 2f 70 54 d5 e7 a9 87 db 27 e7 95 1a ed 61 f8 64 34 86 5c 58 70 d9 47 12 39 da f0 53 4d 6a ec b3 3f df b5 a2 90 57 60 c7 6f 77 45 00 99 51 f4 23 98 14 94 4a 6b 40 d2 02 39 ea b1 9d d5 88 47 4c 3c 8a c8 84 a3 Data Ascii: {Jq3`<Xxcwc4kc(uXu+,#\|$@/O<#X`Wu$4nl)HA>)%u$@CL9c Ne?>GW$O,:`$0gV D#\n/pT'ad4\XpG9SMj?W`owEQ#Jk@9GL<
2024-04-16 17:44:14 UTC	3816	IN	Data Raw: 6d b4 52 3a e2 d6 cc 72 35 66 e3 ac 3d 39 20 3b 70 50 7f 04 ba 7c b9 a4 18 fe 90 45 b4 92 0f 81 94 4f 00 ab f5 d3 7e 5d c3 4e 9d fa 01 48 65 06 49 d1 c4 58 3e 9d c8 79 cb 0d 0b 6e a0 8b 61 89 87 a7 a8 ee 67 c6 90 33 4e 6a 96 48 37 02 3e a1 04 d1 8c ab ae ba ea 8a 47 9f 63 35 79 db 9d 56 49 dd e6 cf 9f 4f 8c 33 45 49 c8 00 d2 f2 f8 3f 0a c9 cf 70 42 c9 40 5e 28 20 fb 84 64 5c 69 19 e9 38 9b 0e 1b ab e3 aa 55 77 60 b1 6f 53 a0 92 7b 1a 37 60 2b 0e 8b 47 09 61 dc f0 cf 0f ad 9c bc 7d 6f 67 67 5b f7 11 70 fc a7 99 34 92 6d 47 da 24 90 a3 f2 44 92 00 da d0 f8 72 13 c0 15 5a 62 d2 29 48 ae 43 49 21 85 24 71 b6 12 3f 17 f7 11 c8 cf 15 37 bd 7b 28 bf 45 83 09 cb bd 2e 3c 23 e3 8d e1 31 4b e1 31 04 32 55 49 b8 13 1b 1e 6d de 30 14 90 e4 6e 00 d2 64 09 c7 f3 62 9b Data Ascii: mR:r5f=9 ;pP\|EO~]NHeIX>ynag3NjH7>Gc5yVIO3EI?pB@^( d\i8Uw`oS{7`+Ga}ogg[p4mG$DrZb)HCI!$q?7{(E.<#1K12UIm0ndb
2024-04-16 17:44:14 UTC	12792	IN	Data Raw: 32 3f fa ad 22 b0 69 78 b5 e6 44 38 62 1d 1a 06 a7 30 41 16 22 c9 6e 0d 3e fb d4 51 cd ab cb b3 36 43 f1 18 44 ee e3 78 c3 14 cf c8 c4 63 02 52 5d 2e c4 33 ca e1 00 64 19 15 6a 00 19 55 3e 36 0f ba c7 00 12 59 8d e6 c4 ac 50 5c 0a 29 22 5b 5b 59 5b b4 d6 bb fd 86 e8 08 72 2a 1c c7 80 9f 1c be 1c b6 b6 89 80 91 3a 8a 28 db b1 32 43 a5 83 69 af 08 c2 fc 46 ea 8d a3 96 42 2a 21 44 8c 03 c1 34 d7 94 7a c4 38 31 54 e5 e4 ce ce 75 3a f2 a8 bd 45 b3 1d 5b d0 c7 27 d7 af a7 e8 67 3a dc e5 2c 68 ec 65 ff 67 4f 3b a5 21 13 91 43 c6 8f 1d 3b de 2a 19 51 0d 34 a6 75 24 44 ca 46 8a c9 dd 46 52 4c 0a ca 07 1f 7f e9 b7 f7 14 28 e4 69 25 7f 6c 85 22 89 44 8e bb 6e dc 75 e6 91 8e 9b 55 9b 56 0e 9d d9 b0 f2 ce 87 bf fb a3 5b d5 30 03 8e ef d1 d7 75 ec 98 3b ba 48 f2 bc 77 Data Ascii: 2?"ixD8b0A"n>Q6CDxcR].3djU>6YP\)"[[Y[r:(2CiFB!D4z81Tu:E['g:,hegO;!C;*Q4u$DFFRL(i%l"DnuUV[0u;Hw
2024-04-16 17:44:14 UTC	13144	IN	Data Raw: 6c 3b 99 8c 2f da f1 58 4b 64 10 79 58 d1 48 2d 6e d3 96 46 5f 1a 44 be 82 69 5f a2 81 0c 24 cd 23 40 5e 71 7a ef d6 05 c8 ef bf d7 98 1e 01 89 5c da 5b 7b 57 b6 5d f7 44 bd 85 61 bd 5a 1f 5b 78 dc fa 17 01 79 57 bf 8e 7d 4b 20 b1 b2 65 21 81 54 e8 87 95 f8 51 96 75 1e f1 d3 6c 06 b5 aa 40 76 7b 58 15 0d 1c ec 1e e3 8c ae d0 47 f7 e0 9a cb ca f5 97 9f 0b b0 f5 4d 0c f5 eb df f1 ae 43 75 56 dc f4 84 f6 cf 88 3f 86 25 b3 9d 4b 54 ee a3 54 1b 42 73 28 45 e2 18 1e 95 ab 2c 3b 7c f2 53 26 34 19 48 76 30 78 14 90 58 f2 98 1e 5b 90 92 64 27 90 83 5e a9 59 35 81 8c 2c db 40 2e be 58 d1 c7 00 f2 ff 70 d9 3c d2 82 be 14 cc 59 25 b2 c9 2d 34 6b 24 3a 5f b5 00 89 48 7a 77 99 4a 25 22 df 7a e5 ad bd f6 7a ed b5 47 c3 38 1f 5f 40 3e 76 6a a3 97 ae 01 f3 88 0d 0c 08 48 Data Ascii: l;/XKdyXH-nF_Di_$#@^qz\[{W]DaZ[xyW}K e!TQul@v{XGMCuV?%KTTBs(E,;\|S&4Hv0xX[d'^Y5,@.Xp<Y%-4k$:_HzwJ%"zzG8_@>vjH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.5	50517	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	875	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1596089733.1713289453&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	864	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1596089733.1713289453&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.5	50516	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	1232	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:14 UTC	192	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-16 17:44:14 UTC	16192	IN	Data Raw: 34 36 34 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 4f 44 4e 61 35 77 48 5f 61 52 68 52 6d 4b 63 55 5f 5f 79 34 79 35 38 55 75 79 43 5a 33 75 61 67 58 69 68 63 48 39 46 37 62 41 73 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 464a(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs" var userIdCookie
2024-04-16 17:44:14 UTC	1810	IN	Data Raw: 3d 7b 7d 3b 69 66 28 22 22 21 3d 63 61 6d 70 43 6f 6f 6b 69 65 4e 61 6d 65 29 74 72 79 7b 43 6f 6f 6b 69 65 73 2e 65 78 70 69 72 65 43 61 6d 70 61 69 67 6e 43 6f 6f 6b 69 65 73 28 34 29 2c 73 65 74 43 61 6d 70 61 69 67 6e 43 6f 6f 6b 69 65 28 29 2c 65 78 70 69 72 65 43 61 6d 70 61 69 67 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 2c 73 65 74 43 61 6d 70 61 69 67 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 22 21 3d 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 61 6c 75 65 26 26 43 6f 6f 6b 69 65 73 2e 67 65 74 28 22 73 61 2d 75 73 65 72 2d 69 64 22 29 21 3d 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 61 6c 75 65 29 74 72 79 7b 73 65 74 55 73 65 72 49 64 43 6f 6f 6b 69 65 28 29 2c 73 65 74 55 73 65 72 49 64 43 6f 6f 6b 69 Data Ascii: ={};if(""!=campCookieName)try{Cookies.expireCampaignCookies(4),setCampaignCookie(),expireCampaignLocalStorage(),setCampaignLocalStorage()}catch(e){}if(""!=userIdCookieValue&&Cookies.get("sa-user-id")!=userIdCookieValue)try{setUserIdCookie(),setUserIdCooki
2024-04-16 17:44:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.5	50522	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	677	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=vzXteGtxqXZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
2024-04-16 17:44:14 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=3BHbUbG7UQZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:44:14 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:44:14 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
634	192.168.2.5	50521	151.101.12.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	629	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-16 17:44:14 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Tue, 16 Apr 2024 17:44:14 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840029-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.5	50523	34.96.71.22	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	786	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:14 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713289454\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.5	50524	104.18.32.137	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Type: text/javascript Content-Length: 79 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8755fb74bfd1451b-ATL
2024-04-16 17:44:14 UTC	79	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 47 41 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"GA","stateName":"Georgia","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.5	50525	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	851	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453654&PageStart=1713289442223&PrevBundleTime=1713289447454&DeltaT=590 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1049 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	1049	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 35 37 32 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 26 53 65 73 73 69 6f 6e 49 64 3d 30 64 65 38 38 34 34 66 2d 30 36 33 37 2d 34 34 32 62 2d 38 39 37 37 2d 64 33 33 33 32 66 30 34 65 30 32 61 26 50 61 67 65 49 64 3d 32 62 31 64 35 61 32 33 2d 37 65 61 36 2d 34 34 34 65 2d 61 31 38 66 2d 64 35 63 34 39 31 61 38 65 31 63 65 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":3,"When":5726,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=2&ClientTime=
2024-04-16 17:44:14 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 35 34 37 32 39 7d 0a Data Ascii: {"BundleTime":1713289454729}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.5	50526	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	871	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&page_title=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289441\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:14 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-16 17:44:14 UTC	956	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 4305 Connection: close Date: Tue, 16 Apr 2024 17:44:14 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CACHE Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 15 Apr 2024 17:44:14 GMT Vary: Accept-Encoding, Origin Request-ID: ec5ed2c9-5ede-4309-8d59-604175be9990 X-Cache: Miss from cloudfront Via: 1.1 cf815e48514b90d59fa790be38ee8ffc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: Sup5EmQI1r9DUbzCVhYpRimQsvZXh5lizsqel2zeJEH2Vyl6mkiByw==
2024-04-16 17:44:14 UTC	4305	IN	Data Raw: 7b 22 68 71 22 3a 7b 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 69 6f 6e 61 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 64 65 6d 61 6e 64 62 61 73 65 5f 73 69 64 22 3a 39 34 34 33 30 31 32 31 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 49 6e 73 74 69 74 75 74 75 6c 20 4e 61 74 27 6c 20 44 65 20 43 65 72 63 65 74 61 72 65 20 2d 20 44 65 7a 76 6f 6c 74 61 72 65 20 69 6e 20 49 6e 66 6f 72 6d 61 74 69 63 61 20 2d 20 49 63 69 20 42 75 63 75 72 65 73 74 22 2c 22 69 6e 64 75 73 74 72 79 22 3a 22 42 69 6f 74 65 63 68 22 2c 22 73 75 62 5f 69 6e 64 75 73 74 72 79 22 3a Data Ascii: {"hq":{"company_name":"Institutul National De Cercetare - Dezvoltare in Informatica - Ici Bucurest","demandbase_sid":94430121,"marketing_alias":"Institutul Nat'l De Cercetare - Dezvoltare in Informatica - Ici Bucurest","industry":"Biotech","sub_industry":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.5	50529	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	897	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:44:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.5	50527	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 464 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	464	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 65 62 61 31 63 36 37 34 2d 61 39 30 35 2d 34 34 38 63 2d 62 61 30 34 2d 35 62 34 62 36 31 31 39 31 33 39 35 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 69 6e 74 65 6c 6c 69 67 65 6e 74 2d 61 67 72 65 65 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 69 6e 74 65 6c 6c 69 67 65 6e 74 2d 61 67 72 65 65 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 Data Ascii: {"OrgId":"12BP4E","UserId":"eba1c674-a905-448c-ba04-5b4b61191395","Url":"https://www.docusign.com/intelligent-agreement-management","Base":"https://www.docusign.com/intelligent-agreement-management","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeig
2024-04-16 17:44:14 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:44:14 UTC	1255	IN	Data Raw: 31 34 65 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 14eb{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-16 17:44:14 UTC	1255	IN	Data Raw: 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 69 6e 76 61 6c 69 64 22 7d 5d 2c 22 55 72 6c 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 44 77 65 6c 6c 54 69 6d 65 22 3a 31 2c 22 41 6a 61 78 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 30 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 30 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 30 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 31 33 32 38 39 34 35 34 38 36 35 2c 22 49 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 46 6c 61 67 73 22 3a 7b 22 41 6a 61 78 46 65 74 63 68 22 3a 74 72 75 65 2c 22 43 61 70 74 75 72 65 41 6e 69 6d 61 Data Ascii: "Selector":".invalid"}],"UrlKeeps":null,"DwellTime":1,"AjaxWatches":[],"PrivacyHash":"","UserUUID":"","UserIntId":"0","SessionIntId":"0","PageIntId":"0","EmbedToken":"","PageStart":1713289454865,"IsNewSession":false,"Flags":{"AjaxFetch":true,"CaptureAnima
2024-04-16 17:44:14 UTC	1255	IN	Data Raw: 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 61 6c 74 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 Data Ascii: Target":1,"Tag":"","Name":"value","Action":0},{"Target":2,"Tag":"","Name":"checked","Action":0},{"Target":2,"Tag":"","Name":"data","Action":0},{"Target":2,"Tag":"","Name":"alt","Action":1},{"Target":2,"Tag":"*","Name":"placeholder","Action":1},{"Targe
2024-04-16 17:44:14 UTC	1255	IN	Data Raw: 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 70 74 2d 70 61 74 63 68 22 2c 22 61 63 63 65 70 74 2d 72 61 6e 67 65 73 22 2c 22 61 67 65 22 2c 22 61 6c 6c 6f 77 22 2c 22 61 6c 74 2d 73 76 63 22 2c 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 2c 22 63 6f 6e 74 Data Ascii: ol-expose-headers","access-control-max-age","access-control-allow-methods","access-control-allow-headers","accept-patch","accept-ranges","age","allow","alt-svc","cache-control","connection","content-disposition","content-encoding","content-language","cont
2024-04-16 17:44:14 UTC	348	IN	Data Raw: 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 22 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 5c 22 5d 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 72 6f 6d 6f 20 63 6f 64 65 5c 22 5d 5b 6e 61 6d 65 3d 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 5d 5b 74 79 70 65 3d 5c 22 74 65 78 74 5c 22 5d 22 2c 22 53 69 67 6e 61 6c 73 22 3a 5b 32 2c 31 5d 7d 5d 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 47 65 74 43 75 72 72 65 6e 74 53 Data Ascii: ia-describedby=\"promocodeError\"][aria-label=\"Promo code\"][name=\"promoCode\"][type=\"text\"]","Signals":[2,1]}]},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnabled":true,"GetCurrentS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.5	50518	68.67.153.60	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-16 17:44:14 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.5	50528	31.13.88.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	989	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:44:14 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:44:14 UTC	1507	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri
2024-04-16 17:44:14 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.5	50531	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453050&PageStart=1713289442223&PrevBundleTime=1713289447454&LastActivity=7078&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:14 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:14 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:14 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.5	50537	192.29.14.118	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	1527	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&ref2=elqNone&tzo=-60&ms=589&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=6400A138232C428E87866AF383215C6E HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A44%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289453.2.0.0; _ga=GA1.2.426113818.1713289394
2024-04-16 17:44:15 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:14 GMT Connection: close Content-Length: 49
2024-04-16 17:44:15 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.5	50532	35.84.94.41	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	1295	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: optimizelyEndUserId=oeu1713289388725r0.819072281983362; ds_a=305622db-cab4-46c0-8a17-15a582e0ed4c; ELOQUA=GUID=6400A138232C428E87866AF383215C6E; _gcl_au=1.1.1230353076.1713289393; _gid=GA1.2.379038570.1713289394; _gat_UA-39550292-1=1; _fbp=fb.1.1713289397443.1522943348; _uetsid=cd0ed740fc1811ee9757e57eb98c85ec; _uetvid=cd0fcb20fc1811eebb2cfb7756de5ecb; fs_lua=1.1713289442217; fs_uid=#12BP4E#eba1c674-a905-448c-ba04-5b4b61191395:0de8844f-0637-442b-8977-d3332f04e02a:1713289396921::2#/1744825398; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Apr+16+2024+19%3A44%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=a38208c9-80d3-452b-9416-aa6a3f2bc3df&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_1TZ7S9D6BQ=GS1.1.1713289395.1.1.1713289453.2.0.0; _ga=GA1.2.426113818.1713289394
2024-04-16 17:44:15 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:15 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-16 17:44:15 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 52 4f 22 7d Data Ascii: {"country":"RO"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.5	50534	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:14 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftbd4ea0644d08bed5cf36d1e84c6 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:14 GMT server: istio-envoy connection: close
2024-04-16 17:44:15 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.5	50539	54.156.13.12	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	989	OUT	GET /drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c If-None-Match: "10c460a7d0b096d5b5072c73672e31b6-ssl"
2024-04-16 17:44:15 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "10c460a7d0b096d5b5072c73672e31b6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04SKMPDM5HC7V3HHK9BMB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.5	50538	142.251.15.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	912	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=1596089733.1713289453&url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&dma=0&npa=0&gtm=45He44f0n81NXX2M47v856130670za200&auid=1230353076.1713289393 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmXhua7vb6SinSkvNx5UeKIgAUXTW5HprnUXPgmObKtVGn5cyCpLmazLXys
2024-04-16 17:44:15 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.5	50541	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	437	OUT	GET /0jnmtsdzg6p5/3wr86VnmXKKzf5FOxsUHdh/1ccd35755cdbd168a4a97bc1b6598ea0/man-in-green-smiling.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 117430 Connection: close Date: Tue, 16 Apr 2024 02:54:22 GMT Last-Modified: Wed, 20 Mar 2024 18:11:34 GMT ETag: "f82e873eec69dce505d23959a459cd4d" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 cdebf0009712844928e9487620fe17f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: 0OvHfrXQanhqI6UDu5KAWe7WXuZteGMiuOt5IDveX_vhUyP5J2VzBQ== Age: 53394
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 91 00 00 01 ec 08 03 00 00 00 bd a1 06 7b 00 00 03 00 50 4c 54 45 00 00 00 02 01 03 06 04 0c 15 1a 27 c5 d2 db 77 8e a5 1a 20 2f 0c 08 11 86 ab cb 11 0f 17 07 0a 17 09 10 1e 0d 05 05 15 15 1e 7b 93 a9 1d 27 39 c7 af 93 80 a0 bd 89 af d0 1d 1a 20 82 a7 c7 0f 1c 2f 81 7a 6f 0b 16 26 14 23 37 27 27 30 92 79 60 c5 ac 8f a1 b0 97 22 21 28 26 32 45 a9 af 8e 1a 2c 42 c9 b3 98 ae b4 93 ac b8 9f 72 89 a0 1a 14 15 23 1a 15 26 2c 3c cd b8 9d 84 a4 c1 89 7c 68 7d 9b b9 22 3a 55 90 81 6e 81 92 a2 ae 97 7d 16 0a 05 7d 75 6a aa a5 99 b9 a2 86 87 80 73 a8 b4 99 af ad a6 92 a4 8c 84 86 8b 84 8d 97 8e b4 d4 82 77 62 84 71 5a 9b 77 58 2f 39 4c 1f 11 07 b7 a6 8d a8 8d 72 9d a9 8f 15 0e 0e b1 bd a3 b3 b8 98 9c 8e 7b b5 Data Ascii: PNGIHDR{PLTE'w /{'9 /zo&#7''0y`"!(&2E,Br#&,<\|h}":Un}}ujswbqZwX/9Lr{
2024-04-16 17:44:15 UTC	1514	IN	Data Raw: f2 0f 2d 12 5a 00 91 2b ef 22 10 07 81 10 f9 83 ba 81 a0 43 28 00 8b 3a e2 83 86 f8 14 8d fb 71 6e cb 20 f1 7b 09 1e cd 21 d5 a9 cf 26 b1 6d 5e 5b 13 80 41 e4 eb 42 32 78 0c 7a 73 ad 38 2f 14 81 d4 fe 37 bd ca e2 a3 36 dc 7e 7a 5e 5b 37 bd e2 44 d4 66 ed 47 69 92 5a ac 50 e0 11 4a 8f 24 90 65 24 43 89 24 73 6d 12 a9 02 90 66 b9 ad 50 04 8f 0c 20 7b 07 92 11 b4 79 16 3d 72 8e 2e 19 41 5b 01 0d 38 ca 50 c4 64 39 68 d3 22 b7 5b 00 32 df 04 9f b1 69 21 c7 bc 5a df f8 60 be ce 95 90 95 01 8e 7f 07 6f be 6a b5 7e 94 80 aa c8 73 5e ad d4 eb dc 48 88 13 3d eb 0c d8 78 63 49 c0 e2 6a 17 74 c0 8e 56 3b a0 91 63 c8 eb 13 4b 2b 4f ae 3d 72 9d 3e 3a 05 64 4f 4e 4f 9f bc f2 98 9a 79 a3 3b d5 ed 9e ec 63 2e 07 00 34 5a 3f 6e 8f 4d a4 4b 46 6a 8d da 17 76 64 e7 98 d0 43 Data Ascii: -Z+"C(:qn {!&m^[AB2xzs8/76~z^[7DfGiZPJ$e$C$smfP {y=r.A[8Pd9h"[2i!Z`oj~s^H=xcIjtV;cK+O=r>:dONOy;c.4Z?nMKFjvdC
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 69 5d 6f ee 35 32 c2 21 24 1c 52 48 8a c8 42 d4 16 95 10 23 b4 c9 98 8c 27 e5 f2 72 fb 96 e7 da 05 26 87 fc c3 52 98 24 58 94 47 46 c9 f8 cd 4c b5 55 3c d6 40 32 93 1b 79 64 d1 22 31 81 b8 b7 1b 05 0f 60 e8 43 76 7e 95 2f 18 4f 86 06 5f 3d 30 4c cd 63 d6 10 15 70 02 c9 70 cd 8e 2d 61 8b 67 14 a2 2d 62 b1 d1 06 1a 1f 1c d3 1d 69 90 b8 f0 4a 1a d3 2a fd 4b 43 77 68 e2 d0 88 6c 74 17 8a 6d f2 03 c8 b7 38 96 fc f8 e3 cd 64 92 36 09 c5 14 8c 87 6f 93 70 4c 20 5d 82 32 b9 4c 20 3d cd 0e 22 23 cd 16 90 d6 66 85 26 29 22 2d 90 88 49 28 2c d2 7a 50 65 a7 be e1 92 45 2a 68 5f 08 a4 e4 34 92 c7 2a c6 ec 4e 24 1d 52 b7 90 c5 aa 36 3c b5 87 48 3c 99 46 28 1c 65 92 a5 e2 8f 87 6d 31 19 f4 09 49 87 32 20 55 ae 2d 29 d9 a6 d2 21 c9 27 3c 52 25 f2 a6 88 64 d8 be ad b5 16 Data Ascii: i]o52!$RHB#'r&R$XGFLU<@2yd"1`Cv~/O_=0Lcpp-ag-biJKCwhltm8d6opL ]2L ="#f&)"-I(,zPeEh_4*N$R6<H<F(em1I2 U-)!'<R%d
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 7c be 32 6d 12 9b 24 92 0e 6e df b4 1a e2 b1 b6 9e 7a 6c ef 53 a5 9d 4f dd d9 e8 e1 76 3d 9c 72 cd 53 5f fe c1 9f 7c f0 e5 4f 25 3f d6 46 9b 29 45 d7 5d 01 39 09 91 9e dc 64 b3 49 c9 90 6c 13 d9 36 49 ee c9 56 5e a4 ca f9 58 99 6e dd 49 bd 4f 38 44 b6 c2 76 4d f7 8c f7 48 a1 94 40 fa 33 57 a1 11 d5 83 48 e8 16 92 d3 d5 1c 0d 26 59 92 a6 35 40 5a 56 59 7b 6f bd 9e ee d3 3b ee 91 53 0d 23 9d 47 6e ec 11 28 7d 1a 47 14 2e e5 15 2b 81 ba 11 c7 db 4c 5e 8f ac 6a a4 dd aa 90 87 8c 3b 5f 03 e9 a3 49 68 b4 65 e4 22 72 b0 4d a4 79 64 88 65 e4 8c 1f 71 45 75 f7 f1 ed 35 da 99 e0 e7 2a bd f7 5b 54 7f 5a 44 12 b6 dd 24 51 01 e9 41 bb d4 cc db e4 bc b6 2f 1e 97 47 16 91 67 21 f2 30 15 98 d8 06 c8 46 69 b3 a9 d9 ae 78 a7 20 93 5f 73 a1 99 20 89 98 91 21 e8 4e a9 2d ae Data Ascii: \|2m$nzlSOv=rS_\|O%?F)E]9dIl6IV^XnIO8DvMH@3WH&Y5@ZVY{o;S#Gn(}G.+L^j;_Ihe"rMydeqEu5*[TZD$QA/Gg!0Fix _s !N-
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 59 e3 81 d0 62 77 a7 25 38 3c 08 df d5 b3 56 18 91 0f dd b3 82 31 a2 d5 0e 65 a8 08 e4 e1 30 c9 50 4c d9 70 5d e7 61 3b 3c 92 6e 24 bb 64 c9 a1 01 72 3f bd 48 f2 9a ad e6 91 47 ad fb 38 e6 d0 a1 43 cb d0 24 d6 ed 72 86 62 fd f9 16 b6 91 90 4c 44 a6 8d fc 42 b2 70 fc 4c 31 68 e7 ef 62 b4 dc 78 cc ca 16 69 44 ca 23 41 12 a9 6e 9f 47 6d ae 2c 37 47 93 0e b3 41 6f 37 a5 a8 2d 09 c8 b7 bf 8b 6f 33 91 c2 90 d7 a0 f2 4b 5f e2 02 4b 27 32 cd d7 e8 45 5c 26 93 44 24 34 f2 48 37 4d 24 8f 84 c0 08 da 6a e8 c5 86 23 f5 21 7b 24 8f 34 1e 69 44 1a 93 3c 63 d2 26 96 90 a3 56 96 29 b2 2f d1 4d 12 dc 80 52 a7 66 83 a1 fa 93 b2 49 5f 21 09 aa a9 6e 1a 6a 6a 9e d3 e7 26 09 8a 40 69 2e b9 4f b5 ca 77 89 48 ad fa f9 ea 61 07 92 6d 36 3b d6 89 48 8e 2d fa c6 3d 2b 57 8c bf 1c Data Ascii: Ybw%8<V1e0PLp]a;<n$dr?HG8C$rbLDBpL1hbxiD#AnGm,7GAo7-o3K_K'2E\&D$4H7M$j#!{$4iD<c&V)/MRfI_!njj&@i.OwHam6;H-=+W
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 79 7a a8 a7 07 93 84 c5 30 c9 7c 74 67 de ef 25 8b e4 ef ed 50 3b 91 bf 73 40 fe f8 97 6e db c7 46 30 98 24 84 6b 68 f9 45 ba e7 a7 26 fa b1 59 c7 26 f9 60 46 92 46 52 51 3b e4 57 15 7c 40 92 5c da 63 ca 68 db 5c 14 44 ba 81 55 1b 92 82 d2 48 6e 15 90 5b 61 d1 31 7b a5 31 24 5a f3 06 87 34 8d 07 b6 23 7e 02 61 92 69 26 d3 e7 9c 20 2c 72 6b 8c 24 4d 24 52 e5 d3 43 cd 20 f2 4f 99 48 14 13 da a0 98 0d 92 3b 52 6d 5d dc 19 4f a7 36 31 92 cc 57 0b 49 80 7c ed 0b 2f 7c e5 2b 5f b9 6a cd 3b 96 6f be 7e ff b2 6f 2e 33 90 22 72 f3 9d 1b 38 e5 32 55 90 09 80 f4 5c 84 4a 7a 40 a8 22 3d 4a cd 65 9b 16 ab c1 58 76 49 f1 92 91 dc 59 03 c8 76 24 fd 6d d7 23 fd 8a 8b 62 8d 9f 6a ee 1d f7 78 b3 d9 e8 1e fb fb 99 5b cf 9c fe fb 83 be ce 6a 8b 3f 26 41 24 fa eb a3 ff fa 81 Data Ascii: yz0\|tg%P;s@nF0$khE&Y&`FFRQ;W\|@\ch\DUHn[a1{1$Z4#~ai& ,rk$M$RC OH;Rm]O61WI\|/\|+_j;o~o.3"r82U\Jz@"=JeXvIYv$m#bjx[j?&A$
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: f1 ae f7 2e 38 69 61 92 66 6e 92 fe a2 35 90 6c f6 f7 68 4a 9c a9 c4 2d b5 4d 73 5a 2a c9 81 ff 3d a1 aa e5 ed f8 b1 50 4d 0e e8 14 a7 64 38 bc 22 d7 cc bb 38 13 33 23 59 4b 48 36 a7 55 83 9e 49 a9 4d 53 7d 78 6c bb 22 92 42 a0 88 1c 4b 5d c7 4b dc b6 8c a4 48 e5 93 d4 f7 91 d2 4f 55 60 8e 51 eb 21 38 03 1f ba f6 0a 4e 25 e6 be 56 49 c8 15 3a 16 8e eb 8a 9b 57 d3 c7 b9 a2 ee d0 2a 48 56 ba 62 3d 3a 8b 80 42 e1 90 2e bb b2 94 5c 44 56 ab c7 80 11 39 68 7f e0 f9 d7 d5 44 e2 1d 77 dc b1 95 66 7c 45 b4 4c b6 96 1c e2 02 42 3d 2f 49 7a 57 d6 67 75 65 95 f7 e6 c3 cf f1 38 cc 77 c4 24 4f e5 85 13 97 0c 68 c1 93 3e 04 7a e6 e1 1b 4e ef 5f c1 a9 6e 88 96 45 a6 93 69 73 d0 2e 30 42 a3 f4 f2 0f a7 b8 8d 0a 91 42 32 3d e5 08 5e ca 3f 39 6a df 42 d0 86 44 7a e1 db 1e Data Ascii: .8iafn5lhJ-MsZ=PMd8"83#YKH6UIMS}xl"BK]KHOU`Q!8N%VI:WHVb=:B.\DV9hDwf\|ELB=/IzWgue8w$Oh>zN_nEis.0BB2=^?9jBDz
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 24 d3 d3 b2 c9 0b e7 e6 26 9f f5 68 0d fa d8 25 7f 27 93 5c 1b fc 1b 8d 6d d5 98 a4 80 9c d9 ff 70 a1 58 da 09 91 86 0f 18 01 12 0d 89 4c 50 2b b3 99 e6 32 91 d1 93 8c 59 40 80 0c 8f 34 91 89 a4 2c 32 07 7e 62 7d 64 98 64 5a 24 98 86 8a 1c 45 6d 03 92 46 89 44 63 0e d6 c4 9f 0c 6d 5e 82 db ab c1 eb 12 e6 05 65 a7 1c 1e 92 ba d1 9f 04 d0 ef 5d ee 0d 89 d0 68 1e ff 64 8f 1c b5 c9 4c 72 8a 48 56 99 17 90 ff bd c9 db 96 c8 85 e2 b5 be ca 20 c1 d1 4f 88 2c 8b ac 34 9b cf e2 33 76 d6 00 e3 c0 ab 64 cf 6c d8 a7 66 8d 87 8a 8e b3 ce 06 fe 68 be 91 73 9c 34 49 23 d9 88 1c 30 d4 bd 36 3d ad 12 8d de e9 80 c6 a1 d5 23 e5 83 eb d3 07 3e f1 09 3c f2 dc ad 10 79 ee dc b9 03 3a 16 71 51 43 92 41 a4 83 b6 a5 1d e6 07 b0 49 90 dc c7 29 61 33 33 fb de f7 0d af 45 23 d9 de Data Ascii: $&h%'\mpXLP+2Y@4,2~b}ddZ$EmFDcm^e]hdLrHV O,43vdlfhs4I#06=#><y:qQCAI)a33E#
2024-04-16 17:44:15 UTC	1228	IN	Data Raw: b0 44 f2 e9 ac 46 16 49 73 fa 52 22 c5 a0 bf 25 db b1 fc ad e1 5d d9 b3 6f 24 a3 e1 b1 e9 b6 e4 0c 47 48 f6 c6 71 c0 2b 8f cb 25 b3 ab b6 cd b0 ca 8b 0c 4b 33 ff 93 c7 37 d5 7d 15 40 c2 a3 9a 87 c5 23 12 8f 4d 6b e6 a0 79 08 91 c9 b0 d5 90 99 74 42 64 23 5d 5a a8 c6 23 39 6f b1 a9 52 19 d9 23 ab fc 86 72 ba 88 8c 47 92 6d 07 c8 ad 6d 91 4b 7c df 26 79 3c 52 48 f9 b0 cc 9a 02 b7 3d d2 44 36 6a a3 13 ac a5 49 6b fc a7 37 cc 6b 33 8e d3 e8 39 8e d8 63 88 54 fd 88 04 6d 3a b2 c9 85 33 06 1b 24 34 32 cc 84 e4 e0 0a a4 8d d5 06 2f fc fa 8f fa 8b 63 f8 78 23 c6 39 48 e2 c6 32 c9 bc e1 10 1e 69 25 12 d5 20 eb 91 25 72 aa f4 c5 23 63 90 d6 86 72 5e bf b9 8f 56 1c ff 99 d9 b8 ce ae d3 99 c2 48 1b f6 90 53 9b 68 ce ec 97 de ec d0 b9 b9 04 9e 59 9d 56 26 ff 57 c0 2c Data Ascii: DFIsR"%]o$GHq+%K37}@#MkytBd#]Z#9oR#rGmmK\|&y<RH=D6jIk7k39cTm:3$42/cx#9H2i% %r#cr^VHShYV&W,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.5	50542	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	443	OUT	GET /0jnmtsdzg6p5/7gMtFWydiMHrue6DhrLJQU/483100ca17c7d6f717bc2453fbfbeb0e/pictogram-capabilities__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 747 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 17:42:08 GMT ETag: "9b177d16db0a24ecc2d9163c3dd0ff29" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 744a1f6aa351c9fa7c55143547282de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: R0nwiMcrmjWNCcTmYtCf8OLcddekHEaumtKPRcCCyvpFhArdLnrHpA== Age: 4
2024-04-16 17:44:15 UTC	747	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.5	50540	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	437	OUT	GET /0jnmtsdzg6p5/2EtPn9bUkWstdeKU15nFXY/a121cb9bd5d40d3e539abf9bcb58e4da/man-typing-on-laptop.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	539	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 134108 Connection: close Last-Modified: Wed, 20 Mar 2024 18:20:05 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 11:09:43 GMT Cache-Control: max-age=31536000 ETag: "a5e2650e372d2929f91f13e8db877be8" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eec18dadf208b762f519cab1e8369c3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: mU_aEFRk0MCjCEvLX9J_XCY8zQ3pr_2mm873Z8W4NmW1gbEnHsyDYQ== Age: 23673
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 90 00 00 01 ec 08 03 00 00 00 52 63 6d 45 00 00 03 00 50 4c 54 45 fd fd fd fa fa fa 19 18 18 0e 0d 0d 15 13 13 1e 1c 1c 07 07 07 cc cd c8 28 26 26 21 20 20 25 23 22 2f 2c 2b 3a 37 34 f5 f5 f8 2b 2a 29 3e 3b 37 41 3e 3b 31 30 30 37 33 30 ee f0 f6 e0 e0 e1 d6 d6 d5 c9 c8 c4 49 44 40 ee ee f0 d0 d1 cc 4d 48 43 46 41 3d f3 f3 f3 e6 e6 e8 e9 e9 ec f8 f6 fb e3 e3 e4 da da d8 50 4b 47 d3 d4 d1 35 34 35 dc dd de fb f9 f4 c4 c4 c0 34 2f 2c 5a 55 50 57 51 4c 5f 59 54 ce ce ce 53 4e 49 d0 d1 d2 70 4b 39 ed ee ea 2d 26 23 66 47 39 e8 ed f5 c0 c0 bd 3a 38 3b 2d 14 14 dd e4 ec 6b 49 3a e3 e9 f0 1c 0d 0b 6c 46 34 25 18 15 70 4f 41 2d 1d 1a 1e 14 12 64 43 35 3c 25 1e 50 35 2a c9 ca cb 25 1e 1b 75 4f 3c 35 16 17 55 Data Ascii: PNGIHDRRcmEPLTE(&&! %#"/,+:74+)>;7A>;100730ID@MHCFA=PKG5454/,ZUPWQL_YTSNIpK9-&#fG9:8;-kI:lF4%pOA-dC5<%P5%uO<5U
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: bc db 67 85 73 c8 4d 9b 05 dc 6d fc 2d 46 54 98 be 69 5f 21 e5 f0 63 6b 5b b2 71 41 cd d8 47 2c 91 44 e4 91 f9 d3 15 81 d1 ac 02 89 d4 d5 1a 95 48 03 d2 cf 43 06 db 18 2c 07 a9 a7 82 e8 67 7d f0 30 85 bc d5 5c 36 0c 0a 09 22 15 48 16 47 73 d9 f4 6e 6f e0 b2 b5 2b 1a ef d7 f6 1c 85 0b 2b 3b e6 01 24 78 84 42 f6 a5 90 83 c4 82 4a 2a 93 46 44 03 a7 3d 8c b5 97 38 b5 45 81 3e c2 70 41 46 01 b6 dc a1 9d d6 08 11 c1 c0 6b a3 1a 4d 9c b6 7a 6d 72 d8 9c 6c cc 83 c8 d2 78 69 7c b6 04 e2 54 0a 31 8a 44 f2 2b b5 2f 71 75 16 07 80 c4 a6 43 10 49 2e bb 3c b6 f0 9a 93 8c 66 73 c8 66 25 ba 1e ba 4d 96 02 85 c7 ad 6d 4e 1e c3 62 8b 50 21 d5 5a 2b a4 5b 34 b4 b7 ed 50 85 ec 2f 2c 1e 3b 76 ec a3 85 c2 91 fe 23 e5 d5 95 b7 44 20 31 5a 72 bc 66 41 9b 65 b1 be bb cf fd fe 1c Data Ascii: gsMm-FTi_!ck[qAG,DHC,g}0\6"HGsno++;$xBJ*FD=8E>pAFkMzmrlxi\|T1D+/quCI.<fsf%MmNbP!Z+[4P/,;v#D 1ZrfAe
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 92 c8 2e 23 52 73 92 8c f8 40 a4 95 7e ac 7f 88 40 be d8 b7 c8 7b 27 d9 fc 05 eb 4e 3f b9 40 f9 b6 07 32 1c 6c b5 6c 3b c4 90 51 08 e9 92 9a 79 9e c7 59 8e 5f 88 5c fc 6a 25 da cb 54 c9 9e 08 e4 27 0c 48 47 e3 18 8f a5 9e 48 67 f8 67 23 91 23 0d 28 a3 68 0c 3c 2a a3 f1 02 39 55 0a 39 39 a2 f5 0a f9 86 3f ed 39 d9 43 29 52 12 79 e2 02 95 9f a1 21 97 d5 44 12 29 20 83 44 c2 63 00 52 c5 f1 13 de 67 2f 39 3d 76 c9 78 04 c7 a8 30 fe cc 45 1b 16 af 02 c9 dc 7d 40 d2 fd e6 95 57 e9 53 d3 2c 2c 57 8e 10 30 16 33 0a 21 d1 4a 0d 9d 65 95 64 67 72 a4 34 54 c5 0b 9d 5c b0 90 49 30 88 96 a0 06 d9 d2 94 e2 1f a7 88 18 5b 9b 66 90 55 93 63 2b ad 6e 50 e4 a8 a9 5d b4 d2 c0 5c fd b6 f7 bd 5d 51 e4 1b 49 6b e4 9f 8d 48 09 df 7b b7 3a 06 77 6d 6d c7 9d f3 05 3e 01 76 97 e9 Data Ascii: .#Rs@~@{'N?@2ll;QyY_\j%T'HGHgg##(h<*9U99?9C)Ry!D) DcRg/9=vx0E}@WS,,W03!Jedgr4T\I0[fUc+nP]\]QIkH{:wmm>v
2024-04-16 17:44:15 UTC	15360	IN	Data Raw: 51 48 84 79 c8 c5 32 21 07 21 b6 56 81 68 15 17 ca 46 cd ad 5e 0d c6 7f a3 58 18 e6 5c 18 cc 62 e0 15 6b c1 56 43 a8 df ce 85 c3 e9 91 90 94 88 da 15 4f 81 ce 6c 9a 17 6c 1a 39 06 3b 96 c9 c7 d5 c4 15 85 f0 10 5e ab ae 67 e4 2f 2a df c4 6c 3e 55 58 58 81 24 38 12 cf 03 ab 4a 75 09 ed b5 ce 46 71 f6 07 94 f8 51 19 da 92 f5 ab df 7f fc c6 1b 9f 7a ea c4 89 6f 5e 3d f3 92 1b 66 ce b9 fa ab cb e7 cc 9f 3d 83 86 da d9 97 2f 59 40 62 fc b2 d9 d7 2e 5a 34 5f f6 7d f3 ea 93 bf ed 1b e8 69 8b 86 8c c8 28 22 d9 06 82 00 d9 51 1d 1c c0 9b 64 e6 7d 4f cf f0 3a 4a d2 8e 61 b3 1b 9a bb 9c 46 3a 1c a7 f2 21 e1 31 38 b5 da 8a 00 37 67 fc dd 01 3e 43 b6 c1 87 94 2c d6 24 cf 01 59 67 b2 9d cd 76 50 9a 99 bf c0 51 b6 7b 2a 7d 14 90 47 1e a0 0c 6d 62 d7 d3 ec 49 82 44 88 9c Data Ascii: QHy2!!VhF^X\bkVCOll9;^g/l>UXX$8JuFqQzo^=f=/Y@b.Z4_}i("Qd}O:JaF:!187g>C,$YgvPQ{}GmbID
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: d4 b4 ad bf 82 c9 46 19 b1 e0 50 aa 0d d7 d3 43 d7 5d fb 51 ad 60 00 c8 8d ab 49 30 ca 66 db 81 48 4b 48 32 fb ec ba 25 cf 72 97 bd 72 07 48 ae 54 5a 5c c7 78 e4 f0 7c f5 b2 64 b5 12 8d a5 7a fc f6 6c 3e 24 93 f9 2a 29 f2 9e 02 53 7d 86 07 c9 89 09 48 b3 d9 77 58 7d 45 03 83 67 7a b1 b1 95 a1 ce 30 9f cd 64 bb 1a 0e 77 15 e9 de fe 3f a2 9a eb 77 76 c6 44 64 47 a1 da b5 7f ff fe d1 31 80 1c 19 b5 fb 87 81 09 16 c5 6e df 72 ef 9d 77 de b9 e5 e0 9e 5d 47 f6 4e ec df d9 15 e7 d2 19 9f a9 b3 73 ff 10 5b 40 28 28 a3 a4 1b d2 b2 51 66 7a 93 f8 51 ae 50 43 2b 20 47 5a 66 8d d8 61 9e 7a aa c6 21 d8 b0 16 40 1c 3d 1f 47 bd 1b 9c da 0e c7 be 1b 8a 7a f2 f2 4f d3 60 ae 69 e3 5c 99 a7 78 d4 1a 6a c2 23 24 e3 c3 2c d4 ac cc b4 27 93 5d c2 53 9c d7 d4 3e 63 1e bf 4e 50 Data Ascii: FPC]Q`I0fHKH2%rrHTZ\x\|dzl>$*)S}HwX}Egz0dw?wvDdG1nrw]GNs[@((QfzQPC+ GZfaz!@=GzO`i\xj#$,']S>cNP
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 85 b2 91 6a f8 5a 3e 6f c3 42 55 e9 9a 42 1a 94 ef b4 53 24 45 42 92 56 bb 46 b4 3b 6d a2 6c a9 23 fe 5f fd 0d 00 d9 e2 e5 68 37 24 13 a9 fd 20 ad 5d 1d b1 8e 8d cc 56 60 00 48 df fa 75 6b 1f 7a ed e8 0a b9 9a 92 f1 b2 33 e4 68 44 1a 7b 21 92 86 a3 3e 8d 45 10 c4 94 93 94 cb 96 44 9a cb 7e c2 01 29 73 3e 1b 20 89 6a dc fc 52 be fc 27 35 e0 e7 7e fb 5f 8c 65 11 90 c6 e3 ab 21 f2 6a 3b 46 9a 44 5e 12 00 d9 5f a3 ac 23 17 d8 19 90 ac 83 c8 b6 06 45 27 4c 55 a2 f9 b5 36 a3 f1 29 b9 9c 1a 19 12 34 5d 83 5b 94 8f 88 dc bb 6d 24 d6 57 3a b5 75 de 44 55 1b 19 04 5f 13 43 12 13 31 8c 32 36 5d 05 a6 3d 99 a8 b6 d4 b8 a2 1a d5 db 8a 4a 80 03 47 f6 2e 90 4b f4 57 66 a3 98 f2 db 56 7e a1 ec 78 74 6c 30 a8 54 15 e3 4a b0 2b f9 a3 31 6b 68 6a 61 d7 96 ee 52 31 87 c7 cf Data Ascii: jZ>oBUBS$EBVF;ml#_h7$ ]V`Hukz3hD{!>ED~)s> jR'5~_e!j;FD^_#E'LU6)4][m$W:uDU_C126]=JG.KWfV~xtl0TJ+1khjaR1
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 03 0d 5c 7b b5 f1 37 61 b7 d9 1a ef 15 ed e7 26 df 28 30 f3 1a b8 5c a7 16 de d7 e1 45 78 b7 89 23 c9 4d 16 71 c7 5b 92 4a 72 76 ed 79 f4 5b c8 27 f8 c0 03 39 ec 31 48 78 1c 3b ee 32 e7 50 eb 8a 17 13 9a 3e 1a b7 92 c2 42 fe cd 36 33 c3 5d fd 92 9a 9a 32 28 62 47 93 7a 26 65 14 d0 51 fb a8 58 a4 58 29 3c 51 72 1e 79 91 54 a6 2d 25 7f 42 8d f8 b0 6e b6 8a 01 a5 d2 74 49 64 53 20 5d a8 42 8f e0 b1 4c 1e f3 4d 2d f0 dd df 81 b6 9a 57 77 36 5c c4 9f d6 bf 6a bb 90 5a 2d da 7c 91 6f 42 04 72 44 58 9a bc 8a ae 7c 5e a5 d9 3d df 95 3e 16 28 a4 07 52 e2 67 1a 49 ff dc 75 eb 24 91 8b 29 4f d0 36 32 5c b2 01 d2 e5 62 40 ed b2 1b 03 61 9d fd a1 8f 0b 48 ee d3 9d 4c de 30 5d d9 90 72 f6 fb 8c 5f 46 cb fa f6 3a 78 54 95 9b 75 cc 2c 47 1f 35 fd 24 02 90 9c b9 f2 54 e6 Data Ascii: \{7a&(0\Ex#Mq[Jrvy['91Hx;2P>B63]2(bGz&eQXX)<QryT-%BntIdS ]BLM-Ww6\jZ-\|oBrDX\|^=>(RgIu$)O62\b@aHL0]r_F:xTu,G5$T
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: f0 0c fa 66 60 10 20 cf 0f af e1 aa 51 e1 35 ee fa 1a 3c ae 5d d2 77 f1 51 f7 ee 64 88 94 d3 86 49 ff e2 b0 79 e0 4d 08 21 40 ee da 25 89 4c 0e 24 d2 df 53 13 a6 5a 41 d3 17 12 50 20 04 09 3d d3 f5 1f ed 0c e6 76 e4 7f 23 09 08 24 82 98 90 48 24 1d 8e 10 5c 97 10 e4 90 68 d4 09 12 76 69 b4 21 64 64 83 3e 27 47 5d 9b 45 68 81 50 ec 9d ca 47 18 7e 6d be 29 8a 67 a7 45 9e 9a bb cd 6b 96 ba 48 54 29 a4 34 12 3c aa e4 c5 bb 6e 4c 57 cd a4 95 aa c3 a0 c0 65 43 84 5a c4 f2 20 19 af 2e 27 4e 46 33 5f 1a 09 92 7c a0 93 a6 95 28 e5 00 4a 69 0e 9c d0 87 1b 8a bb 97 3b 5b 3f e4 44 d2 34 92 6e 6d 88 94 46 da 30 72 ab 5c 73 a9 1f 80 d4 b7 6a 3f e2 e4 91 0f 23 ef 31 f8 fc 4f 81 f9 95 ed be 77 f6 90 74 05 68 ce 7f fb e6 24 52 3d 0e 56 68 91 38 19 81 c4 0c 48 8f 43 ce 80 Data Ascii: f` Q5<]wQdIyM!@%L$SZAP =v#$H$\hvi!dd>'G]EhPG~m)gEkHT)4<nLWeCZ .'NF3_\|(Ji;[?D4nmF0r\sj?#1Owth$R=Vh8HC
2024-04-16 17:44:15 UTC	4060	IN	Data Raw: 93 6c 25 a2 b8 87 a8 5f 54 b3 93 db b3 99 0e 72 34 ea f6 1b 18 1b 50 fd ae 56 7f 65 e4 97 d8 28 52 74 9a 80 64 b9 12 e7 46 b9 33 fc 46 48 d3 40 91 d4 23 50 aa d7 16 95 a9 0a 33 9d 1e a3 b4 1d 92 91 d1 64 66 55 94 81 3d dc e1 60 e3 e9 58 81 39 e8 49 63 2a 25 29 8b ad d5 77 5a 48 67 e5 69 7c 95 80 cf 99 d4 30 00 e4 25 97 5e 77 6e 70 88 34 0e 4d 19 f2 86 1c b5 e4 1a 8e 92 3c 04 ed e5 72 b1 c5 27 a1 71 78 b4 c9 b4 f7 51 d2 0f 90 e2 11 22 49 6d 6b ff 8b 11 79 d2 69 a1 d1 ae 4f cf 84 f7 3a e1 d7 e6 1c 6b 0b f4 44 1a 01 30 90 e8 bd 9f de 1b 7c 14 2f 47 97 3d 5f 2a 01 6d cb 7a 4a 2a cb 95 7a 01 4c 04 2e 59 99 c7 d3 24 54 9c 3e 8e 5e 32 5d 48 7a e5 d8 c0 93 71 9d d0 53 2c 75 ce 67 c7 d6 e6 e7 a7 8a 93 59 24 1e cf 4e 4e af 2d bf b8 76 6a 46 bf 53 49 e3 a9 b9 da e1 Data Ascii: l%_Tr4PVe(RtdF3FH@#P3dfU=`X9Ic%)wZHgi\|0%^wnp4M<r'qxQ"ImkyiO:kD0\|/G=_mzJ*zL.Y$T>^2]HzqS,ugY$NN-vjFSI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.5	50544	104.244.42.197	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	928	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
2024-04-16 17:44:15 UTC	392	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:14 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 77a283f0219fa3c3 strict-transport-security: max-age=0 x-response-time: 8 x-connection-hash: 24e4a80f866d709666a756c98054faf93314af7c7175181fe139d451870e7e09 connection: close
2024-04-16 17:44:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.5	50545	104.244.42.67	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	1065	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
2024-04-16 17:44:15 UTC	401	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:14 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7b6768dd620a28cc strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: 9db00c0a4df37df037a9d0e3912fba234fece932ac4b1cf43637e1c6e33ba548 connection: close
2024-04-16 17:44:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.5	50546	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	441	OUT	GET /0jnmtsdzg6p5/3TAdiUd61UBrhm8tbK7b4x/5390e2088171715cae7adbf38ba13ba6/pictogram-extensions__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1008 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 19:31:04 GMT ETag: "093c01e5c7bf8ca66dbd361f32ec07ba" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e451d8e60ee9588b9f519a910d9157a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: SdiXXUUWj2_Ng-n8xB59_d2xGyc7qBoF23xw7hee5wCSm1UkZjQX0g== Age: 4
2024-04-16 17:44:15 UTC	1008	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.5	50548	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	448	OUT	GET /0jnmtsdzg6p5/3ZHmibD8YE98gESgVfDsYK/08c2189e5a6929c46c720a73adedc569/pictogram-platform-services__1_.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	513	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 706 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Wed, 03 Apr 2024 17:53:33 GMT ETag: "24243f4f86f04118e67ae86e361c85e7" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 a53c5eb15bcdaa306b21a04e191f78de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: FJxZW9e3NiHCJY6fVQH1DTzfbvbm7S8YIrSrlyF13Nf35TNFULZMWg== Age: 4
2024-04-16 17:44:15 UTC	706	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 39 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.9.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.5	50547	68.67.160.186	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	840	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; receive-cookie-deprecation=1; uuid2=6380132047284574994
2024-04-16 17:44:15 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 16 Apr 2024 17:44:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=6380132047284574994 AN-X-Request-Uuid: 7ca2272a-3c1c-49b9-b328-a57caf0e4008 Set-Cookie: XANDR_PANID=QCrqAF9Y6N89alIjZLRaOooA7jGzDYvBhyTur8pcNG3BBtslTsD0DkIfhwxCdKWzLjC8Htt-tZrL_l34PovEW2JoBIQbfzBRtYGuWyTR1pg.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:44:15 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 04-Apr-2034 17:44:15 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6380132047284574994; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 15-Jul-2024 17:44:15 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.5	50551	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	433	OUT	GET /0jnmtsdzg6p5/3LWVrC9oDrGbQmlAS6i7uN/9670d83c92fb7522216623add9fb430d/illo-docusignIAM.svg HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2897 Connection: close Date: Tue, 16 Apr 2024 17:44:12 GMT Last-Modified: Thu, 28 Mar 2024 20:08:52 GMT ETag: "2400caa2aa3609641173dbe8af0b2513" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 daffabb457891712cb3e53dfa8708c94.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: QWrjrrDLtwhGnLV-cJYIC9ihI4fZOyC00WtOupIZMiVPLCgp_AOt0A== Age: 4
2024-04-16 17:44:15 UTC	2897	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 36 34 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 39 32 20 36 34 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 38 38 30 5f 31 31 36 36 31 35 29 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 39 32 22 20 68 65 69 67 68 74 3d 22 36 34 39 22 20 66 69 6c 6c 3d 22 23 43 42 43 32 46 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 36 30 2e 39 38 34 20 37 31 37 2e 30 35 35 56 36 30 32 2e 31 35 32 4c 36 36 37 2e 31 31 35 20 35 35 32 2e 31 32 32 56 36 36 36 2e 33 30 33 4c 35 36 30 2e 39 38 34 Data Ascii: <svg width="1092" height="649" viewBox="0 0 1092 649" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_880_116615)"><rect width="1092" height="649" fill="#CBC2FF"/><path d="M560.984 717.055V602.152L667.115 552.122V666.303L560.984

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.5	50552	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:15 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-16 17:44:15 UTC	988	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 20 3d 20 7b 0a 09 09 09 64 6c 6f 5f 69 6e 69 74 5f 73 70 61 6e 3a 20 27 49 4e 49 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 72 75 6c 65 5f 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 73 70 61 6e 3a 20 27 52 55 4c 45 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 68 61 6e 64 6c 65 5f 65 76 65 6e 74 5f 73 70 61 6e 3a 20 27 48 41 4e 44 4c 45 5f 45 56 45 4e 54 5f 44 55 52 41 54 49 4f 4e 27 2c 0a 09 09 09 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 3a 20 27 43 4c 49 45 4e 54 5f 45 52 52 4f 52 5f 43 4f 55 4e 54 27 2c 0a 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e Data Ascii: function(FS) {const eventNameMap = {dlo_init_span: 'INIT_DURATION',dlo_rule_registration_span: 'RULE_REGISTRATION_DURATION',dlo_handle_event_span: 'HANDLE_EVENT_DURATION',dlo_client_error: 'CLIENT_ERROR_COUNT',};function sendEven
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 61 64 6f 62 65 5f 61 6d 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 63 65 64 64 6c 27 5d 20 3d 20 5b 5d 3b 0a 09 77 69 6e 64 6f 77 5b 27 5f 64 6c 6f 5f 72 75 6c 65 73 5f 67 6f 6f 67 6c 65 5f 65 63 27 5d 20 3d 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 70 61 67 65 76 69 65 77 22 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 70 61 67 65 54 79 70 65 2c 20 70 61 67 65 4e 61 6d 65 29 5d 22 20 7d 2c 0a 20 Data Ascii: window['_dlo_rules_adobe_am'] = [];window['_dlo_rules_ceddl'] = [];window['_dlo_rules_google_ec'] = [ { "id": "fs-ga-pageview", "source": "dataLayer", "operators": [ { "name": "query", "select": "$[?(pageType, pageName)]" },
2024-04-16 17:44:15 UTC	425	IN	Data Raw: 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 63 6c 69 63 6b 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 63 6c 69 63 6b 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 Data Ascii: "operators": [ { "name": "query", "select": "$.ecommerce.click.products[0]" }, { "name": "insert", "value": "click_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-action", "source
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 70 72 6f 64 75 Data Ascii: 1000destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.add.products[0]" }, { "name": "insert", "value": "add_produ
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 72 6f 6d 6f 5f 63 6c 69 63 6b 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 Data Ascii: { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert", "value": "promo_click_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-checkout-action", "sour
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a Data Ascii: an-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-action", "source": "dataLayer", "operators": [ { "name": "query", "select":
2024-04-16 17:44:15 UTC	339	IN	Data Raw: 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 Data Ascii: t": "$[?(event=view_item)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "FS.event" }, {
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 61 64 64 5f 74 6f 5f 63 61 72 74 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 Data Ascii: 1000rs": [ { "name": "query", "select": "$[?(event=add_to_cart)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "add_to_cart" } ],
2024-04-16 17:44:15 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 34 2d 65 2d 63 6f 6d 6d 65 72 63 Data Ascii: { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga4-e-commerc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.5	50550	18.245.124.24	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	643	OUT	GET /bg9s?x-amz-cf-id=Sup5EmQI1r9DUbzCVhYpRimQsvZXh5lizsqel2zeJEH2Vyl6mkiByw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 12:11:12 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 a1ee2f3d4ad7afa58c3219e56c8cd250.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW57-P9 X-Amz-Cf-Id: YE_twJotcUTVsM3KivUspQL-jmXxIo2nlRL0YyHkjKO7ZHzfG4cyEA== Age: 27114 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.5	50553	54.230.31.105	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	462	OUT	GET /0jnmtsdzg6p5/1lBNWvcCorq4OkqECvYFZ2/68e3295cdee439f27e3bdbf90420ffdf/woman-smiling-holding-laptop__1_.png?fm=webp&q=50 HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:15 UTC	535	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 39638 Connection: close Last-Modified: Fri, 29 Mar 2024 00:03:16 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:15 GMT Cache-Control: max-age=31536000 ETag: "6def8a47bdac6cc263e9371f1eefeb9d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e779e6690108fc19727694cd1f90461a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C3 X-Amz-Cf-Id: CR5fDg4JoF5rPbNZtsIDhWjAHBZK9bwOssnZRBJhARBnCSfmuDqgmA== Age: 4
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: 52 49 46 46 ce 9a 00 00 57 45 42 50 56 50 38 20 c2 9a 00 00 30 45 04 9d 01 2a 48 03 48 03 3e b1 52 a3 4c a7 24 a7 ad a6 b1 5b 59 b0 16 09 65 6e 20 6b 06 b7 f8 b9 ed e0 fa ec 1d 9a d2 02 62 02 a7 f2 64 b8 b7 77 21 3f 5d c1 a7 e4 5d b4 f8 2e 95 12 bc fa dd 35 3e 3e 7f bd f4 e9 cd 32 ad 33 7d ff e7 da 07 f5 5f ff 9d 59 36 cc 9f 20 f1 87 f2 df ef 7f fb 7f bb f2 8f f3 9f 7d 8f eb 3d 34 b4 4f 5e 0f ee bf f9 ff 9d ed 33 fe ce c8 dc 7e 7a e2 7f c7 96 ff 61 ff df d2 7b e9 7f f2 79 7e ff e7 ac df 7b 76 df 8f 0f ff ef a6 2f ba ca a8 52 47 75 44 8e 34 dc db da e7 b1 42 2e 0b 97 54 48 66 d5 1e d2 ea 7f c3 35 5b cf 97 8a f7 4a 23 c5 08 f2 a2 f1 f0 2b ab 27 5e 09 cb 77 cb 80 cb 03 78 7c f2 4c ea d7 29 c5 f8 c3 29 18 0f dd e9 eb f0 1c ab ed 6a 9f 19 ee 92 da 0a 07 cd c7 Data Ascii: RIFFWEBPVP8 0E*HH>RL$[Yen kbdw!?]].5>>23}_Y6 }=4O^3~za{y~{v/RGuD4B.THf5[J#+'^wx\|L))j
2024-04-16 17:44:15 UTC	16384	IN	Data Raw: cd de 04 21 54 37 1c e9 b6 e7 87 73 0a 38 53 80 ac 5f 30 b6 0a f2 83 53 82 10 c0 00 1b 38 86 e0 8b 5d ae b2 c2 21 1e 8c ba 6c b7 56 f4 9b 25 fa 34 ad 21 f8 38 6b 1a 77 42 a1 27 db 66 4a 35 c5 a1 37 b3 1b c8 20 a1 eb dd fb 36 30 a0 ab d5 e5 f3 6c 3f 10 de 59 da 2d 44 02 e0 e9 0d df 69 13 1f 72 6f 67 48 6f 81 33 4b 0d d3 1c 8b d2 b4 12 ef 16 b1 46 fc 3f d5 16 d5 2f b6 8b d4 79 23 bd 29 d4 dc 5a 43 eb c2 d9 4c ee 18 fb 62 3b 8d 70 03 ca a0 a3 86 2a b9 fc 51 2f 13 26 d6 7f 58 30 d6 b8 d2 dd 11 db 66 fd 8a 5d 20 dc 38 94 e9 7a 4c 10 1d 90 9a 7c d6 65 d6 a8 5c 66 a6 c2 2a e2 79 60 4a 79 83 ab 69 6b 19 f7 39 61 12 e0 dc 36 ef 2f 3a 28 19 59 c9 8a 47 33 e6 bc 01 d9 14 a5 2f 91 23 34 44 0a 66 43 5a cc e2 3a 71 29 00 dc eb c3 9e 26 e1 bf 66 8e a8 02 bb 62 4c 1b f7 Data Ascii: !T7s8S_0S8]!lV%4!8kwB'fJ57 60l?Y-DirogHo3KF?/y#)ZCLb;pQ/&X0f] 8zL\|e\fy`Jyik9a6/:(YG3/#4DfCZ:q)&fbL
2024-04-16 17:44:15 UTC	6870	IN	Data Raw: 17 31 7e 7d f3 76 94 82 8f a3 9b eb 40 72 a1 08 6f c7 da ff 9e 16 f2 fd 9c 7e 60 2e 5e 54 51 53 cc d7 56 7f ef 97 15 41 b0 ad ea f2 d5 96 2b d5 d2 a4 e6 51 60 88 96 73 1a 6a a8 32 da 7b df c8 05 0e ae e7 96 16 db 21 5a de d5 28 6b 45 62 d9 25 8b 6e 84 0f 96 56 65 a0 69 b4 5d 3e ed 68 49 6b 98 04 ac 14 a0 1f 02 f0 c6 37 da ee 2d 5b bc ed f5 2f 31 9f 4d 82 e0 eb cb 50 dc 26 19 7a aa 11 99 09 70 a2 31 71 95 d3 c4 f2 b7 17 a2 59 73 6a d7 ef 0b 55 27 1c f7 1a dd d2 f7 b5 ae 1e 5f 9a f2 68 cf e8 94 fb c8 62 06 84 dc ea fa fc de 65 53 9c 2d da fc 08 a2 29 1a cc 7d 1d 85 0b bc 00 8c c5 3f 7d dd 0c 76 4c 9f a6 2e 9b ff ad d3 51 5a 7d 2b c7 bd 6b c2 25 aa 56 9c e5 02 59 02 a8 ba 85 ca 18 d0 be 3d 85 35 ea 92 6e 51 ab 8f 71 9b e4 3c 59 02 fb 3f be 0e ab f8 46 7f bf Data Ascii: 1~}v@ro~`.^TQSVA+Q`sj2{!Z(kEb%nVei]>hIk7-[/1MP&zp1qYsjU'_hbeS-)}?}vL.QZ}+k%VY=5nQq<Y?F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.5	50554	34.197.111.80	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	3281	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&t=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign&tip=ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:15 UTC	299	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-16 17:44:15 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.5	50555	64.233.177.154	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	945	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=681032990&gjid=335798148&_gid=379038570.1713289394&_u=SDCACEABBAAAACgAIAC~&z=555198011 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmXhua7vb6SinSkvNx5UeKIgAUXTW5HprnUXPgmObKtVGn5cyCpLmazLXys
2024-04-16 17:44:15 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.docusign.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Tue, 16 Apr 2024 17:44:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:15 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.5	50557	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	875	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TB8J8TYESQ02KFWEXWX Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.5	50556	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	877	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TBENWRK7GGNKQ76BBZQ Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.5	50559	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	872	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TB9JNPC4WNZ86HH703G Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.5	50560	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	878	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TBEM413EM19ZGQNTNHA Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.5	50561	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	871	OUT	GET /_next/static/chunks/885-d6ecc87b4abc63e3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "bd342ef2d4a80457fa21dbc3be6ee406-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Tue, 16 Apr 2024 17:44:16 GMT Etag: "bd342ef2d4a80457fa21dbc3be6ee406-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TBC735A3VEDZRNV85G0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.5	50558	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	879	OUT	GET /_next/static/chunks/pages/drift-70616663443cb372.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "38b66efda4b7a2f4a37d3065793a65e2-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:15 GMT Etag: "38b66efda4b7a2f4a37d3065793a65e2-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TBCSDGWW3Q999J7BNX2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.5	50562	18.160.10.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:15 UTC	618	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:44:16 GMT Apigw-Requestid: WVHVkg2NIAMES4w= X-Cache: Miss from cloudfront Via: 1.1 73c5607bdb5db0d651e25c848846d554.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: HiZC2pdQj-IUyclFv-keKXxBhiS8khikgHQJv2Iiku6Byxg2PtzHAA==
2024-04-16 17:44:16 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.5	50564	35.244.154.8	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; rlas3=3BHbUbG7UQZluMQylbDpAu8HPjkpJnXD93yRfB59YbU=
2024-04-16 17:44:16 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=JS+619mmNltluMQylbDpAu8HPjkpJnXD93yRfB59YbU=; Path=/; Domain=rlcdn.com; Expires=Wed, 16 Apr 2025 17:44:16 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLbx+rAGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sat, 15 Jun 2024 17:44:16 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 16 Apr 2024 17:44:16 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.5	50566	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	596	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=3&ClientTime=1713289453654&PageStart=1713289442223&PrevBundleTime=1713289447454&DeltaT=590 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:16 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.5	50567	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	698	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-16 17:44:16 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-16 17:44:16 UTC	1540	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-wri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.5	50569	3.161.150.40	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	604	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&page_title=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1c141590-1a76-4e81-89ca-9edb3b2a2ebf; tuuid_lu=1713289454\|ix:0\|mctv:0\|rp:0
2024-04-16 17:44:16 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Tue, 16 Apr 2024 17:44:16 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: e63c452b-aa12-46b9-ab12-ad9375e5cc5b Vary: Origin X-Cache: Error from cloudfront Via: 1.1 ee241db87cad16c230c7108bb527de30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P5 X-Amz-Cf-Id: iSy3Lxcdq7jPjZ6drdkPEHEy2cFxVo-7n5C_2xed0cxayd9rfQPiug==
2024-04-16 17:44:16 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.5	50568	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:16 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.5	50572	104.244.42.133	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	692	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=6647dbb3-9e1b-4107-bb5c-2527270f2bef
2024-04-16 17:44:16 UTC	392	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:16 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 1c4b1c5147adc6c2 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 3f07ec513bac69d0a5798643cf8b875b8b22e5572cd8c3dd3b619afdfc0325e9 connection: close
2024-04-16 17:44:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.5	50571	31.13.65.36	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	661	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&rl=&if=false&ts=1713289453676&sw=1280&sh=1024&v=2.9.153&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713289397443.1522943348&cs_est=true&ler=empty&cdl=API_unavailable&it=1713289453577&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 16 Apr 2024 17:44:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.5	50573	104.244.42.195	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	829	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=821eeef3-d43f-404a-b77d-50f42b1f99a4&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=e1b5825f-88d7-4536-a3c2-56d740fef87a&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171328939708541225; guest_id_ads=v1%3A171328939708541225; personalization_id="v1_KpsmtIEglZh6fw1g5X8+ow=="; guest_id=v1%3A171328939708541225
2024-04-16 17:44:16 UTC	400	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:15 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cef8baecf44e48f4 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: dc84f55c511b49fe6604b907311afdc0ac99c40d15d5f5009c9fb05192a2f0a8 connection: close
2024-04-16 17:44:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.5	50575	13.32.151.16	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	437	OUT	GET /bg9s?x-amz-cf-id=Sup5EmQI1r9DUbzCVhYpRimQsvZXh5lizsqel2zeJEH2Vyl6mkiByw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 16 Apr 2024 07:28:11 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 53c349fc522efbb2ef351788548039c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: USJUKCK-9IcNtfnZP6aPyPqvFla1A50LooIlhfk2J11Tw_kRZsGobw== Age: 36966 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.5	50577	172.217.215.103	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=681032990&_u=SDCACEABBAAAACgAIAC~&z=137042810 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.5	50576	52.200.95.225	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	3075	OUT	GET /saq_pxl?uid=ajHnYbZeVu4tl5p03thM2g&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&t=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign&tip=ODNa5wH_aRhRmKcU__y4y58UuyCZ3uagXihcH9F7bAs&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-574b2083-e644-55af-4eb8-953600e21e55%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%252Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk&sa-user-id-v2=s%253AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%252B%252BwQ%252BsWs3itb4vZJnyvNcd57P6%252BYmS%252F5wbPCLn4&sa-user-id=s%253A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:16 UTC	279	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 17:44:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-16 17:44:16 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.5	50578	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	880	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ab355fa9d59b4c79fe46574dec4d49e6-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:16 GMT Etag: "ab355fa9d59b4c79fe46574dec4d49e6-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TVQ3YVVZBDDDZSGVNGR Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.5	50579	3.212.91.35	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	878	OUT	GET /_next/static/ZxrF8sanFm3W0PN5n_lhP/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=305622db-cab4-46c0-8a17-15a582e0ed4c&ds_drt_hfc=1&ds_drt_country=ro&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=5f133643-88c7-4874-90d8-11c45d44fa94; driftt_aid=5f133643-88c7-4874-90d8-11c45d44fa94; drift_eid=305622db-cab4-46c0-8a17-15a582e0ed4c
2024-04-16 17:44:16 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Tue, 16 Apr 2024 17:44:16 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HVM04TW1NGA8VN0K0ASTHXJW Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.5	50580	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	656	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net If-None-Match: "d320e83a1b98d0793815b4e22b96825b" If-Modified-Since: Thu, 04 Apr 2024 20:13:54 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	852	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Tue, 16 Apr 2024 17:44:16 GMT Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 12 ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 19ce5400ce3c3ceb334a546c0524d848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: u4EI2y9y2XzpbBzXhQItswAaA3WU_nsBdzU3f-EMl24Tshy-Vm2luQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.5	50581	64.233.177.157	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	693	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=681032990&gjid=335798148&_gid=379038570.1713289394&_u=SDCACEABBAAAACgAIAC~&z=555198011 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmXhua7vb6SinSkvNx5UeKIgAUXTW5HprnUXPgmObKtVGn5cyCpLmazLXys
2024-04-16 17:44:16 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Tue, 16 Apr 2024 17:44:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.5	50582	18.160.10.75	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	382	OUT	GET /?domain=docusign.com&pId=6380132047284574994 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Tue, 16 Apr 2024 17:44:16 GMT Apigw-Requestid: WVHVqiuaoAMEPUg= X-Cache: Miss from cloudfront Via: 1.1 68a3b1d5c75429221abc685a453afb60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: J00sulMXoifZQAhYo8BehecPpNCBa_KHV9PpIo6JNseaTWlaVKCvnw==
2024-04-16 17:44:16 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.5	50583	172.217.215.104	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	581	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=426113818.1713289394&jid=681032990&_u=SDCACEABBAAAACgAIAC~&z=137042810 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:16 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 16 Apr 2024 17:44:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.5	50584	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	1163	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=ed91c088-7bc1-4da7-aed3-66a4a48ca451&sessionStarted=1713289455.802&campaignRefreshToken=e86c19ce-3176-4988-8a04-41e2e39a617d&hideController=false&pageLoadStartTime=1713289454531&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3D305622db-cab4-46c0-8a17-15a582e0ed4c%26ds_drt_hfc%3D1%26ds_drt_country%3Dro%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:17 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 15 Date: Tue, 16 Apr 2024 17:44:17 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 268f65a0b054ce4bd2ab49c3b30f4bae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: ijyOPR7FnPoIV-LzeybpM7gT9Kiq3zQkGGFJ738pM9HOY07HaRTG2w==
2024-04-16 17:44:17 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.5	50585	18.160.18.33	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:16 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713289454531 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:17 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Tue, 16 Apr 2024 17:44:17 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4a9d2f26d7f571e9f468d5bd20d9ae18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: HjvXloe63QmDPmdIsa8EFfMoKSzcJCERBXHV4C4j9JLq_71WJDNMtQ==
2024-04-16 17:44:17 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.5	50586	34.111.140.246	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:17 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1497 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:17 UTC	1497	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 36 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 32 38 39 33 38 38 37 32 35 72 30 2e 38 31 39 30 37 32 32 38 31 39 38 33 33 36 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7260","visitors":[{"visitor_id":"oeu1713289388725r0.819072281983362","session_id":"AUTO","att
2024-04-16 17:44:17 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Tue, 16 Apr 2024 17:44:17 GMT server: istio-envoy x-envoy-upstream-service-time: 4 x-request-id: 6bd3796e-002a-4bf8-a493-4d0e45166645 x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.5	50587	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:17 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 143 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:17 UTC	143	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 69 6e 74 65 6c 6c 69 67 65 6e 74 2d 61 67 72 65 65 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management%22%7D
2024-04-16 17:44:17 UTC	889	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Tue, 16 Apr 2024 17:44:17 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 1840d5b2e90a4945 vary: Accept-Encoding x-envoy-upstream-service-time: 10 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 ede1802516dab8225770d22f89eefe52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: KcUQ6WPQD_UpvzHUdVpR4EC1K4YKTZgqUkGQGSpj49zy3U1BDI0PyQ==
2024-04-16 17:44:17 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.5	50588	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:17 UTC	867	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=1&ClientTime=1713289456916&PageStart=1713289454254&PrevBundleTime=0&LastActivity=825&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 57098 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:17 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 96 e3 36 92 28 fa 2b 9c aa 53 c7 95 b6 94 45 52 7b 66 b7 cf b8 bd 4c 7b 7a 7d dd be b7 67 ae ed d3 87 92 28 89 99 94 a8 22 a9 dc 74 6b ce fb 8d f7 35 f7 5f de 0f bc 5f 78 58 49 2c 01 10 d4 92 55 f6 64 55 bb 2b 33 08 04 02 40 20 10 08 44 04 f6 af fe 1e bf 7f 75 15 74 5e fd 63 15 6f c8 0f df de 95 c5 ab ab 1f f7 af fe 90 6c e6 af ae c2 41 e7 d5 57 f9 12 83 5e ad ca 72 5b 5c bd 7b 77 7f 7f 7f 39 cf 66 bb 22 59 6e 2e 67 d9 fa 5d b2 29 e3 34 4d 96 f1 a6 ec 46 cb 3c 8e d7 f8 a7 75 b4 89 96 e4 c7 57 9d 57 bf f9 97 6f fe f2 f5 0f ff f9 d7 6f bd 55 b9 4e bf 44 90 63 b0 bd fa b9 a2 f8 43 87 93 3a 0e 26 e3 8a d8 45 94 16 71 27 80 cb 9d a6 4b 9b e8 2e 59 46 65 0c 12 23 90 f2 6a 1e 2f a2 5d 8a aa 6c 76 69 da 79 35 cf d6 ec 47 42 Data Ascii: 6(+SER{fL{z}g("tk5__xXI,UdU+3@ Dut^colAW^r[\{w9f"Yn.g])4MF<uWWooUNDcC:&Eq'K.YFe#j/]lviy5GB
2024-04-16 17:44:17 UTC	16384	OUT	Data Raw: ae a7 ef 3d 1c 29 99 d4 ae 09 af 76 eb d6 a2 a1 4e 6b b6 97 dc 1b 2c e1 69 47 75 18 1f de 5b 93 06 e0 70 a5 f6 f2 f0 09 ca 31 70 1b e5 d1 12 1d a0 da 8f a7 09 51 1d 34 2c ed 7e be f4 78 18 12 8d 6f 03 c4 d4 1d 96 2d a0 8d a4 a0 4a 1b a5 a4 fe 16 e7 79 96 1f d6 09 18 57 f5 86 d1 1c ff 15 69 4f 36 6f f1 fd 59 e7 f2 30 d2 6b 20 b5 3b 17 27 61 1a 11 97 28 e1 f1 48 53 42 3b e1 9b 8b 3a 48 4b e2 2f d5 f4 44 f8 0d 1d 17 8e ed da 69 3a b5 a7 79 0f 25 63 80 20 42 95 f3 bb 7a bc af 77 dd 80 5c e0 89 32 67 28 eb a3 e3 a0 17 ab f9 5e 42 41 96 e3 59 a7 c2 dc d5 16 41 80 e4 77 11 6a 3a a9 f3 dd 20 54 ed 20 c7 ce c3 25 bd 95 3f cd 74 30 64 40 c4 3a 9a 0d 0b a5 64 8f ec 2e 92 38 9d b7 13 71 0d 12 4e c5 0b 6e cd cc 0d 60 f0 a6 8d 4a 42 14 85 66 2a db a2 54 be d0 83 bf ac Data Ascii: =)vNk,iGu[p1pQ4,~xo-JyWiO6oY0k ;'a(HSB;:HK/Di:y%c Bzw\2g(^BAYAwj: T %?t0d@:d.8qNn`JBf*T
2024-04-16 17:44:17 UTC	16384	OUT	Data Raw: 01 67 24 3f 60 1a 32 4a 1f 87 22 da 84 0a 87 62 2f 24 fc 00 0e ab 91 ab 20 c7 c3 27 a7 66 2e 81 93 4b 4f 98 48 85 8f 08 80 5b d6 b2 01 58 9e 91 e2 2c 7c 42 44 58 89 80 ea f5 46 e0 b8 c2 90 6f 80 b8 c7 20 ce 81 d4 45 0f 98 84 32 cd 11 e7 06 9a 8a 72 22 30 11 58 3a 26 5b e9 22 d1 07 3c 98 e2 5a a5 37 18 cb 60 13 db 8a 60 81 4d 81 23 3a 25 4c 0c f6 02 ff 42 0e 1f 13 8f db ea 3a 8f b7 dd 3d aa 2f 24 6f 20 49 6d f1 bb e0 d0 f3 5e bd 1a 34 62 19 30 66 64 44 f0 fb 4c 44 44 ed 60 68 25 cc 0b 2e 69 a2 cc c3 f0 88 16 80 a4 c9 e4 95 2e 5c f3 f9 4c 11 f5 87 4f 26 d1 96 9b 02 db 0f 36 91 47 cb 77 cf 64 d8 33 19 a8 52 6a f4 b8 03 40 2b 31 12 a4 af 5e 29 a9 64 0b 69 8c 32 93 8e 89 87 06 48 67 80 e5 fa 94 80 d3 2e f1 29 3a 03 64 42 bc 17 44 30 80 14 b9 28 0b 00 d5 03 ca Data Ascii: g$?`2J"b/$ 'f.KOH[X,\|BDXFo E2r"0X:&["<Z7``M#:%LB:=/$o Im^4b0fdDLDD`h%.i.\LO&6Gwd3Rj@+1^)di2Hg.):dBD0(
2024-04-16 17:44:17 UTC	7946	OUT	Data Raw: 58 ce f1 14 6a d9 2d fb 10 89 ba d3 50 4b 3b b7 be 04 91 67 74 b4 cd fd 0d 3d 83 bf cd 65 a6 ae d2 af 99 4b ac af 73 ba c4 ac 67 25 31 b9 9c d7 b8 1b a5 bb 4b 5f 1e bf 3c 7c 6f 4d 5e 8c b5 36 1a da cc 27 eb 64 92 5b c3 8d 9a 3e 00 bd 5a f7 ac 3b 16 d3 ab 8b 8b 85 93 87 d3 f5 ed 2c f4 b8 ca b7 ef de bf 7e fb 06 6d 92 4c bc c2 41 3e 77 3f 9c 6e d9 46 8c 92 a5 cb d6 d8 37 1d 6b 95 0f f3 02 9d a6 4e 51 a9 5b b3 cd 92 f0 04 1f 13 08 a1 f9 4d f7 34 17 c6 40 dc 75 5e ce 27 65 51 e3 1d cf 90 29 a2 8f 98 1b c6 4d 46 9c a6 1a 16 6a cb 8c 97 c9 fc df ff cf a4 a8 b9 14 47 e2 c4 c8 9c f4 46 5a 2f d8 cc 27 7c 8c de 66 90 7e 37 43 63 97 de cd 23 3d af 9b e7 bf fc 2f ff c7 7f f9 df fe af 5e 06 80 bf 93 e1 f9 32 a9 8b b2 97 01 46 ab 93 e1 4d 0e b4 0d e6 25 eb 41 62 46 c8 Data Ascii: Xj-PK;gt=eKsg%1K_<\|oM^6'd[>Z;,~mLA>w?nF7kNQ[M4@u^'eQ)MFjGFZ/'\|f~7Cc#=/^2FM%AbF
2024-04-16 17:44:18 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:18 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:18 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 35 37 39 39 33 7d 0a Data Ascii: {"BundleTime":1713289457993}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.5	50589	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:17 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAB67AeiOAWIAAVGA.RFg8ojP8Ij00uY_yr22aRfttz0ssi0dIjneZhh97Vis&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 6tNEWs+0FU/fUl56Y1O2OQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:18 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:18 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.5	50591	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift5ca05924052b238152c7d8042c4 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:17 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 66f329715210d11f7f450b703957691a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: wSJ9NgTpVZ4g5ETVQqA2tFF9Ywzv5Tv616StyCgtjMnvFsogz7YDzw==
2024-04-16 17:44:18 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.5	50590	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 868 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	868	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 52 4f 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,"countryCode":"RO"},"userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-16 17:44:18 UTC	670	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:18 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: e1280a1d594c217c content-length: 1014 x-envoy-upstream-service-time: 81 server: istio-envoy connection: close
2024-04-16 17:44:18 UTC	1014	IN	Data Raw: 7b 22 69 64 22 3a 22 34 62 66 38 31 64 39 34 61 37 62 63 65 33 61 30 38 36 61 63 64 34 38 61 64 62 35 37 65 38 30 32 22 2c 22 75 73 65 72 49 64 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 35 66 31 33 33 36 34 33 2d 38 38 63 37 2d 34 38 37 34 2d 39 30 64 38 2d 31 31 63 34 35 64 34 34 66 61 39 34 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"4bf81d94a7bce3a086acd48adb57e802","userId":"305622db-cab4-46c0-8a17-15a582e0ed4c","anonymousId":"5f133643-88c7-4874-90d8-11c45d44fa94","companyId":null,"internal":false,"attributes":{"ds_a":"305622db-cab4-46c0-8a17-15a582e0ed4c","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.5	50592	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	611	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=1&ClientTime=1713289456916&PageStart=1713289454254&PrevBundleTime=0&LastActivity=825&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:18 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:18 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.5	50594	13.32.151.55	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 468 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	468	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 32 38 39 34 35 35 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 65 38 36 63 31 39 63 65 2d 33 31 37 36 2d 34 39 38 38 2d 38 61 30 34 2d 34 31 65 32 65 33 39 61 36 31 37 64 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=305622db-cab4-46c0-8a17-15a582e0ed4c&sessionStarted=1713289455&targeting_context=%7B%22sessionId%22%3A%22e86c19ce-3176-4988-8a04-41e2e39a617d%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-16 17:44:19 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Tue, 16 Apr 2024 17:44:18 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: b16d54dd2576a6f9 vary: Accept-Encoding x-envoy-upstream-service-time: 209 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 fa3f15cd366c19b686cb5e8157aee206.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C2 X-Amz-Cf-Id: dsossTiRvIwtavbhir2UkZnsdNWabQGBTPx4d3RvkYfdQM_p14fvWw==
2024-04-16 17:44:19 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 2c 22 63 69 74 79 22 3a 22 41 74 6c 61 6e 74 61 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 32 34 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 33 30 33 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 33 2e 37 34 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 38 34 2e 33 38 37 31 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e 22 3a Data Ascii: 4151{"location":{"ip":"81.181.57.52","city":"Atlanta","subdivision":"Georgia","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":524,"postalCode":"30301","latitude":33.7485,"longitude":-84.3871},"tokenResult":{"accessToken":
2024-04-16 17:44:19 UTC	1242	IN	Data Raw: 22 3a 7b 22 63 6f 6e 73 65 6e 74 44 65 63 6c 69 6e 65 64 4d 65 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 68 61 74 65 61 6e 64 6f 2e 20 50 Data Ascii: ":{"consentDeclinedMessage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests chateando. P
2024-04-16 17:44:19 UTC	16055	IN	Data Raw: 33 65 61 66 0d 0a 73 6f 75 74 65 6e 69 72 20 6c 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 c3 a9 73 20 64 65 20 6e 6f 74 72 65 20 43 68 61 74 62 6f 74 2c 20 76 6f 75 73 20 64 65 76 65 7a 20 61 63 74 69 76 65 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 2e 20 54 6f 75 74 65 66 6f 69 73 2c 20 76 6f 75 73 20 70 6f 75 76 65 7a 20 6c 65 73 20 64 c3 a9 73 61 63 74 69 76 65 72 20 6c 6f 72 73 71 75 65 20 6c 65 20 63 6c 61 76 61 72 64 61 67 65 20 65 73 74 20 74 65 72 6d 69 6e c3 a9 2e 20 41 63 74 69 76 65 7a 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 20 65 6e 20 61 6c 6c 61 6e 74 20 64 61 6e 73 20 c2 ab c2 a0 50 61 72 61 6d c3 a8 74 72 65 73 20 64 65 73 20 63 6f 6f 6b 69 65 73 c2 a0 c2 bb 20 61 Data Ascii: 3eafsoutenir les fonctionnalits de notre Chatbot, vous devez activer les cookies fonctionnels. Toutefois, vous pouvez les dsactiver lorsque le clavardage est termin. Activez les cookies fonctionnels en allant dans Paramtres des cookies a
2024-04-16 17:44:19 UTC	12174	IN	Data Raw: 32 66 38 36 0d 0a 36 39 36 36 2c 35 32 34 37 37 38 37 2c 35 32 39 31 38 38 37 2c 35 32 38 35 36 35 33 2c 35 32 31 33 31 38 30 2c 35 32 31 33 31 38 37 2c 35 32 35 35 32 35 36 2c 35 32 36 35 35 38 32 2c 35 32 36 36 35 38 39 2c 35 32 34 37 35 33 35 2c 35 32 34 36 31 37 36 2c 35 32 34 33 36 34 37 2c 35 32 36 37 30 33 30 2c 35 32 31 33 31 36 32 2c 35 32 33 34 38 39 33 5d 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 53 65 74 74 69 6e 67 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 6e 64 69 76 69 64 75 61 6c 45 76 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 45 76 65 6e 74 4d 61 70 70 69 6e 67 73 Data Ascii: 2f866966,5247787,5291887,5285653,5213180,5213187,5255256,5265582,5266589,5247535,5246176,5243647,5267030,5213162,5234893],"integrations":{"googleAnalyticsSettings":{"enabled":true,"trackingName":null,"individualEventsEnabled":false,"enabledEventMappings
2024-04-16 17:44:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.5	50593	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 597 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	597	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 65 64 39 31 63 30 38 38 2d 37 62 63 31 2d 34 64 61 37 2d 61 65 64 33 2d 36 36 61 34 61 34 38 63 61 34 35 31 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 36 34 32 31 61 35 61 33 2d 37 38 65 39 2d 34 38 63 63 2d 38 38 36 63 2d 33 32 63 36 35 38 35 31 32 37 65 31 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%22ed91c088-7bc1-4da7-aed3-66a4a48ca451%22%2C%22instanceId%22%3A%226421a5a3-78e9-48cc-886c-32c6585127e1%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-16 17:44:19 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:18 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: aa9b206d99a4fba7 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-04-16 17:44:19 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.5	50595	3.94.218.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftca01c0448af836b3cce1d90b3f1 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:18 GMT server: istio-envoy connection: close
2024-04-16 17:44:19 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.5	50596	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:18 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=4&ClientTime=1713289457920&PageStart=1713289442223&PrevBundleTime=1713289454241&LastActivity=11952&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 810 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:18 UTC	810	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 54 69 6f db 38 10 fd 2b 5a 2d 2a b4 00 25 f1 14 29 77 b5 45 0e f7 40 9a 8d 51 bb 0d ba 8b a2 a0 24 da 56 2d 4b 8a 48 3b 4d 8f ff be 13 27 71 ae 2e 1a f4 eb 8a 04 01 8d de 3c 72 de d3 f0 ab 3f 36 27 fe 80 23 ff 78 6e 1a 7f 40 28 c1 12 f9 c3 b5 b3 fe e0 9f af fe 41 d5 94 fe 40 40 68 a7 9f 9d 87 28 f2 e7 ce 75 76 10 c7 bd 8d a6 ab ba b6 ae ed cf a2 a2 5d c6 bd 29 e2 7c d5 94 b5 89 d7 f4 d9 51 3f 7b 55 66 84 ee 8e f8 30 78 6b 4d 0f 6f 26 d7 a4 48 24 0f 75 8a 45 c8 b9 2a c2 5c 63 1e 8a 9c e7 09 21 29 61 a9 08 c6 c6 da aa 6d 00 8e 4b a3 14 e7 d3 10 27 4c 02 9c e6 a1 4a a5 0c 4b c6 18 9d 62 6e 30 d5 c1 48 cf 0c 60 69 4e 4a a1 29 0b a5 d1 09 60 b9 09 35 51 d3 b0 14 05 4f 89 56 86 14 06 a8 4f 32 16 ec d5 95 69 dc a4 5a 9a 8c 48 c2 Data Ascii: Tio8+Z-%)wE@Q$V-KH;M'q.<r?6'#xn@(A@@h(uv])\|Q?{Uf0xkMo&H$uE\c!)amK'LJKbn0H`iNJ)`5QOVO2iZH
2024-04-16 17:44:19 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:19 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:19 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 35 38 39 39 39 7d 0a Data Ascii: {"BundleTime":1713289458999}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.5	50597	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	625	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=2b1d5a23-7ea6-444e-a18f-d5c491a8e1ce&Seq=4&ClientTime=1713289457920&PageStart=1713289442223&PrevBundleTime=1713289454241&LastActivity=11952&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:19 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:19 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.5	50598	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift5196fa24786993f0874a067b556 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:19 GMT server: istio-envoy connection: close
2024-04-16 17:44:19 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.5	50600	172.217.215.138	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	1268	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&gtm=45je44f0v879027428z8856130670za200&_p=1713289448217&gcs=G111&gcd=13v3v3v3v5&npa=0&dma=0&gdid=dYWJhMj&cid=426113818.1713289394&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&dr=&dl=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&sid=1713289395&sct=1&seg=1&dt=Intelligent%20Agreement%20Management%20(IAM)%20%7C%20Docusign&_s=1&tfd=12200 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 741 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	741	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 65 70 2e 67 74 6d 5f 73 65 74 74 69 6e 67 3d 34 30 35 25 32 30 25 37 43 25 32 30 47 54 4d 2d 4e 58 58 32 4d 34 37 25 32 30 25 37 43 25 32 30 26 65 70 2e 68 6f 73 74 6e 61 6d 65 3d 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 26 65 70 2e 70 61 67 65 5f 6e 61 6d 65 3d 69 61 6d 25 32 30 6f 76 65 72 76 69 65 77 26 65 70 2e 70 61 67 65 5f 73 65 63 74 69 6f 6e 3d 70 6c 61 74 66 6f 72 6d 26 75 70 2e 63 6c 69 65 6e 74 5f 69 64 3d 34 32 36 31 31 33 38 31 38 2e 31 37 31 33 32 38 39 33 39 34 26 75 70 2e 75 5f 75 75 69 64 3d 33 30 35 36 32 32 64 62 2d 63 61 62 34 2d 34 36 63 30 2d 38 61 31 37 2d 31 35 61 35 38 32 65 30 65 64 34 63 0d 0a 65 6e 3d 64 65 6d 61 6e 64 62 61 73 65 5f 6c 6f 61 64 65 64 26 65 70 2e 67 74 6d 5f 73 65 Data Ascii: en=page_view&ep.gtm_setting=405%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=www.docusign.com&ep.page_name=iam%20overview&ep.page_section=platform&up.client_id=426113818.1713289394&up.u_uuid=305622db-cab4-46c0-8a17-15a582e0ed4cen=demandbase_loaded&ep.gtm_se
2024-04-16 17:44:19 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Tue, 16 Apr 2024 17:44:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.5	50599	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 588 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	588	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 38 31 63 39 38 61 38 33 2d 31 66 33 39 2d 34 65 31 34 2d 38 64 66 65 2d 64 63 31 32 39 61 36 33 35 66 63 34 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 65 64 39 31 63 30 38 38 2d 37 62 63 31 2d 34 64 61 37 2d 61 65 64 33 2d 36 36 61 34 61 34 38 63 61 34 35 31 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 36 34 32 31 61 35 61 33 2d 37 38 65 39 2d Data Ascii: metric_payload=%7B%22id%22%3A%2281c98a83-1f39-4e14-8dfe-dc129a635fc4%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%22ed91c088-7bc1-4da7-aed3-66a4a48ca451%22%2C%22instanceId%22%3A%226421a5a3-78e9-
2024-04-16 17:44:19 UTC	691	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:19 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: b91bac82e4fb91f0 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 14 server: istio-envoy connection: close
2024-04-16 17:44:19 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.5	50601	3.163.115.26	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:19 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftb9e153f450bb441ca03577d5199 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 0 date: Tue, 16 Apr 2024 17:44:19 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 af0d1e38702f3d1f33999fe372836998.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: 1jUnr9m815yYxjs5i93BZt8KX8o_O11OBvUmr43Go42r1JjSi6fWKA==
2024-04-16 17:44:19 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.5	50602	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:19 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPB1AuiOAWIAAVGA.0uuuWt-9hy6Iz6GAspno_kpL1o7hOGFHLDy259PcZQA&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: jON9gWlY8y/aounyQ27rNg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:19 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:19 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.5	50603	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:20 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 424 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:20 UTC	424	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 35 33 36 35 37 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289453657,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:20 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:20 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 49 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.5	50604	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:20 UTC	809	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAHlEAuiOAWIAAVGA.vYbDXxoze0pSIXjQy5vSQckNFv2H6SCytLJ6hFBnaVE&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 60Lfg546uZ/GhF1Bd5SDkw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:20 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:20 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.5	50605	50.16.7.188	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:20 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:20 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftedfe98e41c9819322f699e328bd cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:19 GMT server: istio-envoy connection: close
2024-04-16 17:44:20 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.5	50606	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:20 UTC	880	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=2&ClientTime=1713289459367&PageStart=1713289454254&PrevBundleTime=1713289457993&LastActivity=3294&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 14907 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:20 UTC	14907	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed bd 8b 77 db b6 d2 38 f8 af e8 e7 3d 51 db f3 89 12 f1 22 c8 74 b5 5d c7 71 da 34 ef 3a 8f 36 b7 3d 3a 20 09 ca 8c 29 51 21 29 3f 72 bf bb 7f fb 0e 40 49 16 41 89 92 2c e7 d1 5b d7 29 25 81 03 60 30 98 19 cc e0 31 f8 f7 c1 89 fc 78 70 1f 77 0e de 9d ca f1 c1 7d c7 a1 9d 83 e3 f3 22 3f b8 ff af 7f 1f 3c 89 c7 e1 c1 7d ee 76 0e 0e b3 a1 4a fa 97 dd 41 f0 a7 a0 88 fd d7 5f 4b b9 fe d3 59 07 ce 4a 70 b4 06 dc b3 af c1 01 98 af 83 73 6a 70 9d 7f 1d 74 83 3c b7 d0 e4 2a 88 4f b3 d6 bf 5b 61 9c 4f 12 71 75 bf 15 25 f2 f2 47 fd b4 c2 38 93 41 11 a7 e3 fb ad 20 4d a6 a3 f1 8f ad a1 98 dc 6f d9 5d 96 c9 d1 8f ad ff 1c 74 aa c5 4c 93 d6 ff b4 4e 31 14 37 12 d9 30 1e 5b 45 0a e0 c8 04 2f 3e 5e 91 b3 4f fb 56 3a 2b 65 cb 3a 79 1c 7f b8 Data Ascii: w8=Q"t]q4:6=: )Q!)?r@IA,[)%`01xpw}"?<}vJA_KYJpsjpt<*O[aOqu%G8A Mo]tLN170[E/>^OV:+e:y
2024-04-16 17:44:20 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:20 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:20 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 36 30 34 33 36 7d 0a Data Ascii: {"BundleTime":1713289460436}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.5	50607	35.186.194.58	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:20 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=2&ClientTime=1713289459367&PageStart=1713289454254&PrevBundleTime=1713289457993&LastActivity=3294&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:21 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:21 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:21 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.5	50608	34.234.212.207	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:21 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPB1AuiOAWIAAVGA.0uuuWt-9hy6Iz6GAspno_kpL1o7hOGFHLDy259PcZQA&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: HK66rrPwtOqTfSzdGvX6aQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:21 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:21 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.5	50610	34.193.113.164	443	6776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:24 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:24 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 35 37 34 33 33 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289457433,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:24 UTC	246	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:24 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 112 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
713	192.168.2.5	50611	34.234.212.207	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:24 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE2MzI4MDkzNzAtMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE2MzI4MDkzNzBkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPB1AuiOAWIAAVGA.0uuuWt-9hy6Iz6GAspno_kpL1o7hOGFHLDy259PcZQA&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: H1uW2isVWloQyW3naeJJJQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 17:44:24 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Tue, 16 Apr 2024 17:44:24 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port
714	192.168.2.5	50612	54.147.21.139	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:24 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:24 UTC	335	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 38 33 30 2e 39 30 30 30 30 30 30 30 30 30 32 33 33 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 Data Ascii: metrics=%5B%7B%22value%22%3A830.9000000000233%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%
2024-04-16 17:44:25 UTC	690	IN	HTTP/1.1 200 OK date: Tue, 16 Apr 2024 17:44:24 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: dfae1fcf50aa83ca vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-04-16 17:44:25 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port
715	192.168.2.5	50613	34.193.113.164	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:25 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:25 UTC	885	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 35 39 31 31 34 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289459114,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:25 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:25 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
716	192.168.2.5	50614	35.186.194.58	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:25 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=3&ClientTime=1713289464365&PageStart=1713289454254&PrevBundleTime=1713289460436&LastActivity=8293&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 623 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:25 UTC	623	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a a5 53 6d 4f db 30 10 fe 2b 99 3f 54 20 39 89 df 1d 97 75 13 74 68 9b 80 51 a9 45 68 42 7c 70 12 37 b5 48 93 92 a4 2d 2f e2 bf ef ca 28 05 69 1f a6 cd 17 59 97 f3 3d f7 f2 9c fd 88 c6 ee 16 f5 39 46 97 33 57 a1 be 62 54 63 74 bc ea 5a d4 bf 7a 44 27 be ca 51 5f 82 e9 b0 29 36 26 86 d1 ac eb 16 6d 3f 8e 9b 36 9a 2e cb b2 ed ea e6 3e ca ea 79 dc b8 2c 4e 97 55 5e ba 78 c5 3e 9f 37 c5 f7 7c 40 d9 d1 48 1c f7 2e 5a d7 c0 9f 4b 2d cd 94 16 a1 35 44 86 42 24 59 98 5a 22 42 99 8a 54 51 6a 28 37 b2 37 76 6d eb eb 0a dc 49 ee 92 44 88 69 48 14 d7 e0 ce d2 30 31 5a 87 39 e7 9c 4d 89 70 84 d9 de c8 16 0e 7c 25 77 09 84 66 a1 75 8a 87 c2 50 1a 9a 34 21 61 ae 73 e5 20 af 12 8a 43 e8 db 01 eb 0d 4b ef aa 6e e2 e7 6e 40 35 e5 2c 31 42 1a ae Data Ascii: SmO0+?T 9uthQEhB\|p7H-/(iY=9F3WbTctZzD'Q_)6&m?6.>y,NU^x>7\|@H.ZK-5DB$YZ"BTQj(77vmIDiH01Z9Mp\|%wfuP4!as CKnn@5,1B
2024-04-16 17:44:25 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 17:44:25 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:25 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 32 38 39 34 36 35 34 34 32 7d 0a Data Ascii: {"BundleTime":1713289465442}

Session ID	Source IP	Source Port	Destination IP	Destination Port
717	192.168.2.5	50615	34.197.111.80	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:25 UTC	1401	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fintelligent-agreement-management&uid=ajHnYbZeVu4tl5p03thM2g&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk; sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCy8fqwBjABOgT87-jmQgRZF3xK.LKs%2Bdz44p69raQ0x4JHLjo3aqOy9SoPCoi1Kb0p5VFk
2024-04-16 17:44:25 UTC	246	IN	HTTP/1.1 204 No Content Date: Tue, 16 Apr 2024 17:44:25 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port
718	192.168.2.5	50616	50.16.7.188	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:25 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:25 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift2ca7da34571a24ab10b17809efe cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Tue, 16 Apr 2024 17:44:25 GMT server: istio-envoy connection: close
2024-04-16 17:44:25 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port
719	192.168.2.5	50617	35.186.194.58	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:25 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=eba1c674-a905-448c-ba04-5b4b61191395&SessionId=0de8844f-0637-442b-8977-d3332f04e02a&PageId=53e8c672-ae63-4911-9b80-d7d6eeba6463&Seq=3&ClientTime=1713289464365&PageStart=1713289454254&PrevBundleTime=1713289460436&LastActivity=8293&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:26 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 17:44:26 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 17:44:26 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
720	192.168.2.5	50618	34.193.113.164	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 17:44:26 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 424 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 17:44:26 UTC	424	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 32 38 39 34 35 39 35 39 39 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713289459599,"level":"INFO","message":"WS Reconnec
2024-04-16 17:44:26 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Tue, 16 Apr 2024 17:44:26 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 4 connection: close

Target ID:	0
Start time:	19:42:47
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:42:51
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:42:53
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	19:43:18
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5740 --field-trial-handle=2076,i,11377337130647510782,13246029813931777108,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Windows Analysis Report
https://na3.docusign.net/Member/EmailStart.aspx?a=55ceeca5-c772-4420-b486-8bbc6d558c26&r=ec33c971-19d4-4312-a402-021325011107